This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/AW_C5qxrZXFIBotToTTLjEbjo6I.roa
File:                     AW_C5qxrZXFIBotToTTLjEbjo6I.roa (raw, json)
Hash identifier:          9nLgilteBwqsCB9ASQuzqJsDjUt/MAE+4rKfwm5H5uk=
Subject key identifier:   01:6F:C2:E6:AC:6B:65:71:48:06:8B:53:A1:34:CB:8C:46:E3:A3:A2
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       EDB6
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AW_C5qxrZXFIBotToTTLjEbjo6I.roa
Signing time:             Mon 19 Jan 2026 17:57:38 +0000
ROA not before:           Mon 19 Jan 2026 17:57:38 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     63612
IP address blocks:        43.227.80.0/20 maxlen: 20
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60854 (0xedb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Jan 19 17:57:38 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=016FC2E6AC6B657148068B53A134CB8C46E3A3A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:22:5a:cd:2f:7e:17:09:b2:53:6f:c7:5b:
                    72:1a:83:41:cf:29:4d:17:d2:68:03:0b:9e:7b:75:
                    23:89:a4:6c:56:81:2e:44:27:f2:67:93:30:6d:88:
                    76:23:31:3d:03:c0:41:2f:65:fa:e8:12:c9:e9:ac:
                    cf:51:15:f0:09:c3:4b:b2:27:69:df:0f:e6:23:4b:
                    31:0c:a9:75:a1:ba:f6:a9:04:98:52:cc:29:83:27:
                    a1:6e:a6:67:a1:82:3e:c0:9c:d0:62:76:68:d4:c6:
                    c9:ad:38:3c:72:da:4d:ab:06:8a:b6:2d:af:0b:50:
                    1c:5b:5d:98:62:f0:81:e4:7d:89:60:5c:27:59:8b:
                    af:36:c9:32:fe:cb:a8:bf:00:fe:ef:bf:67:a5:c3:
                    cb:3a:fd:12:0e:61:c7:cf:8b:6e:f7:6c:84:68:cf:
                    3a:5f:30:71:4e:04:85:7c:35:b0:9d:90:23:a1:83:
                    c2:39:e3:eb:8c:1c:2b:21:f1:a9:8e:78:00:02:97:
                    c2:1c:5a:2c:e0:8b:7e:36:17:81:a1:ab:ba:64:2d:
                    c6:bb:d7:27:f0:47:24:83:e5:78:a5:a0:b1:6d:3e:
                    1b:48:a1:01:16:a9:bf:f4:e8:25:9d:dc:02:2d:4b:
                    84:b4:28:bb:4f:6f:b7:83:30:23:f4:2d:ce:05:32:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6F:C2:E6:AC:6B:65:71:48:06:8B:53:A1:34:CB:8C:46:E3:A3:A2
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AW_C5qxrZXFIBotToTTLjEbjo6I.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:98:fa:66:a8:65:e2:c3:22:77:ed:e5:34:dd:2d:01:7b:32:
         7f:ed:48:cc:23:47:b1:6d:07:f7:d4:02:1a:47:66:f4:ca:91:
         2a:65:17:9c:95:c1:32:f2:d2:38:e7:67:4a:56:b1:61:04:2e:
         13:6d:fc:fd:2f:62:c7:a5:9b:8d:0a:6d:6e:39:ef:e8:80:cd:
         65:76:e3:3d:b7:69:f6:ed:a0:7f:ed:a4:f2:54:5f:13:9a:07:
         5c:6c:a0:60:bc:93:3e:f9:8d:a8:b8:bd:3f:42:fb:b9:e6:93:
         3b:7b:59:11:b0:3d:19:bb:f7:e9:5b:d7:62:3c:14:5b:65:39:
         7a:5d:48:ec:69:8f:e1:d4:9a:68:a5:ae:7a:1e:21:9a:39:68:
         5a:71:1d:2e:81:6f:cd:08:4c:6d:46:1c:8a:7f:6e:d5:30:8a:
         d7:9d:55:d7:95:e8:d2:70:13:02:fa:92:7b:f3:42:2f:4d:46:
         77:67:ab:a0:2b:bc:e0:1f:cd:13:0e:6a:a5:d8:62:54:c0:fd:
         33:04:8f:29:2c:b3:9c:d3:d9:49:69:dd:8b:84:1e:be:6c:c0:
         73:27:1a:17:e3:b7:26:e5:5b:3f:3c:e4:b2:89:84:ba:fa:47:
         e5:c4:27:75:a8:bd:f5:b6:72:13:a4:00:f9:ed:d3:f7:b0:9c:
         3d:b3:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:55:53 2026 by rpki-client