This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sW09W17SUwrFa3urcKIKOPRJdR4.roa
File:                     sW09W17SUwrFa3urcKIKOPRJdR4.roa (raw, json)
Hash identifier:          LssC/z2cY2PbkpVB4YyEu/g0GUZ2JwPpu4+6ei2LUUo=
Subject key identifier:   B1:6D:3D:5B:5E:D2:53:0A:C5:6B:7B:AB:70:A2:0A:38:F4:49:75:1E
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       017A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sW09W17SUwrFa3urcKIKOPRJdR4.roa
Signing time:             Fri 09 May 2025 01:07:45 +0000
ROA not before:           Fri 09 May 2025 01:07:45 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May  9 01:07:45 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=B16D3D5B5ED2530AC56B7BAB70A20A38F449751E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:9c:f9:ed:e3:a9:62:e1:43:db:3d:6d:77:
                    8d:78:33:4b:62:e5:74:43:48:f7:72:60:d1:bc:68:
                    a5:fb:83:94:44:55:13:d0:44:df:e0:79:27:c8:7c:
                    4b:6e:c4:da:f3:2c:37:a8:92:fd:10:d5:1a:82:6e:
                    41:ca:2b:f9:9b:d8:ce:ca:66:8b:06:1b:6b:b1:a8:
                    c4:59:ca:6b:d1:9d:6e:82:f0:02:5f:05:d3:a6:ba:
                    87:b5:31:5a:26:61:7f:da:41:ed:02:b3:3a:2b:f0:
                    a1:5b:db:bf:c9:13:d2:5b:5b:c9:b7:96:41:23:6b:
                    1d:06:80:a5:36:bc:74:cd:c4:6e:c5:6a:b9:f5:d3:
                    25:ae:94:1a:3a:13:78:08:76:32:0b:25:43:eb:97:
                    38:76:fb:8c:03:87:cd:e5:fb:b9:36:23:0a:6a:bf:
                    71:e0:4a:d0:07:6b:a1:e4:05:d9:23:6b:3e:ae:c3:
                    f4:d3:97:d1:b5:59:26:c9:52:b7:8a:99:3f:26:92:
                    2b:d0:c6:a3:5d:5f:9c:a7:ce:4c:58:0d:28:fb:9d:
                    a1:a5:55:0a:3a:38:02:6c:0f:0a:be:cb:8c:ac:aa:
                    a0:ac:1b:5b:3c:fa:76:90:88:c9:19:d7:7f:46:cb:
                    1d:57:3a:f3:3b:f4:01:fb:6a:26:49:b8:1c:ca:62:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6D:3D:5B:5E:D2:53:0A:C5:6B:7B:AB:70:A2:0A:38:F4:49:75:1E
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sW09W17SUwrFa3urcKIKOPRJdR4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:a6:c7:85:b5:30:ca:5f:21:1c:57:3f:75:c0:e9:d8:2f:
         70:7c:e1:74:a3:33:35:9a:26:01:55:51:9d:f6:ca:c1:3c:82:
         43:2b:b9:a3:06:30:51:83:cb:4b:ba:3a:6d:78:7e:eb:d7:bb:
         64:f1:8f:17:cf:05:41:18:06:fb:e6:f5:d8:f8:e9:22:1a:72:
         6e:60:d9:82:af:2b:6b:fa:23:98:3e:bc:96:5f:21:f2:21:c8:
         76:68:d9:07:f9:0e:fb:bd:6d:fd:37:f5:88:1d:b6:fd:b3:bf:
         73:fb:e4:1a:42:e7:d1:ca:37:f2:1f:77:6b:93:87:1f:63:1b:
         4d:83:ba:4f:0c:7f:d2:17:c3:74:9b:ef:d9:c4:8d:ab:4b:f8:
         ca:09:28:02:ce:66:cf:74:a1:6b:3f:ea:07:74:c3:4d:e7:4b:
         04:41:c3:9e:6e:40:3a:94:8e:5d:5d:d0:13:80:b5:f6:1a:00:
         64:ed:7a:3b:4f:7c:0f:88:1f:2c:53:c3:7b:3f:1d:2a:cf:2c:
         3c:7b:64:5f:9d:7c:28:55:f3:67:27:94:45:a9:fa:39:a2:19:
         c8:b2:5f:0e:e6:62:dc:0e:a2:4a:a3:98:38:55:f2:aa:1c:25:
         5c:75:f9:05:36:13:c4:dd:2c:a7:fb:34:54:9a:32:fa:9f:96:
         81:47:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:57:57 2026 by rpki-client