This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/62hpxeJSuNd2baMaGn8OiqCSVOA.roa
File:                     62hpxeJSuNd2baMaGn8OiqCSVOA.roa (raw, json)
Hash identifier:          JE6+vE4YkXNcZOmxhtyCBOzbLXwnOn912a132V4QTp0=
Subject key identifier:   EB:68:69:C5:E2:52:B8:D7:76:6D:A3:1A:1A:7F:0E:8A:A0:92:54:E0
Certificate issuer:       /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial:       224A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/62hpxeJSuNd2baMaGn8OiqCSVOA.roa
Signing time:             Fri 06 Jun 2025 16:08:50 +0000
ROA not before:           Fri 06 Jun 2025 16:08:50 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     4812
IP address blocks:        2407:9b40::/32 maxlen: 64
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8778 (0x224a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
        Validity
            Not Before: Jun  6 16:08:50 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=EB6869C5E252B8D7766DA31A1A7F0E8AA09254E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:57:3e:77:fa:21:05:fe:f7:7b:97:d9:dc:
                    65:98:d3:ca:54:e2:25:9e:9c:6d:81:e1:be:1a:0b:
                    38:24:47:70:79:36:76:fa:72:ec:1a:eb:f8:d4:32:
                    9d:91:a2:e2:a8:30:43:9e:30:db:5e:6d:38:70:b1:
                    ac:4f:b7:4b:2f:e7:84:8b:74:4d:b4:dd:c4:d6:b2:
                    41:d2:66:3f:4f:19:01:6a:e5:ac:c8:1e:ee:64:93:
                    43:23:a3:5e:f3:39:00:6a:a1:81:b1:fc:46:22:38:
                    da:ec:a6:ce:17:a2:46:8d:54:f6:5c:72:d6:2a:ef:
                    09:d6:f6:3f:31:f1:f5:96:53:72:cf:2f:d4:ca:e2:
                    da:ed:21:7c:12:bd:24:56:a8:c0:ad:32:9c:02:d7:
                    07:c3:a2:df:ec:eb:2e:d6:1d:2a:88:eb:47:eb:09:
                    19:8a:e6:ed:4d:75:4a:52:73:32:5c:b0:79:84:59:
                    6b:0d:b5:15:66:66:ec:d1:63:0e:3d:8d:17:4d:3d:
                    ea:0d:a2:90:b2:f4:20:8d:99:5f:f7:35:01:54:e9:
                    46:76:82:7f:af:db:ed:2b:ce:9a:e8:5b:e6:06:c9:
                    12:e9:d8:d4:5d:b8:ba:22:a6:ea:5b:4a:a0:6f:46:
                    f4:e3:33:54:ea:91:b5:1b:f8:f3:59:c4:14:9c:4a:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:69:C5:E2:52:B8:D7:76:6D:A3:1A:1A:7F:0E:8A:A0:92:54:E0
            X509v3 Authority Key Identifier:
                keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/62hpxeJSuNd2baMaGn8OiqCSVOA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:ae:35:34:11:bf:79:cb:39:0d:d2:14:e5:46:b3:16:b1:b1:
         d0:72:e6:72:43:ee:60:15:f6:d0:4d:3f:51:03:5c:2e:54:f2:
         e3:ce:f3:74:54:d2:dc:63:b7:cb:84:ac:92:50:df:e2:63:19:
         e0:dc:91:ac:20:b1:34:3d:d3:da:0e:44:3e:b6:e0:ff:0d:ef:
         67:8b:c2:7d:23:8f:25:95:ce:ad:c2:ec:d8:d7:dc:7a:52:ba:
         58:72:fe:c5:20:fb:b4:ef:4c:68:cf:4e:29:f4:33:15:e5:a8:
         2f:62:92:61:78:44:23:a3:fc:4e:23:ec:e8:81:39:7a:3b:5a:
         dd:24:03:ff:e3:76:62:8c:0e:fd:bb:3a:9f:ac:7c:56:9a:08:
         26:48:38:84:5c:7d:93:f3:e0:90:22:6a:a1:21:0b:40:85:02:
         60:f7:f7:44:60:be:b8:a5:d6:82:b7:1b:c6:6d:05:8c:8e:77:
         05:b4:93:fa:13:77:bf:d3:58:4f:7f:1e:f4:77:c7:4b:7c:19:
         dc:08:85:61:5f:51:34:bc:60:d7:53:cc:0a:65:72:a2:c2:1c:
         12:a1:ca:56:58:55:05:a9:cc:8e:c8:60:bd:72:8d:a0:15:ae:
         9d:47:50:8b:6a:d8:36:c9:38:5a:56:79:66:5b:7c:8d:7f:18:
         63:e7:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:19:17 2026 by rpki-client