This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/61EGP4crsSJB5PDCYquz5FzFwXw.roa
File:                     61EGP4crsSJB5PDCYquz5FzFwXw.roa (raw, json)
Hash identifier:          TWytnTL2W9QHd0tDX3+oOKzhGd56ymt06nmznNgIzmE=
Subject key identifier:   EB:51:06:3F:87:2B:B1:22:41:E4:F0:C2:62:AB:B3:E4:5C:C5:C1:7C
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       0E62
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/61EGP4crsSJB5PDCYquz5FzFwXw.roa
Signing time:             Mon 26 May 2025 06:08:38 +0000
ROA not before:           Mon 26 May 2025 06:08:38 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3682 (0xe62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 26 06:08:38 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=EB51063F872BB12241E4F0C262ABB3E45CC5C17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:32:4d:28:67:af:25:31:cb:ec:be:f7:54:
                    b0:05:8f:d3:f5:a4:cb:1b:bf:98:d0:da:d0:dc:54:
                    64:c0:b4:51:0c:dd:74:32:ee:02:b9:4c:44:e8:41:
                    d7:69:66:69:9f:e4:c4:b0:b5:32:8a:83:2b:fb:99:
                    da:c7:57:e5:b4:49:73:99:a7:55:64:89:8b:3a:77:
                    b7:77:80:c1:5d:14:73:45:ad:3f:86:f7:7e:8d:d9:
                    b6:d0:7c:a5:5e:79:8e:ac:af:1f:95:e8:85:f5:df:
                    e6:2b:a8:3c:15:ea:24:22:3a:77:c1:f0:07:55:5d:
                    20:03:7c:c9:2f:a0:b1:0d:cc:dd:7f:46:c9:da:c0:
                    eb:26:ff:ef:97:71:a2:b4:37:89:74:58:c6:93:df:
                    1c:f6:82:13:89:3e:f8:e6:3e:1d:6d:03:7a:15:d4:
                    21:cd:28:d9:40:17:25:30:17:48:93:a4:77:9a:05:
                    6c:fc:e7:f2:5c:16:e5:00:9e:94:2e:c7:34:9c:27:
                    a5:ae:9f:e8:29:e7:c9:f9:17:b7:75:c5:01:d3:60:
                    e7:04:60:f8:5b:a1:cb:ec:66:e5:4a:df:0f:d2:be:
                    bb:7c:a5:15:fe:60:dd:9c:0d:f9:af:36:86:f9:6a:
                    6c:20:50:c8:2e:ea:d7:4a:16:7f:ff:13:84:60:45:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:06:3F:87:2B:B1:22:41:E4:F0:C2:62:AB:B3:E4:5C:C5:C1:7C
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/61EGP4crsSJB5PDCYquz5FzFwXw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:e1:55:d0:29:2b:c9:59:5b:8a:e7:de:fd:99:f7:62:e8:ec:
         07:d1:36:ea:aa:11:aa:58:2c:e9:c6:9e:21:65:1d:d7:fe:7a:
         71:9b:6a:50:96:55:0e:6b:de:46:4f:65:ea:0b:e8:16:44:88:
         24:4b:32:2c:b2:61:47:05:39:4e:e9:42:73:13:23:5d:e9:7e:
         2a:42:25:13:3a:37:b2:93:b9:6a:f3:f1:5a:a7:3a:3a:ef:1f:
         a9:ea:9f:65:03:3d:73:fa:88:3f:ab:2e:84:f2:dc:1f:2a:cb:
         a8:88:a3:fb:70:10:ec:bb:47:2a:11:97:16:be:a1:dc:75:91:
         e3:b7:32:a4:db:22:aa:03:13:bb:1c:6e:04:8d:80:96:42:85:
         8c:bf:b4:ab:5e:42:23:2b:b5:c3:b6:40:41:f8:58:fd:ee:11:
         c1:d9:71:0b:df:9a:33:ee:ac:05:d0:fb:59:3e:4f:f0:fb:9f:
         69:3e:6d:11:32:96:56:98:4d:5e:8a:b8:09:84:e8:b0:ff:a9:
         1f:3b:1a:26:1f:d3:87:4b:a0:4a:bd:b5:b3:6a:78:ac:26:1e:
         b4:ee:9c:44:54:c3:cb:a5:1a:c3:f2:4d:fc:fd:24:db:c3:f2:
         52:dd:83:59:0f:cf:f5:37:39:83:cc:6c:5f:15:df:04:76:22:
         88:94:00:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjYw
NjA4MzhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEVCNTEwNjNGODcyQkIx
MjI0MUU0RjBDMjYyQUJCM0U0NUNDNUMxN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJkjJNKGevJTHL7L73VLAFj9P1pMsbv5jQ2tDcVGTAtFEM3XQy
7gK5TEToQddpZmmf5MSwtTKKgyv7mdrHV+W0SXOZp1VkiYs6d7d3gMFdFHNFrT+G
936N2bbQfKVeeY6srx+V6IX13+YrqDwV6iQiOnfB8AdVXSADfMkvoLENzN1/Rsna
wOsm/++XcaK0N4l0WMaT3xz2ghOJPvjmPh1tA3oV1CHNKNlAFyUwF0iTpHeaBWz8
5/JcFuUAnpQuxzScJ6Wun+gp58n5F7d1xQHTYOcEYPhbocvsZuVK3w/Svrt8pRX+
YN2cDfmvNob5amwgUMgu6tdKFn//E4RgRa0LAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU61EGP4crsSJB5PDCYquz5FzFwXwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82MUVHUDRjcnNTSkI1UERD
WXF1ejVGekZ3WHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFnhVdApK8lZW4rn3v2Z92Lo7AfRNuqqEapY
LOnGniFlHdf+enGbalCWVQ5r3kZPZeoL6BZEiCRLMiyyYUcFOU7pQnMTI13pfipC
JRM6N7KTuWrz8VqnOjrvH6nqn2UDPXP6iD+rLoTy3B8qy6iIo/twEOy7RyoRlxa+
odx1keO3MqTbIqoDE7scbgSNgJZChYy/tKteQiMrtcO2QEH4WP3uEcHZcQvfmjPu
rAXQ+1k+T/D7n2k+bREyllaYTV6KuAmE6LD/qR87GiYf04dLoEq9tbNqeKwmHrTu
nERUw8ulGsPyTfz9JNvD8lLdg1kPz/U3OYPMbF8V3wR2IoiUALE=
-----END CERTIFICATE-----
Generated at Tue Jan 13 10:54:28 2026 by rpki-client