This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/GGMuGIQgz8caAwog5vFeMdFEjoY.roa
File:                     GGMuGIQgz8caAwog5vFeMdFEjoY.roa (raw, json)
Hash identifier:          z8mzL9zIHb4u0zLECCH3kF2DAoGaTPMJWLUzDWRE/MI=
Subject key identifier:   18:63:2E:18:84:20:CF:C7:1A:03:0A:20:E6:F1:5E:31:D1:44:8E:86
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       CCB3
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/GGMuGIQgz8caAwog5vFeMdFEjoY.roa
Signing time:             Sun 21 Dec 2025 09:39:59 +0000
ROA not before:           Sun 21 Dec 2025 09:39:59 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     63612
IP address blocks:        103.45.128.0/19 maxlen: 19
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52403 (0xccb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Dec 21 09:39:59 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=18632E188420CFC71A030A20E6F15E31D1448E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b2:d2:40:ab:0f:7a:56:92:7d:6e:d0:c4:62:
                    17:85:cb:3f:c5:eb:e8:0f:b3:e0:89:4d:4a:67:80:
                    a4:e6:61:5b:c0:a2:17:65:22:a3:04:e4:6f:fe:02:
                    9e:57:9e:d6:40:59:86:dc:8c:3f:6a:68:c7:07:8a:
                    3e:54:98:96:48:c9:0d:02:18:55:a5:19:47:28:d9:
                    13:92:28:6e:f9:34:5c:62:f2:1b:c4:ee:28:0b:5d:
                    c7:2e:b1:0d:e7:bc:fe:ae:2c:01:13:59:9b:ef:6b:
                    d0:39:ce:81:65:3c:70:9e:de:bf:f3:ad:9c:be:89:
                    a5:dd:8c:16:a9:18:2c:50:3e:8d:4b:41:91:cc:ac:
                    82:ac:39:8a:45:7d:7f:76:9a:04:4c:28:ad:6a:28:
                    cd:1f:c3:8d:d8:7a:49:6b:cd:08:57:f8:6e:ef:0e:
                    43:e1:4c:e3:ce:b5:5c:eb:94:9b:37:e7:53:99:06:
                    be:62:2c:4a:09:22:59:6e:b1:bb:2a:cb:5b:89:8e:
                    c7:2a:bc:97:9f:8a:6c:a5:95:8e:87:18:f0:15:c1:
                    1c:3b:26:3d:5a:8a:a3:eb:8a:f1:4c:ff:55:f8:6b:
                    7a:f8:d6:02:6c:4c:d0:32:87:fc:f0:1d:1c:07:16:
                    f6:54:09:dd:4d:d9:fb:5e:4e:9a:82:c9:d4:e9:bc:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:2E:18:84:20:CF:C7:1A:03:0A:20:E6:F1:5E:31:D1:44:8E:86
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/GGMuGIQgz8caAwog5vFeMdFEjoY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:e0:af:6f:37:49:cf:98:3e:40:a2:d2:cf:00:78:89:94:af:
         21:fa:d5:0e:10:2b:a3:3c:ed:bc:87:70:1a:bf:d3:69:54:b8:
         0a:63:7a:d9:f4:b5:f4:f1:e6:c4:a8:63:0d:b4:ed:76:7e:b0:
         e3:54:6c:53:e4:09:8b:a4:d5:43:ab:fe:4e:49:4d:d3:1e:4a:
         71:f3:64:31:3d:f5:11:73:b6:4c:f8:d3:ae:a1:34:45:10:2a:
         20:01:7b:73:2a:3e:4b:02:b6:52:f6:ad:7e:5a:a2:a0:34:b1:
         60:eb:b2:21:f9:db:a2:9a:b6:ef:04:1d:82:53:65:f7:60:f7:
         9a:da:5a:d5:1f:e6:f3:45:aa:84:96:b2:2b:c6:52:a7:41:01:
         19:a7:9d:48:e1:ea:16:ac:3f:7c:27:f7:13:e8:6f:1a:e6:d0:
         63:d5:73:dc:8c:7a:9f:46:f1:b0:42:ad:dc:12:03:6f:62:99:
         ec:4f:32:19:b8:28:06:53:8a:93:13:04:1e:e1:5b:31:cc:55:
         7d:94:7f:61:0b:db:81:c1:da:24:9d:e7:4a:ea:06:e8:5e:e8:
         6a:68:de:69:c7:74:98:3f:9e:00:ee:b5:9d:d4:89:ee:70:0f:
         cc:7f:48:b4:f8:b3:8f:a7:6c:ad:47:cd:d7:86:40:e3:e1:fc:
         df:7e:a4:b9
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgIDAMyzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB
RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjIx
MDkzOTU5WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEygxODYzMkUxODg0MjBD
RkM3MUEwMzBBMjBFNkYxNUUzMUQxNDQ4RTg2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4LLSQKsPelaSfW7QxGIXhcs/xevoD7PgiU1KZ4Ck5mFbwKIX
ZSKjBORv/gKeV57WQFmG3Iw/amjHB4o+VJiWSMkNAhhVpRlHKNkTkihu+TRcYvIb
xO4oC13HLrEN57z+riwBE1mb72vQOc6BZTxwnt6/862cvoml3YwWqRgsUD6NS0GR
zKyCrDmKRX1/dpoETCitaijNH8ON2HpJa80IV/hu7w5D4UzjzrVc65SbN+dTmQa+
YixKCSJZbrG7KstbiY7HKryXn4pspZWOhxjwFcEcOyY9Woqj64rxTP9V+Gt6+NYC
bEzQMof88B0cBxb2VAndTdn7Xk6agsnU6bySDwIDAQABo4IB8zCCAe8wHQYDVR0O
BBYEFBhjLhiEIM/HGgMKIObxXjHRRI6GMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd
MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS
oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2
NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX
MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB
/wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v
cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL0dHTXVHSVFnejhj
YUF3b2c1dkZlTWRGRWpvWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j
bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAFngr283Sc+YPkCi0s8AeImUryH6
1Q4QK6M87byHcBq/02lUuApjetn0tfTx5sSoYw207XZ+sONUbFPkCYuk1UOr/k5J
TdMeSnHzZDE99RFztkz4066hNEUQKiABe3MqPksCtlL2rX5aoqA0sWDrsiH526Ka
tu8EHYJTZfdg95raWtUf5vNFqoSWsivGUqdBARmnnUjh6hasP3wn9xPobxrm0GPV
c9yMep9G8bBCrdwSA29imexPMhm4KAZTipMTBB7hWzHMVX2Uf2EL24HB2iSd50rq
Buhe6Gpo3mnHdJg/ngDutZ3Uie5wD8x/SLT4s4+nbK1HzdeGQOPh/N9+pLk=
-----END CERTIFICATE-----
Generated at Sun Dec 21 12:25:55 2025 by rpki-client