This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/0DOxjMbewFGGPsedq9QiduF0vag.roa
File:                     0DOxjMbewFGGPsedq9QiduF0vag.roa (raw, json)
Hash identifier:          c1WK4SIVALQp5gyYrE7eu5yFwl8iP+GMWjl/+tEWoSo=
Subject key identifier:   D0:33:B1:8C:C6:DE:C0:51:86:3E:C7:9D:AB:D4:22:76:E1:74:BD:A8
Certificate issuer:       /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Certificate serial:       043C
Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/0DOxjMbewFGGPsedq9QiduF0vag.roa
Signing time:             Wed 17 Dec 2025 04:16:39 +0000
ROA not before:           Wed 17 Dec 2025 04:16:39 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     23724
IP address blocks:        211.150.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
        Validity
            Not Before: Dec 17 04:16:39 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=D033B18CC6DEC051863EC79DABD42276E174BDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:ce:9f:9d:df:97:f1:40:aa:1f:c4:c0:05:
                    bb:4e:ee:ec:7c:f7:cb:f7:83:84:db:fe:85:74:7a:
                    ff:40:7c:99:4a:76:8f:0e:76:9c:2c:81:1e:52:32:
                    44:16:3b:4e:b5:87:32:12:5e:0a:5b:af:38:7d:22:
                    da:d9:c6:ca:03:28:d9:43:d9:85:71:1c:b9:0a:f5:
                    8a:7f:6b:51:8a:13:af:a4:83:b8:da:c9:ab:7c:fa:
                    ce:33:11:a4:3b:a3:da:61:f5:8d:24:53:a9:a9:80:
                    cc:7e:a9:f2:ea:f4:a9:9c:f4:e7:e2:65:79:6b:4c:
                    71:16:14:89:54:01:82:5c:76:64:2d:ff:6e:82:a1:
                    d6:11:d7:73:22:ab:1e:c0:57:a8:2c:7a:2a:d6:d6:
                    23:fb:0a:6d:be:ca:39:21:40:c1:c0:a7:13:32:cc:
                    06:1f:97:39:20:a7:1e:79:21:4b:3f:64:d8:f2:7a:
                    6e:3d:fa:f0:38:95:20:a9:89:61:c9:36:b2:69:39:
                    58:9d:44:5c:e2:75:93:c0:9c:d9:35:bd:7f:37:af:
                    27:e0:ba:4e:65:55:9e:2a:be:f8:9e:bb:ce:3e:2d:
                    bd:e4:90:c2:49:64:d8:e9:2c:19:d8:d9:38:bc:a2:
                    6e:b4:4a:25:fb:7d:40:f7:82:60:23:5a:ca:42:3c:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:33:B1:8C:C6:DE:C0:51:86:3E:C7:9D:AB:D4:22:76:E1:74:BD:A8
            X509v3 Authority Key Identifier:
                keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/0DOxjMbewFGGPsedq9QiduF0vag.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.150.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:ea:a3:53:1e:a1:20:c3:bb:8e:73:76:57:7b:8a:a2:61:
         52:a3:d7:c4:ff:9c:c1:e3:68:71:c2:c0:3d:89:06:68:81:db:
         bd:4c:ba:72:8b:eb:4f:4b:b6:84:64:74:ba:b6:24:18:90:98:
         9a:83:fa:3c:be:19:fb:b5:90:84:43:40:e2:43:6b:70:97:3d:
         e4:72:2b:89:6b:87:e1:35:ad:25:e7:42:09:44:37:12:d3:8e:
         61:1f:ca:83:62:bb:98:d1:32:91:7d:e0:d4:c7:0a:99:f0:52:
         e7:85:9f:e0:1a:9f:53:36:19:bc:05:7c:3a:70:d1:ed:af:87:
         f9:b1:b3:7e:a9:e8:30:93:3b:d2:b3:42:72:0d:e8:da:14:f5:
         80:68:c8:39:7e:a1:9d:df:d2:df:d7:da:01:f6:36:a9:cd:bc:
         1c:77:b6:e8:a6:c3:71:2c:5c:ff:eb:fd:ae:12:76:c3:55:70:
         cc:e7:22:2a:29:08:18:0f:13:d7:e1:fc:4d:9e:60:52:fb:f9:
         21:88:15:36:50:ad:e2:e5:fc:ad:dc:b4:5e:ab:da:5b:2b:80:
         3f:e1:c8:33:7b:2a:6c:ea:02:bb:8e:04:22:62:48:41:e3:00:
         48:1e:70:63:80:6a:a5:b0:fe:3a:a8:56:55:fe:12:f0:20:4b:
         16:1a:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:11:12 2026 by rpki-client