This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/CPQ5xdVLrQVsUzvMAOYqpaPFvcs.roa
File:                     CPQ5xdVLrQVsUzvMAOYqpaPFvcs.roa (raw, json)
Hash identifier:          GJNPXsw+RZUQjB1lcZSGTf4FB7MQREcGIn/1nHo/6Fo=
Subject key identifier:   08:F4:39:C5:D5:4B:AD:05:6C:53:3B:CC:00:E6:2A:A5:A3:C5:BD:CB
Certificate issuer:       /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial:       23CC
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/CPQ5xdVLrQVsUzvMAOYqpaPFvcs.roa
Signing time:             Mon 15 Dec 2025 12:20:25 +0000
ROA not before:           Mon 15 Dec 2025 12:20:25 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     4811
IP address blocks:        124.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9164 (0x23cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
        Validity
            Not Before: Dec 15 12:20:25 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=08F439C5D54BAD056C533BCC00E62AA5A3C5BDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:ff:3a:d0:1b:29:8a:02:4a:f4:a0:43:c2:
                    45:9d:57:cb:c6:57:a3:a1:df:33:7e:46:6a:03:27:
                    c2:74:fc:c2:92:0b:d4:7d:d1:8d:78:a1:22:af:5f:
                    9e:f7:6a:3b:75:93:9b:4f:ba:7a:0b:d6:4a:1f:48:
                    0a:c9:e0:9f:64:be:06:8b:be:f7:4e:b4:5a:2e:15:
                    3c:d9:8d:b5:86:09:e8:34:2f:8c:84:53:7c:ec:b3:
                    f3:01:c5:53:6e:99:69:3f:c0:fb:c6:f6:21:0e:bb:
                    de:0f:1b:a1:92:9e:9b:4b:81:02:c3:1f:95:97:16:
                    5a:8c:f7:7d:fd:a2:7e:69:82:47:44:f6:59:ab:dd:
                    26:4f:d0:aa:33:e6:61:68:07:92:12:e0:28:41:46:
                    6b:cc:50:41:1d:3a:6c:d4:c1:f4:f8:63:df:6b:cb:
                    1b:a3:53:2c:2b:31:59:35:82:51:e7:d8:7b:3a:8b:
                    96:3e:a5:94:fc:e3:7e:6e:40:25:7d:7a:44:de:e0:
                    06:6a:bc:ea:bc:61:c9:f7:47:45:14:f6:b1:c7:f0:
                    20:1e:98:38:5c:d8:0f:b0:b8:5f:ca:aa:ff:ca:8c:
                    c1:fb:86:fc:ff:9f:a2:43:73:d8:d5:d7:bf:54:36:
                    92:d8:b4:1c:ea:13:dd:10:a0:c0:a2:9f:b9:ee:28:
                    6b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:39:C5:D5:4B:AD:05:6C:53:3B:CC:00:E6:2A:A5:A3:C5:BD:CB
            X509v3 Authority Key Identifier:
                keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/CPQ5xdVLrQVsUzvMAOYqpaPFvcs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:71:ed:a0:f7:92:85:32:3b:87:c1:9a:a4:dc:88:bb:12:
         de:87:1c:bf:d7:74:06:a5:37:51:15:66:d9:7c:37:e5:f4:17:
         d3:d0:e4:8a:72:ac:75:70:a8:4a:3d:85:64:80:e3:16:b9:fe:
         78:a2:7d:9b:bf:a6:b2:77:0d:08:37:27:1f:09:14:8f:8e:a4:
         a3:5c:2b:2f:a8:90:1f:af:f2:a2:0c:54:51:a1:95:d6:b0:26:
         e3:27:e3:43:c3:87:a5:94:94:dd:81:89:70:c6:75:44:96:a1:
         d8:29:3a:26:c5:f7:36:12:5f:41:cc:67:da:99:c6:71:12:ad:
         6f:76:97:31:f5:f4:f8:fb:83:2f:34:65:0e:78:0b:4a:72:34:
         46:c3:2f:72:ae:33:28:ab:a0:d3:b2:e7:2d:12:a2:b3:05:2b:
         39:fd:b4:fa:4b:bf:b5:43:ea:50:25:90:ec:df:1e:24:6b:89:
         3a:be:89:f9:43:31:d3:99:29:40:c1:8d:97:5b:97:37:4e:94:
         21:8c:40:66:82:ec:05:94:62:86:f3:8f:f7:3c:3b:75:73:83:
         ed:f6:ea:45:62:00:c6:cb:e1:37:f1:0d:20:ef:77:e3:8a:62:
         22:ee:60:d4:61:3c:92:69:93:18:34:88:79:c9:c6:fb:a5:47:
         fd:1f:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:53:42 2025 by rpki-client