This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iNC9zOLfKzg3BY1knrdcwZHFbV0.roa
File:                     iNC9zOLfKzg3BY1knrdcwZHFbV0.roa (raw, json)
Hash identifier:          m1kqg1B2euhIaZL+r9VXALkVBL82WimS9cmY7kCg+7M=
Subject key identifier:   88:D0:BD:CC:E2:DF:2B:38:37:05:8D:64:9E:B7:5C:C1:91:C5:6D:5D
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       14ED
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iNC9zOLfKzg3BY1knrdcwZHFbV0.roa
Signing time:             Tue 03 Jun 2025 23:39:16 +0000
ROA not before:           Tue 03 Jun 2025 23:39:16 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5357 (0x14ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun  3 23:39:16 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=88D0BDCCE2DF2B3837058D649EB75CC191C56D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4c:14:96:25:d4:e5:da:7d:de:e0:ff:71:4c:
                    16:b2:69:8b:ce:a7:ab:2d:75:ec:c9:12:43:84:de:
                    8a:51:52:3b:b1:de:75:a0:d8:79:77:77:e3:39:e6:
                    16:70:71:b9:ca:8a:c6:c0:ec:6c:53:2d:dc:78:c7:
                    ca:07:fd:9b:89:ef:9a:9a:ae:84:90:ad:b1:5a:29:
                    b5:d0:d0:1d:99:55:a4:2e:8e:00:f5:4b:fa:0f:c8:
                    25:34:fa:1f:18:e7:cf:87:1f:fa:75:eb:ab:15:e3:
                    78:df:59:f8:b2:ea:25:60:01:69:90:1e:be:ef:ff:
                    91:3e:a3:b3:b6:dc:94:07:db:92:73:1f:48:d3:40:
                    cd:b6:8d:5d:26:68:91:49:90:f4:4d:fc:87:0d:39:
                    d5:f7:50:49:88:7a:79:c7:71:a3:89:35:f0:92:06:
                    73:aa:3b:1d:b3:04:cd:88:e7:10:cb:9c:b0:7c:50:
                    de:d6:7d:51:05:ce:87:82:a8:55:b2:73:57:8c:e5:
                    bb:23:13:42:91:ea:a9:5a:84:22:ae:bf:96:e8:fc:
                    04:0e:a8:42:7f:7e:ed:e3:4b:5d:22:3f:bf:88:b7:
                    e7:26:77:9c:d7:ee:70:48:a1:42:8d:6d:e7:58:e4:
                    62:2a:51:33:d3:b7:e2:e4:d6:0b:6a:fd:e4:43:24:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D0:BD:CC:E2:DF:2B:38:37:05:8D:64:9E:B7:5C:C1:91:C5:6D:5D
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iNC9zOLfKzg3BY1knrdcwZHFbV0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:75:fa:15:66:12:07:89:80:cc:fb:76:e0:bb:45:24:01:c1:
         ab:32:6b:df:0c:0a:a9:75:4d:81:a3:95:53:89:ec:36:36:01:
         40:a2:5b:ab:94:ff:64:6e:c8:af:fc:e6:34:77:70:a9:59:6f:
         8c:52:7c:1f:1f:ae:7f:b9:94:4c:5b:22:56:20:a4:40:2a:ba:
         72:bc:6d:7f:94:a7:fe:a8:fa:01:36:69:dc:d6:e6:44:b1:2a:
         ae:59:9b:9f:54:12:b4:fd:92:b2:6c:43:54:b2:7c:bc:16:24:
         93:aa:27:15:51:ba:26:19:81:b8:fb:00:09:01:ff:12:34:d0:
         2b:5b:2f:76:ad:7b:40:ab:3c:06:09:73:d2:10:05:10:53:b0:
         2e:82:ca:47:b3:50:34:5b:86:0b:fb:7c:52:78:c8:6b:ec:b2:
         ce:c1:45:f5:a5:c3:a1:96:a9:1a:77:34:a5:31:9e:a6:c3:67:
         42:7c:2b:66:9b:78:eb:67:80:90:ad:7e:2d:80:65:26:3c:ce:
         45:59:9f:a0:4e:0a:2f:54:02:fb:ef:a2:1d:9b:c8:91:51:e0:
         84:83:df:08:84:6b:e8:3e:2b:98:fd:e0:28:ff:97:00:3f:00:
         61:c4:4e:99:10:f7:3c:30:7a:16:b7:98:49:94:bc:5f:b7:2b:
         26:79:f4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:06:54 2026 by rpki-client