This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/rs6PhsuZVPAu2ukTU13vUXzco-Y.roa
File:                     rs6PhsuZVPAu2ukTU13vUXzco-Y.roa (raw, json)
Hash identifier:          ujbyXIOB/mLdY3PuCBRATz+F2MqVuHyTBxRDvP1cD9E=
Subject key identifier:   AE:CE:8F:86:CB:99:54:F0:2E:DA:E9:13:53:5D:EF:51:7C:DC:A3:E6
Certificate issuer:       /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial:       1F31
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/rs6PhsuZVPAu2ukTU13vUXzco-Y.roa
Signing time:             Sun 01 Jun 2025 04:08:32 +0000
ROA not before:           Sun 01 Jun 2025 04:08:32 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     146845
IP address blocks:        2407:9b40::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7985 (0x1f31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
        Validity
            Not Before: Jun  1 04:08:32 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=AECE8F86CB9954F02EDAE913535DEF517CDCA3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:a3:70:59:b7:75:c1:2f:90:27:0e:3e:30:
                    b1:66:5f:7e:8f:6c:fa:2c:a9:fd:18:ed:d6:1c:9c:
                    44:55:82:b1:0c:93:dd:96:1c:74:26:a4:00:a8:ae:
                    0e:bb:fa:8d:06:a8:f3:dc:ef:b3:6a:73:9f:36:a9:
                    0c:ea:9f:5a:4c:16:8a:e8:78:29:a2:0a:21:a5:93:
                    53:da:28:fc:be:1e:58:0e:5e:e0:0b:5d:c0:9a:b7:
                    65:15:04:b4:76:c4:02:19:c3:c8:87:56:34:9c:b6:
                    dd:1e:88:bb:b8:bb:cc:a8:02:1a:3f:a9:9e:b7:7f:
                    c8:4e:e6:c1:22:60:06:fc:72:72:12:2a:d0:d5:05:
                    e3:f4:68:fa:1a:ce:a5:b0:e8:ac:00:19:14:72:a7:
                    6a:2d:65:6e:c8:ab:40:f7:9a:8b:c2:78:56:68:e5:
                    07:4b:22:fb:db:cf:ed:91:53:7b:c5:15:40:a5:60:
                    c2:cb:50:ce:46:0d:c0:64:90:0c:f2:3e:98:de:9e:
                    90:d8:7a:57:9e:cc:97:29:8e:19:d9:7d:17:42:34:
                    4e:36:58:33:d4:c5:f1:a1:0c:ca:c4:9e:5f:e5:3e:
                    50:16:3d:10:3f:1a:e6:ff:26:e5:e5:85:53:55:b3:
                    5b:ed:f7:50:da:7a:8f:f0:03:62:d4:34:0c:b7:92:
                    a5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CE:8F:86:CB:99:54:F0:2E:DA:E9:13:53:5D:EF:51:7C:DC:A3:E6
            X509v3 Authority Key Identifier:
                keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/rs6PhsuZVPAu2ukTU13vUXzco-Y.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:1f:72:86:18:b9:cb:b7:ed:79:6e:9e:36:3f:fc:30:6d:2e:
         61:a6:83:4d:42:ec:cf:8d:85:b9:91:e6:8f:f5:bb:d0:15:bc:
         cc:c3:84:94:15:af:64:21:53:f1:c2:4d:67:f3:3b:c1:ad:88:
         49:ee:17:61:4c:62:5f:8c:d5:82:e4:a5:a1:27:81:b2:9b:55:
         87:b1:cb:5b:49:93:f9:b5:63:00:a3:c6:6d:0c:e5:1c:cd:d4:
         12:43:05:8d:6c:36:90:08:a9:e6:51:ab:58:77:c0:ba:f6:6c:
         a0:b1:26:5e:78:a6:a0:4e:73:08:cc:e1:33:34:f9:51:e2:88:
         94:94:96:77:f0:34:61:23:8d:e8:ab:15:33:2f:7d:5f:c2:6f:
         33:80:eb:c5:78:50:8f:80:b7:ae:16:a9:47:2a:60:6a:c6:93:
         b6:c0:77:03:1a:15:79:25:ee:69:2e:be:67:fd:ad:5c:75:30:
         61:2c:e1:4f:2d:4a:cb:d7:b3:20:78:5a:68:de:fe:65:59:a8:
         33:6e:60:79:0e:4d:ad:ed:23:53:05:2e:c1:d4:94:80:7a:9e:
         6d:d5:01:08:2c:8f:65:a0:6b:29:f4:8f:6d:dc:24:ea:7a:f9:
         c1:fd:70:82:db:d6:e4:c5:91:a7:e6:40:37:fb:91:fa:04:a9:
         7a:8a:8c:1e
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICHzEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDEw
NDA4MzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFFQ0U4Rjg2Q0I5OTU0
RjAyRURBRTkxMzUzNURFRjUxN0NEQ0EzRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBK6NwWbd1wS+QJw4+MLFmX36PbPosqf0Y7dYcnERVgrEMk92W
HHQmpACorg67+o0GqPPc77Nqc582qQzqn1pMForoeCmiCiGlk1PaKPy+HlgOXuAL
XcCat2UVBLR2xAIZw8iHVjSctt0eiLu4u8yoAho/qZ63f8hO5sEiYAb8cnISKtDV
BeP0aPoazqWw6KwAGRRyp2otZW7Iq0D3movCeFZo5QdLIvvbz+2RU3vFFUClYMLL
UM5GDcBkkAzyPpjenpDYeleezJcpjhnZfRdCNE42WDPUxfGhDMrEnl/lPlAWPRA/
Gub/JuXlhVNVs1vt91Daeo/wA2LUNAy3kqXLAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUrs6PhsuZVPAu2ukTU13vUXzco+YwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvcnM2UGhzdVpWUEF1
MnVrVFUxM3ZVWHpjby1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBADYfcoYYucu37XlunjY//DBtLmGm
g01C7M+NhbmR5o/1u9AVvMzDhJQVr2QhU/HCTWfzO8GtiEnuF2FMYl+M1YLkpaEn
gbKbVYexy1tJk/m1YwCjxm0M5RzN1BJDBY1sNpAIqeZRq1h3wLr2bKCxJl54pqBO
cwjM4TM0+VHiiJSUlnfwNGEjjeirFTMvfV/CbzOA68V4UI+At64WqUcqYGrGk7bA
dwMaFXkl7mkuvmf9rVx1MGEs4U8tSsvXsyB4Wmje/mVZqDNuYHkOTa3tI1MFLsHU
lIB6nm3VAQgsj2Wgayn0j23cJOp6+cH9cILb1uTFkafmQDf7kfoEqXqKjB4=
-----END CERTIFICATE-----
Generated at Mon Jan 12 17:20:47 2026 by rpki-client