This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/egEE_1nS-7DZrdcORHsNCX1fLCo.roa
File:                     egEE_1nS-7DZrdcORHsNCX1fLCo.roa (raw, json)
Hash identifier:          ZitqvTYSznXSwmUl6QchBv2+eiqRMtTymCeaxUzaKmc=
Subject key identifier:   7A:01:04:FF:59:D2:FB:B0:D9:AD:D7:0E:44:7B:0D:09:7D:5F:2C:2A
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       1941
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/egEE_1nS-7DZrdcORHsNCX1fLCo.roa
Signing time:             Mon 09 Jun 2025 18:09:47 +0000
ROA not before:           Mon 09 Jun 2025 18:09:47 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6465 (0x1941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun  9 18:09:47 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=7A0104FF59D2FBB0D9ADD70E447B0D097D5F2C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:e7:9e:ef:09:f5:8d:24:41:40:d0:02:3d:
                    ce:42:60:12:4f:f3:37:dc:06:f6:5d:49:93:93:81:
                    cf:dd:e2:af:6e:f4:19:84:9f:a4:aa:3a:af:d1:ca:
                    dd:23:8e:7f:b2:51:e3:eb:46:1f:1b:7c:63:af:46:
                    da:59:21:57:e6:c3:bd:7a:2a:3b:14:36:69:df:e2:
                    76:0d:5d:9f:e8:14:c1:41:3b:be:32:81:31:e4:60:
                    be:09:bc:e5:d0:14:24:31:9c:e7:22:38:9b:b5:37:
                    3f:65:06:55:88:ac:a4:a1:f0:27:c7:00:71:bf:4e:
                    44:cb:98:9b:75:bb:87:1d:80:a1:03:76:1e:33:84:
                    b7:c9:58:0a:76:65:d0:78:e0:d5:f0:de:80:65:13:
                    b6:71:f9:93:1d:33:48:9c:c7:80:f7:f7:2d:7d:33:
                    27:c4:74:2c:3f:84:c9:8e:4a:88:83:68:84:cf:0f:
                    4d:00:6a:35:6c:d3:4a:15:be:16:39:72:d5:2f:95:
                    7f:30:82:32:19:3d:74:4d:54:fc:2a:72:da:a4:8a:
                    d6:52:ed:f4:e2:74:3a:e1:07:8b:9a:4f:1c:31:e7:
                    59:f6:71:01:61:48:36:ef:15:66:a3:23:cb:3d:ae:
                    1c:12:7f:15:12:22:72:c8:6b:af:e6:a5:05:4d:1f:
                    21:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:01:04:FF:59:D2:FB:B0:D9:AD:D7:0E:44:7B:0D:09:7D:5F:2C:2A
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/egEE_1nS-7DZrdcORHsNCX1fLCo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:a7:f3:12:01:68:42:58:6d:2e:3d:82:66:79:ed:c5:0a:
         ef:b5:72:80:f7:a5:9d:65:84:06:2c:fe:98:a2:fd:5a:82:90:
         65:a4:3f:77:2a:ed:93:4c:69:cb:0c:29:05:6c:92:68:c2:ff:
         30:31:6f:f0:ec:18:f6:bb:99:4d:27:4e:4f:a1:dd:3a:e0:9f:
         07:84:00:e2:a5:38:7c:63:ed:8c:e6:e2:6c:9b:6e:79:2f:56:
         82:c2:0f:91:9f:99:5b:27:73:4e:a0:a1:94:d9:93:f5:43:ab:
         9e:87:55:1a:51:1f:36:cd:25:a3:0a:54:ae:e1:30:a8:1d:10:
         64:42:61:48:9e:42:36:c2:b4:a3:1c:89:30:83:ce:13:4c:44:
         fb:d5:52:ea:5e:57:22:bf:14:af:d7:3b:80:a3:ab:ab:c1:f7:
         2b:45:82:a5:0e:84:23:54:9f:6f:5c:08:5e:e1:a1:85:10:dd:
         e3:7a:03:1e:5d:d4:f0:0a:39:93:04:34:c6:6f:6d:60:45:11:
         42:cc:d0:f4:9b:66:f3:53:93:e0:d0:3f:00:09:64:7e:5e:7d:
         53:36:24:9f:9c:63:d6:89:a7:e0:dd:e5:02:5b:53:c0:94:a9:
         02:7e:91:1f:d0:4f:5f:b3:e1:00:bb:42:43:a1:6c:70:77:3e:
         db:b4:d2:1b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDkx
ODA5NDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDdBMDEwNEZGNTlEMkZC
QjBEOUFERDcwRTQ0N0IwRDA5N0Q1RjJDMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClkeee7wn1jSRBQNACPc5CYBJP8zfcBvZdSZOTgc/d4q9u9BmE
n6SqOq/Ryt0jjn+yUePrRh8bfGOvRtpZIVfmw716KjsUNmnf4nYNXZ/oFMFBO74y
gTHkYL4JvOXQFCQxnOciOJu1Nz9lBlWIrKSh8CfHAHG/TkTLmJt1u4cdgKEDdh4z
hLfJWAp2ZdB44NXw3oBlE7Zx+ZMdM0icx4D39y19MyfEdCw/hMmOSoiDaITPD00A
ajVs00oVvhY5ctUvlX8wgjIZPXRNVPwqctqkitZS7fTidDrhB4uaTxwx51n2cQFh
SDbvFWajI8s9rhwSfxUSInLIa6/mpQVNHyGjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUegEE/1nS+7DZrdcORHsNCX1fLCowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9lZ0VFXzFuUy03RFpyZGNP
UkhzTkNYMWZMQ28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBABayp/MSAWhCWG0uPYJmee3FCu+1coD3pZ1l
hAYs/pii/VqCkGWkP3cq7ZNMacsMKQVskmjC/zAxb/DsGPa7mU0nTk+h3TrgnweE
AOKlOHxj7Yzm4mybbnkvVoLCD5GfmVsnc06goZTZk/VDq56HVRpRHzbNJaMKVK7h
MKgdEGRCYUieQjbCtKMciTCDzhNMRPvVUupeVyK/FK/XO4Cjq6vB9ytFgqUOhCNU
n29cCF7hoYUQ3eN6Ax5d1PAKOZMENMZvbWBFEULM0PSbZvNTk+DQPwAJZH5efVM2
JJ+cY9aJp+Dd5QJbU8CUqQJ+kR/QT1+z4QC7QkOhbHB3Ptu00hs=
-----END CERTIFICATE-----
Generated at Mon Jan 12 05:54:34 2026 by rpki-client