This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/bRncwWswvePqThFPw0LLIMnuiHI.roa
File:                     bRncwWswvePqThFPw0LLIMnuiHI.roa (raw, json)
Hash identifier:          fTlf09Uq5eWjXnBookMDm6VeAcV1XGATG1xcZTi5JQ8=
Subject key identifier:   6D:19:DC:C1:6B:30:BD:E3:EA:4E:11:4F:C3:42:CB:20:C9:EE:88:72
Certificate issuer:       /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial:       1F79
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/bRncwWswvePqThFPw0LLIMnuiHI.roa
Signing time:             Sun 01 Jun 2025 16:08:38 +0000
ROA not before:           Sun 01 Jun 2025 16:08:38 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     146845
IP address blocks:        2407:9b40::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8057 (0x1f79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
        Validity
            Not Before: Jun  1 16:08:38 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=6D19DCC16B30BDE3EA4E114FC342CB20C9EE8872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:b5:32:dd:bd:02:ef:58:49:71:eb:2b:30:
                    9f:8a:35:69:e0:da:65:b5:8b:7b:46:aa:9d:e8:4f:
                    33:3e:81:bb:b2:8d:e6:81:60:71:32:4b:e3:6a:10:
                    f1:ea:b6:9e:d0:ec:07:e5:77:3e:4d:f9:95:94:99:
                    a7:18:9c:e6:0c:d5:f6:ae:9f:e6:fc:d4:b9:fa:f9:
                    d7:b4:ed:cd:36:a0:19:4c:c9:3c:93:0f:09:6a:d6:
                    ea:16:9c:55:d3:26:02:2a:c0:34:32:0e:31:1a:ac:
                    69:af:08:83:3e:01:45:21:90:58:9d:d1:4d:11:f4:
                    3c:17:77:dc:a1:20:44:95:5a:6a:7b:6b:00:11:2d:
                    5b:88:d8:51:6a:89:6b:5e:1a:89:b6:99:58:c9:d4:
                    7c:73:1c:80:1d:d9:fd:8f:fc:2d:70:8f:39:96:c1:
                    73:94:fb:ab:39:04:35:c7:17:e7:6b:90:7f:1b:0a:
                    02:4d:30:92:4f:f7:a3:e7:2d:7d:d5:c5:75:c2:71:
                    2f:0d:63:1c:50:76:fa:15:9f:fd:ac:ee:09:e6:c8:
                    41:ae:10:cf:e2:a0:82:14:75:ef:a8:fb:fa:0c:52:
                    35:35:e4:4b:60:6d:3d:c1:4f:bb:75:7f:ea:ab:74:
                    2c:34:dd:bf:9b:71:ec:35:15:f6:fe:dd:ee:99:60:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:DC:C1:6B:30:BD:E3:EA:4E:11:4F:C3:42:CB:20:C9:EE:88:72
            X509v3 Authority Key Identifier:
                keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/bRncwWswvePqThFPw0LLIMnuiHI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:b9:13:ae:e2:f4:09:6a:00:85:94:3c:66:1d:16:54:c8:
         79:a7:56:c8:6c:1a:d3:b5:2c:e1:21:82:cd:a5:7c:6a:5a:16:
         ab:31:f1:20:e8:cc:5b:47:6f:f4:fb:53:23:51:16:7b:ca:e7:
         0b:0b:3d:ef:1e:0d:2e:53:fb:72:f1:8a:3e:75:29:2f:e1:09:
         28:2b:fb:34:e4:0b:5b:5b:40:23:e4:7e:7a:8d:33:18:ec:44:
         2c:1e:5d:f2:73:a4:99:9a:cc:09:34:44:f0:c8:85:17:5f:af:
         6d:18:93:46:ef:e9:be:6b:14:45:9f:c9:a3:a0:98:79:aa:c1:
         72:cd:1d:4e:23:9f:69:eb:12:ca:8f:d7:4b:77:b4:cd:82:05:
         67:c7:6a:e1:39:3c:bc:2b:84:af:83:74:4a:06:1b:93:28:56:
         60:05:52:33:37:fd:1b:8c:62:bb:0a:0a:c6:7d:22:6e:f5:f4:
         fc:60:85:6b:08:8c:83:30:a8:b8:0e:b6:fa:08:32:90:02:17:
         81:25:29:2d:42:86:a7:36:b1:bf:6f:74:85:99:22:18:26:9e:
         9c:5c:48:af:b6:ed:c6:b4:77:1e:96:3e:d1:83:2d:93:c4:59:
         af:ce:4e:19:5e:a1:b7:cd:c4:1a:85:8c:14:b3:5c:bc:c6:55:
         ed:77:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:57:00 2026 by rpki-client