This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/U1JJ9bqLwTQDGqCtqbYeiuhQAjc.roa
File:                     U1JJ9bqLwTQDGqCtqbYeiuhQAjc.roa (raw, json)
Hash identifier:          nuNc6I1retkqSV677TyKrVYMxnKAC2qsjf7uW9PQ1xI=
Subject key identifier:   53:52:49:F5:BA:8B:C1:34:03:1A:A0:AD:A9:B6:1E:8A:E8:50:02:37
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       0402
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U1JJ9bqLwTQDGqCtqbYeiuhQAjc.roa
Signing time:             Mon 12 May 2025 10:08:36 +0000
ROA not before:           Mon 12 May 2025 10:08:36 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026 (0x402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 12 10:08:36 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=535249F5BA8BC134031AA0ADA9B61E8AE8500237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:f4:0b:31:b4:ab:42:17:3a:8a:ac:e4:c4:
                    a4:a1:33:97:d1:db:0a:47:6b:b1:3b:90:83:9c:b6:
                    2d:a0:05:ff:e8:6e:b8:80:0a:1a:8d:98:33:d7:21:
                    d7:08:71:a5:21:6b:f4:a7:c0:05:ca:1d:8f:97:be:
                    99:2b:70:78:62:d7:d3:db:a8:70:b6:4e:65:28:22:
                    03:05:30:3f:30:e6:a6:c3:ef:2f:86:84:2e:36:d1:
                    63:7d:f8:01:12:8b:21:d7:9d:97:f8:d9:c2:7c:24:
                    b2:d0:72:fd:12:dd:ea:64:e8:b1:0a:9b:0e:b4:61:
                    4b:ad:37:77:18:2d:6e:d9:02:e7:a7:47:8a:fc:6f:
                    82:55:fa:ad:6c:da:41:64:38:eb:17:39:8a:5f:7c:
                    3c:35:e0:9f:2a:55:c4:8c:ad:a8:a1:24:f3:f3:8e:
                    b1:9f:50:54:dd:de:13:e1:19:28:1b:3d:88:d7:81:
                    a3:0a:91:0b:30:1b:5c:e3:e4:94:41:de:b3:e5:c5:
                    6c:d6:72:20:c9:11:1a:f8:57:8e:ab:76:f9:c4:8c:
                    0e:fe:a0:9b:26:c4:9d:9f:3d:5a:cb:9e:dc:39:fd:
                    aa:b4:3a:de:b5:1d:10:95:16:75:4e:f6:37:7d:6b:
                    a9:8d:ff:28:5b:84:13:58:6a:a6:46:a1:4c:d1:b9:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:49:F5:BA:8B:C1:34:03:1A:A0:AD:A9:B6:1E:8A:E8:50:02:37
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U1JJ9bqLwTQDGqCtqbYeiuhQAjc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:90:bf:ff:90:c2:80:24:7a:15:9a:5e:b4:44:02:46:9b:
         12:d3:f7:51:80:09:76:02:f2:fb:a8:6c:74:16:c5:eb:4f:62:
         95:cd:f3:29:70:cf:3b:e8:9d:a0:d1:c9:06:9f:b3:87:1d:16:
         ec:16:ac:05:e7:61:22:f4:ef:e9:f2:9b:27:52:f0:50:8e:4f:
         8f:8f:d9:4a:df:ae:00:9e:6c:af:50:97:1a:13:e4:1d:ab:48:
         23:56:a7:d1:3e:64:f7:71:a0:a4:a5:ad:4d:1c:5e:ed:f5:44:
         39:8b:92:70:88:7e:2b:35:fe:e1:91:e7:40:c0:06:c3:d4:c1:
         21:f8:38:d3:00:2f:a1:20:48:84:96:09:c8:87:72:3b:e3:16:
         2c:13:42:25:1c:66:73:62:e0:59:6e:f5:e3:d5:28:a5:5f:b4:
         a3:21:41:ba:c0:09:b9:06:0d:66:4f:f4:d1:6a:ec:74:23:04:
         1a:81:26:c5:7c:dc:b5:25:03:6b:dc:c7:f1:10:53:6a:ff:3d:
         26:bd:75:46:66:ae:c4:02:dc:59:63:4b:55:f5:6c:b6:b2:c1:
         a5:c8:16:6c:fb:6f:ce:ae:e0:32:79:f9:d5:f2:55:65:29:7b:
         f5:06:64:d8:2d:a4:2c:6d:2a:35:9f:c0:fb:aa:23:7a:78:5f:
         79:42:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:55:47 2026 by rpki-client