This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4qBi9DpQCGFUgXMxhe_n2EpP8wk.roa
File:                     4qBi9DpQCGFUgXMxhe_n2EpP8wk.roa (raw, json)
Hash identifier:          Z2VdSY/sJxOdE9DlbzcsqhHN4u10aafO+LUKO0SINII=
Subject key identifier:   E2:A0:62:F4:3A:50:08:61:54:81:73:31:85:EF:E7:D8:4A:4F:F3:09
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       08ED
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4qBi9DpQCGFUgXMxhe_n2EpP8wk.roa
Signing time:             Sun 18 May 2025 23:38:08 +0000
ROA not before:           Sun 18 May 2025 23:38:08 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285 (0x8ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 18 23:38:08 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=E2A062F43A5008615481733185EFE7D84A4FF309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:69:6a:f7:59:fc:94:87:55:1e:32:9b:ca:
                    7f:74:c0:bc:60:09:2c:36:2b:f4:21:c6:77:c1:ea:
                    16:ee:0c:62:b9:25:a7:9b:f7:7b:3f:7c:d1:e4:46:
                    cb:27:87:54:6a:65:24:70:cf:4d:93:18:75:6a:ef:
                    42:2b:a9:66:c4:5b:78:d9:e1:7c:93:d9:9c:c8:1a:
                    ef:89:a9:08:99:23:47:e6:12:c5:c6:6b:92:94:96:
                    6d:59:c1:ea:3e:06:a9:b2:9c:3d:61:c1:0c:84:94:
                    67:32:0c:19:54:f2:ea:14:76:39:a3:30:60:7b:20:
                    10:b9:96:db:3d:ba:09:6f:08:cf:35:71:91:0f:4b:
                    14:0b:1e:90:65:24:ff:5c:32:87:9c:27:9b:54:ce:
                    f6:b4:5b:1b:14:2f:f0:88:5e:f4:38:b3:66:ef:2d:
                    f7:87:44:8e:98:af:38:9c:e6:5e:33:5e:12:66:66:
                    3e:51:07:1a:a9:68:24:99:5d:5d:e6:f3:a6:84:ce:
                    d3:94:1a:79:f0:6f:9b:57:04:98:6e:6b:7a:6e:10:
                    3e:b1:89:b7:f3:1c:33:04:4e:c4:54:f9:56:ff:22:
                    bb:6c:0d:84:46:83:5e:c7:4e:b5:db:74:95:11:a8:
                    b0:ee:3e:9c:5c:3c:88:a5:6b:93:ed:94:89:a7:2f:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A0:62:F4:3A:50:08:61:54:81:73:31:85:EF:E7:D8:4A:4F:F3:09
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4qBi9DpQCGFUgXMxhe_n2EpP8wk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:1d:46:43:2e:e2:47:f6:03:3f:02:11:89:4d:33:de:c2:60:
         f8:63:ad:e8:8c:ff:34:a2:50:7b:c3:79:e1:f5:e5:3c:e9:21:
         10:09:1a:55:4e:de:64:a1:26:9e:b7:02:e4:fb:41:81:5d:86:
         c7:01:fe:9b:36:ad:5b:55:d9:d7:51:71:d9:a7:35:f8:9e:e4:
         df:af:f5:d1:c6:8d:86:cd:3d:5d:67:fd:24:d0:3e:03:01:8f:
         c2:a0:f7:e2:5c:28:9a:ee:cc:51:66:4d:53:e2:3b:e3:8e:41:
         67:b0:1f:69:80:54:3d:95:dc:26:0e:1a:12:a1:d5:65:03:74:
         8a:12:98:3f:a4:d1:99:d0:f7:94:e0:ec:df:31:d9:99:53:d4:
         18:d3:61:68:f1:be:30:60:ef:6d:85:00:97:b6:26:7d:3d:d2:
         4f:58:23:07:3e:d5:0e:9a:e1:6e:61:bb:69:84:f8:72:d8:c6:
         fb:5f:52:56:79:c4:0d:2a:69:d2:81:f2:c4:76:39:54:87:2d:
         73:0d:42:46:a2:e9:ab:9f:67:0a:35:d9:e2:b1:1f:fe:b2:12:
         9b:20:93:59:4e:58:76:1c:d0:f2:8f:09:24:6e:31:61:02:1b:
         0a:ba:cf:d0:34:08:48:a8:e5:ef:73:46:d5:10:99:ef:37:60:
         78:94:75:46
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTgy
MzM4MDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEUyQTA2MkY0M0E1MDA4
NjE1NDgxNzMzMTg1RUZFN0Q4NEE0RkYzMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXrWlq91n8lIdVHjKbyn90wLxgCSw2K/QhxnfB6hbuDGK5Jaeb
93s/fNHkRssnh1RqZSRwz02TGHVq70IrqWbEW3jZ4XyT2ZzIGu+JqQiZI0fmEsXG
a5KUlm1Zweo+BqmynD1hwQyElGcyDBlU8uoUdjmjMGB7IBC5lts9uglvCM81cZEP
SxQLHpBlJP9cMoecJ5tUzva0WxsUL/CIXvQ4s2bvLfeHRI6Yrzic5l4zXhJmZj5R
BxqpaCSZXV3m86aEztOUGnnwb5tXBJhua3puED6xibfzHDMETsRU+Vb/IrtsDYRG
g17HTrXbdJURqLDuPpxcPIila5PtlImnL3yBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4qBi9DpQCGFUgXMxhe/n2EpP8wkwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni80cUJpOURwUUNHRlVnWE14
aGVfbjJFcFA4d2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAA8dRkMu4kf2Az8CEYlNM97CYPhjreiM/zSi
UHvDeeH15TzpIRAJGlVO3mShJp63AuT7QYFdhscB/ps2rVtV2ddRcdmnNfie5N+v
9dHGjYbNPV1n/STQPgMBj8Kg9+JcKJruzFFmTVPiO+OOQWewH2mAVD2V3CYOGhKh
1WUDdIoSmD+k0ZnQ95Tg7N8x2ZlT1BjTYWjxvjBg722FAJe2Jn090k9YIwc+1Q6a
4W5hu2mE+HLYxvtfUlZ5xA0qadKB8sR2OVSHLXMNQkai6aufZwo12eKxH/6yEpsg
k1lOWHYc0PKPCSRuMWECGwq6z9A0CEio5e9zRtUQme83YHiUdUY=
-----END CERTIFICATE-----
Generated at Sun Jan 11 19:19:09 2026 by rpki-client