This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/XlmBdjgMkdkzPbUYwvl1W9yrNVs.roa
File:                     XlmBdjgMkdkzPbUYwvl1W9yrNVs.roa (raw, json)
Hash identifier:          vb3j03yUrE7IGv8ujqu5kyC5gyOI8gsGBdifBeiuiQo=
Subject key identifier:   5E:59:81:76:38:0C:91:D9:33:3D:B5:18:C2:F9:75:5B:DC:AB:35:5B
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       1529
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XlmBdjgMkdkzPbUYwvl1W9yrNVs.roa
Signing time:             Wed 04 Jun 2025 07:09:59 +0000
ROA not before:           Wed 04 Jun 2025 07:09:59 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5417 (0x1529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun  4 07:09:59 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=5E598176380C91D9333DB518C2F9755BDCAB355B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:b0:b9:5e:d8:bf:66:4f:d9:c7:fc:0a:67:
                    c8:62:90:96:64:4e:bf:42:13:96:af:d5:1f:9c:a4:
                    f0:66:4a:2e:0f:ff:30:b8:58:89:a3:d1:b7:d2:08:
                    18:66:cb:e4:e2:9d:bd:45:c3:e1:9a:a6:a5:27:24:
                    42:ba:57:17:4a:c1:95:2a:07:7b:57:49:d5:f0:7a:
                    63:51:fa:cd:da:53:ed:ab:b6:32:c8:8c:3c:3c:0e:
                    17:ac:1b:f7:6f:6b:a6:45:03:d3:9c:69:60:f2:a4:
                    dc:ec:1b:66:41:f7:9b:05:4e:6f:68:5e:4d:22:ba:
                    e9:ba:fc:25:ab:1c:62:8d:e7:f2:3a:a9:a9:53:58:
                    bb:e0:27:5b:89:91:8e:d2:1c:6d:6e:28:13:cd:b0:
                    f7:01:34:1b:a8:24:b3:f4:af:ab:c0:32:5d:8c:5c:
                    96:6c:b1:ef:6a:96:09:8c:3e:d0:a9:1f:89:b5:bc:
                    c4:50:c1:21:0e:3d:85:54:88:54:b6:cd:d5:a8:46:
                    a7:fd:f7:02:71:d3:a2:d7:38:1f:79:c6:6e:dd:3c:
                    2d:46:46:19:94:6a:6d:a6:c0:49:be:8a:73:3e:e5:
                    fa:5f:12:98:97:e8:d1:c8:dc:42:43:a8:ee:e6:1a:
                    19:31:56:31:9f:c0:fb:32:f4:ad:3f:c4:9b:a8:97:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:59:81:76:38:0C:91:D9:33:3D:B5:18:C2:F9:75:5B:DC:AB:35:5B
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XlmBdjgMkdkzPbUYwvl1W9yrNVs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         13:75:49:de:39:12:21:e9:b4:80:16:0f:2b:84:a1:50:5b:b6:
         21:ae:c3:76:bc:89:d0:82:45:92:81:92:52:65:f5:f9:3b:c9:
         bf:ba:c5:79:b8:b7:cb:22:e4:18:86:0d:f8:67:f6:c9:27:e1:
         20:8a:ca:1b:7b:b3:d2:e7:8b:4c:52:be:5e:6f:f9:9e:a8:0b:
         ea:80:6b:6e:0e:cf:8f:9c:81:3a:09:66:65:7c:c1:38:30:eb:
         f6:f0:ce:ec:fa:de:22:30:c2:7b:f7:db:ff:a5:3e:c5:a2:50:
         cb:35:f7:03:33:15:23:dc:48:47:66:6f:ca:b3:95:93:34:f1:
         77:44:fa:6b:97:75:ba:f1:dd:17:ea:44:58:5e:f4:91:97:5f:
         0e:18:b7:58:fc:d2:25:7a:0a:7a:2e:c7:9f:4a:62:39:63:68:
         34:84:95:25:31:f5:cc:90:0f:5d:7a:8c:25:24:fa:c7:5e:68:
         76:a8:0a:f4:7e:90:db:73:c3:ea:eb:c8:0f:41:5a:0d:d5:76:
         1e:87:d5:40:7f:30:6b:ea:7b:ad:55:f1:21:e3:dc:2c:71:f0:
         ac:4a:68:17:ca:8b:5c:6a:c0:9a:a1:19:1b:aa:6d:62:21:c1:
         ff:e8:fb:39:d6:32:1f:8d:6b:eb:a8:f0:36:f4:0b:5f:29:d1:
         93:7c:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:07:40 2026 by rpki-client