This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/fTS-gt72bKUsP0N_xdRaJx7QWtM.roa
File:                     fTS-gt72bKUsP0N_xdRaJx7QWtM.roa (raw, json)
Hash identifier:          IfkRuAV1RADBfy7NjLRjmwJOK8Ghd388mLLBt6VGzW4=
Subject key identifier:   7D:34:BE:82:DE:F6:6C:A5:2C:3F:43:7F:C5:D4:5A:27:1E:D0:5A:D3
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       056E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fTS-gt72bKUsP0N_xdRaJx7QWtM.roa
Signing time:             Wed 14 May 2025 07:38:02 +0000
ROA not before:           Wed 14 May 2025 07:38:02 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 14 07:38:02 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=7D34BE82DEF66CA52C3F437FC5D45A271ED05AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:37:e3:3c:fd:af:ad:ca:13:d4:12:df:c8:
                    8a:9c:81:23:b8:98:d1:23:b6:55:fa:18:1b:59:f1:
                    58:7b:44:c3:c5:71:b5:dc:fa:f0:44:e0:83:8e:62:
                    bd:76:28:f0:59:31:0f:62:b2:a0:d4:d8:e2:f8:34:
                    1f:fc:8d:c5:9b:a6:09:00:43:b0:38:15:8b:a4:6e:
                    4b:ec:89:f0:54:47:a7:44:31:60:f9:ae:ea:9a:41:
                    3a:ef:d8:ad:ec:c3:05:14:44:60:24:90:44:e2:5a:
                    43:3d:28:40:86:1c:e4:69:e4:b3:19:53:97:e2:3c:
                    74:b2:56:7b:fd:a3:2a:93:b7:34:77:cd:92:53:e6:
                    9f:9d:1e:dd:64:2a:51:f2:15:81:36:ed:07:4b:f3:
                    a6:6a:11:b3:a4:7b:6b:d1:35:7c:38:ec:8a:37:c4:
                    b5:f0:86:f5:ca:f1:0c:5f:30:ad:5b:32:03:7f:20:
                    05:ae:58:77:60:dd:e2:23:08:60:d8:52:bd:4d:fd:
                    11:ab:91:12:23:b8:de:d2:16:ab:6e:ba:e1:3c:0b:
                    64:03:6c:a0:21:3a:78:dc:26:30:42:6a:c1:9c:9f:
                    a1:e3:dc:4f:cb:30:3a:c0:8c:be:25:4c:82:ea:f4:
                    33:e0:b6:66:3f:4f:2b:7b:de:84:87:7f:dc:9e:ef:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:34:BE:82:DE:F6:6C:A5:2C:3F:43:7F:C5:D4:5A:27:1E:D0:5A:D3
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fTS-gt72bKUsP0N_xdRaJx7QWtM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:58:3f:52:fd:0c:c6:ae:ff:b9:6d:c6:69:3c:20:66:10:13:
         b3:cd:ea:26:98:a6:0d:fa:9b:71:a3:d4:88:10:2a:8a:65:ea:
         1f:d1:f3:64:34:02:d2:71:3f:82:30:fb:63:11:ee:4b:f5:93:
         77:50:56:cf:36:e9:94:03:81:bd:8a:2b:dd:59:df:77:a0:85:
         20:0d:b3:46:d1:36:eb:63:d3:54:5b:79:6b:d9:7f:19:40:33:
         89:c7:60:20:81:56:c3:18:39:6f:c1:ca:94:c9:64:0f:5a:49:
         71:96:c8:98:89:ec:12:18:da:7d:45:48:26:b0:e2:e8:78:0a:
         17:e8:07:a9:4f:7d:7a:10:cd:24:af:1a:a9:16:22:c6:03:4b:
         50:aa:c7:3b:e8:f7:51:07:4a:43:d4:f8:38:0b:0e:2f:91:76:
         aa:8c:4c:c3:92:77:3d:1b:b6:b0:4e:84:63:5a:82:d2:2f:02:
         91:d6:0e:33:b2:67:35:80:78:d9:13:59:c1:57:38:74:51:77:
         4f:98:bd:74:41:c6:28:f6:10:5a:68:cf:53:12:c6:16:92:54:
         01:25:3f:a5:4a:c7:e5:46:95:01:25:ef:86:78:89:da:5e:0a:
         17:3b:18:b0:86:cb:84:c3:80:22:ce:49:02:d2:f1:c1:78:3d:
         36:0f:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:24:00 2026 by rpki-client