This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/TTOWFm2gE5vTfZ8vYG6vqxKV8rY.roa
File:                     TTOWFm2gE5vTfZ8vYG6vqxKV8rY.roa (raw, json)
Hash identifier:          Y+m4RdlMq9Of5S7kSyjPId2AR6svb+hl++140i70+PY=
Subject key identifier:   4D:33:96:16:6D:A0:13:9B:D3:7D:9F:2F:60:6E:AF:AB:12:95:F2:B6
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       1CC5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TTOWFm2gE5vTfZ8vYG6vqxKV8rY.roa
Signing time:             Sat 14 Jun 2025 10:39:54 +0000
ROA not before:           Sat 14 Jun 2025 10:39:54 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7365 (0x1cc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun 14 10:39:54 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=4D3396166DA0139BD37D9F2F606EAFAB1295F2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:9e:21:31:16:12:b2:36:e4:be:c7:fb:43:
                    c5:5d:ee:5c:86:1b:ec:7d:3b:d2:03:9d:2a:16:fd:
                    48:f6:72:bf:c8:04:ca:a5:8c:c7:30:df:4c:08:0e:
                    d3:77:0d:55:b1:f7:80:3e:eb:1f:a1:3b:3f:78:d8:
                    2d:b9:62:ae:f3:ca:a1:7b:54:c6:6e:68:62:12:16:
                    ae:c4:e5:25:4b:06:c5:ad:b2:bb:62:da:3a:6d:95:
                    c9:31:6e:92:13:ae:0f:53:e6:66:e6:50:ba:bf:01:
                    2e:c7:eb:8a:5a:d1:a6:7e:a3:f8:26:f4:24:e2:a1:
                    15:24:c0:11:a5:25:2c:fd:72:fb:3e:3b:98:4e:7f:
                    2c:de:73:b7:a5:6f:e1:e0:50:74:f5:9d:97:88:59:
                    a9:e2:d1:b9:94:36:0b:8f:ac:b4:f0:e5:06:14:35:
                    1c:64:a0:45:1b:21:61:1d:27:17:ca:10:2a:d3:6c:
                    86:4a:1a:3a:1a:4e:3c:c9:43:f4:a4:ef:d8:df:f6:
                    8b:5f:14:3c:ee:2f:08:57:d9:36:50:84:c4:c3:e2:
                    02:90:0d:38:70:75:d2:47:23:f3:30:f5:92:56:64:
                    e3:c9:f7:6c:a5:2b:8d:6e:b8:0c:37:be:36:bb:f2:
                    0c:e6:3b:6b:34:94:3a:96:d9:35:12:8c:91:f9:a7:
                    90:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:33:96:16:6D:A0:13:9B:D3:7D:9F:2F:60:6E:AF:AB:12:95:F2:B6
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TTOWFm2gE5vTfZ8vYG6vqxKV8rY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:27:fe:1b:ca:f7:42:9a:1d:e7:8f:cc:71:12:dc:7f:65:d9:
         1b:f1:54:d3:29:07:34:cb:4e:48:23:09:65:e2:bd:fd:a4:2f:
         b3:24:0e:3c:da:b6:4d:05:cb:40:89:3b:08:c7:5b:c8:5f:03:
         3c:37:e3:79:31:dc:29:ae:83:13:17:0e:cc:a5:1e:77:62:cf:
         7b:f4:49:20:c1:36:f8:59:c6:92:b8:1c:7a:03:de:4d:3a:e9:
         89:d9:c0:f5:c7:6b:9d:07:82:7e:8f:df:d1:2a:3a:30:24:bc:
         a3:fd:fb:60:03:3b:bb:15:e7:25:da:ee:4d:4a:ab:05:1b:2b:
         4f:77:47:36:39:3c:03:1d:dc:1b:93:18:3c:99:2d:56:de:65:
         45:48:5b:79:80:4b:9d:63:73:74:b0:fa:f2:70:4b:72:04:14:
         f5:5e:25:ae:9c:d4:13:85:34:f3:25:a6:06:85:59:c8:ba:a1:
         0d:a5:8f:95:36:ab:99:2e:ac:67:89:a4:d9:7e:28:79:9c:4b:
         a1:86:b9:6f:7d:f3:5d:0c:68:47:d9:9b:21:3e:98:09:87:a0:
         13:d1:98:f2:bd:48:24:d1:14:b5:53:ba:31:4e:eb:4c:18:ca:
         c0:e9:a9:fd:1b:97:ee:84:b1:78:e0:6b:3c:4a:2e:9a:1b:06:
         62:a9:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:54:30 2026 by rpki-client