This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa
File:                     x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa (raw, json)
Hash identifier:          KKLN3wj6w6+GZPg4mWY+9cSane2EnXX2A3ZYmL8Aiyg=
Subject key identifier:   C7:F9:D0:D0:3A:09:BB:39:BD:F6:5B:FA:27:09:DF:82:A7:10:42:52
Certificate issuer:       /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial:       1B1F
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa
Signing time:             Thu 25 Dec 2025 02:28:46 +0000
ROA not before:           Thu 25 Dec 2025 02:28:46 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     37963
IP address blocks:        103.49.76.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6943 (0x1b1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
        Validity
            Not Before: Dec 25 02:28:46 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=C7F9D0D03A09BB39BDF65BFA2709DF82A7104252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:55:9d:0b:64:d9:98:81:cd:b0:a7:64:ef:
                    e3:81:55:16:b5:9a:3d:d5:f2:e3:aa:51:55:95:44:
                    08:52:74:b3:d3:02:c3:30:08:7b:f1:99:2b:d1:df:
                    2e:d1:dd:40:69:f4:b3:d2:22:e2:43:9f:ba:46:a9:
                    39:48:ad:f8:bc:de:40:30:bd:27:f4:73:0d:79:72:
                    b7:c1:b1:33:83:8e:9f:1b:ec:13:c2:b9:3b:bd:ee:
                    ac:39:6f:0d:57:10:e4:88:1c:8f:2b:90:f4:5d:11:
                    72:5f:72:b7:5b:af:22:65:31:fc:4a:5b:35:2e:22:
                    7d:15:ca:f9:cd:c9:94:9e:26:1a:37:ed:db:51:ff:
                    b3:78:c0:f6:fd:1f:06:f0:12:fb:81:6b:03:39:e1:
                    8a:fa:31:98:2f:f0:a1:18:f4:e2:55:09:46:a5:79:
                    a1:f8:06:6e:6d:51:55:27:d9:09:79:5b:53:ee:ad:
                    2c:29:0d:48:8b:12:a3:ad:1c:74:02:71:87:49:1e:
                    7a:04:10:8b:35:14:09:78:9f:cf:5d:7c:09:0b:87:
                    e0:c0:d7:40:d0:24:0f:2f:75:c7:91:3c:85:76:51:
                    fc:b2:12:84:63:4e:29:56:b8:56:9f:b3:fb:7e:c6:
                    09:7c:9b:97:74:de:90:86:c3:1d:9e:77:44:b5:00:
                    9e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F9:D0:D0:3A:09:BB:39:BD:F6:5B:FA:27:09:DF:82:A7:10:42:52
            X509v3 Authority Key Identifier:
                keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/x_nQ0DoJuzm99lv6JwnfgqcQQlI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:f4:bf:e3:25:e9:61:23:b0:a5:6e:94:4b:f9:1d:3a:b0:b7:
         05:b0:06:6d:ef:3f:49:75:2e:5f:39:74:18:a4:ed:a0:f8:21:
         b3:98:60:9e:b0:99:36:d4:82:ed:78:8f:18:20:2f:4c:2d:e1:
         a3:23:52:3a:27:72:57:fa:eb:7d:44:ff:e5:8a:46:41:0a:49:
         08:ea:a6:cf:8d:80:d1:67:73:36:0a:18:a1:ae:9d:6e:f7:e0:
         de:fa:93:24:62:67:40:74:9d:0a:91:ef:1f:29:dc:ac:e4:55:
         c3:6e:c9:0c:60:dc:a9:6b:d6:d4:fe:87:69:4c:a3:a9:1c:fa:
         28:c8:70:be:cb:6d:84:67:78:79:b9:36:1a:fe:48:e7:92:19:
         0c:ca:79:49:b4:b3:01:cf:4e:c6:56:ee:6f:cc:5b:37:a1:4a:
         61:72:fd:f2:81:73:3f:ce:d6:55:6b:e6:21:7e:c3:39:a8:6b:
         d2:58:bb:39:fd:9a:b9:8f:6f:2d:46:11:a2:07:fb:bb:a8:06:
         23:ca:01:3d:5f:d9:89:d7:8d:e4:86:41:7f:3e:90:da:13:2f:
         22:21:04:6a:66:e7:50:55:10:b3:5d:8d:0e:2c:96:9d:8a:05:
         ba:aa:dc:83:38:f0:07:ad:14:b4:bd:d3:92:ad:66:c5:85:d6:
         56:a6:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:52:17 2026 by rpki-client