This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/9W3ZYHICQ6x5ZIC041KtBzA78oc.roa
File:                     9W3ZYHICQ6x5ZIC041KtBzA78oc.roa (raw, json)
Hash identifier:          qaNXoApZc6A1P3sB4Fw7G0NgKCqnp0BeMeBgZyTrT8Y=
Subject key identifier:   F5:6D:D9:60:72:02:43:AC:79:64:80:B4:E3:52:AD:07:30:3B:F2:87
Certificate issuer:       /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial:       05E0
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/9W3ZYHICQ6x5ZIC041KtBzA78oc.roa
Signing time:             Tue 13 Jan 2026 07:20:44 +0000
ROA not before:           Tue 13 Jan 2026 07:20:44 +0000
ROA not after:            Sat 09 Jan 2027 08:23:18 +0000
asID:                     51847
IP address blocks:        103.114.72.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
        Validity
            Not Before: Jan 13 07:20:44 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=F56DD960720243AC796480B4E352AD07303BF287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:62:61:8a:45:4c:1e:db:07:c0:04:51:21:34:
                    a9:f4:48:65:14:22:34:15:b8:66:84:9e:e9:f4:8d:
                    d1:c1:ad:47:9c:7d:39:45:11:c8:e3:67:d1:dc:5f:
                    47:45:c5:82:cc:bf:4c:da:72:2d:c7:92:f3:f4:6f:
                    a0:fd:e4:a7:92:1c:24:ac:49:35:54:b0:31:83:45:
                    36:95:87:24:bf:eb:ef:87:76:9b:1a:d8:6c:36:41:
                    a2:b2:5f:ef:1a:aa:17:e4:3b:07:fb:3e:61:aa:ef:
                    05:51:1b:42:0b:8b:3e:12:0c:f0:f5:f1:6d:aa:08:
                    29:63:4c:7a:0a:79:a8:79:13:ba:c6:6e:27:5a:1b:
                    cc:c9:62:43:76:b4:f6:5b:11:1c:01:db:65:2f:69:
                    20:6e:6b:1e:94:31:e3:a8:34:dd:d7:4d:59:cf:dd:
                    66:fe:9f:f0:46:41:f6:bf:26:9d:6e:df:56:e5:56:
                    3c:40:12:f2:dc:52:7a:e7:56:47:b1:b9:85:0e:72:
                    25:79:9b:8d:27:20:a0:6a:11:1b:b0:ff:03:af:fc:
                    11:70:ea:88:c3:f5:48:16:d9:f9:91:2e:e6:48:84:
                    e6:29:54:c6:43:5a:ce:93:3b:ac:f0:40:46:e3:b5:
                    fb:2e:29:0f:42:82:f6:a7:7a:20:9c:df:2d:9a:bd:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6D:D9:60:72:02:43:AC:79:64:80:B4:E3:52:AD:07:30:3B:F2:87
            X509v3 Authority Key Identifier:
                keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/9W3ZYHICQ6x5ZIC041KtBzA78oc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:c4:fb:08:1d:7b:32:87:e6:7c:67:2b:6a:c6:53:79:be:61:
         32:68:61:cf:aa:e6:a3:f3:32:94:b7:ed:ea:da:b6:da:e1:7d:
         b0:b8:43:f6:db:46:d2:4e:9b:75:ef:ed:d7:76:9a:d4:6d:68:
         4f:91:a1:5b:11:a7:a2:0a:2b:e7:44:a9:2b:e9:03:8e:4e:c6:
         5d:cc:f1:e1:42:2f:3a:b3:4c:a7:56:0e:b7:05:a4:06:bb:2e:
         81:18:ae:93:1b:05:7a:95:25:c9:4a:f3:f0:24:02:63:90:f6:
         d9:2e:6d:56:75:48:a1:d2:f3:28:f5:6d:94:ca:4f:0b:1d:82:
         ca:10:4d:8d:85:1f:1d:b5:77:f0:f6:8d:fc:a9:4b:e6:5b:d5:
         19:95:e1:54:c2:98:92:db:5e:08:af:79:2b:a1:38:d8:de:68:
         7d:ed:c8:93:5c:99:7a:e5:c0:73:b2:33:33:ce:d4:a9:48:34:
         a9:df:17:0d:ed:44:9f:04:a5:a0:8f:4c:1c:3b:d2:27:5d:ec:
         2e:15:c0:6f:ee:71:62:61:e3:fa:5f:1a:34:c8:de:17:c7:77:
         1f:bc:6a:b1:24:2e:59:d8:ea:b3:01:58:bc:ea:07:6c:40:9c:
         ce:26:a6:ed:23:92:20:3c:59:76:7e:8c:86:64:7f:6f:fd:f8:
         9b:6b:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:09:28 2026 by rpki-client