This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/HMyx8sMSJivPhHD6olqow-IklLo.roa
File:                     HMyx8sMSJivPhHD6olqow-IklLo.roa (raw, json)
Hash identifier:          87COKzBNPCVLYqMl1eaXKlS3ROUOUA7jWFWX4kPbi44=
Subject key identifier:   1C:CC:B1:F2:C3:12:26:2B:CF:84:70:FA:A2:5A:A8:C3:E2:24:94:BA
Certificate issuer:       /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial:       05E1
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/HMyx8sMSJivPhHD6olqow-IklLo.roa
Signing time:             Tue 13 Jan 2026 07:20:44 +0000
ROA not before:           Tue 13 Jan 2026 07:20:44 +0000
ROA not after:            Sat 09 Jan 2027 08:23:18 +0000
asID:                     9911
IP address blocks:        103.114.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
        Validity
            Not Before: Jan 13 07:20:44 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=1CCCB1F2C312262BCF8470FAA25AA8C3E22494BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:94:8f:a9:63:ae:a8:8b:8e:2f:62:04:7d:
                    1c:e6:66:5f:3e:4e:c6:84:1f:17:49:ea:16:95:55:
                    13:c9:93:0b:14:38:85:16:27:55:54:a4:54:c6:5c:
                    15:67:64:b6:df:26:6d:19:6b:8e:e3:f8:23:d3:a5:
                    30:5f:a5:11:91:fa:a5:ec:75:7e:30:9d:76:ca:2b:
                    6a:9f:84:9c:8d:55:ae:ed:87:d0:80:62:5e:9d:bb:
                    2b:b1:ff:44:51:2e:d6:aa:d7:02:90:fa:4b:7d:1c:
                    5d:a4:ca:0f:69:a4:68:f0:b6:dc:6a:a8:ea:86:b7:
                    d2:61:2d:33:cb:0a:04:6d:73:c7:5a:bc:d3:1f:a0:
                    38:d1:55:4a:aa:09:19:6d:26:1d:ef:59:da:43:a8:
                    2a:3c:7d:b7:0d:6b:b0:70:6b:a7:b3:a2:fe:cb:aa:
                    09:20:75:f7:c4:ef:7d:d1:c7:d5:cc:35:a3:2c:9b:
                    6e:39:e9:a5:73:46:e0:6f:a6:a5:3c:a3:34:be:35:
                    e0:24:46:f7:67:ca:97:5b:31:80:ad:c8:6a:6e:ed:
                    c5:2c:67:1b:cb:99:f2:09:7e:89:74:58:aa:84:3c:
                    c4:9c:e0:31:8a:91:23:d0:9d:9b:45:d2:af:b7:06:
                    30:9e:ee:d9:d3:84:6a:04:40:bf:25:94:6d:69:e0:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CC:B1:F2:C3:12:26:2B:CF:84:70:FA:A2:5A:A8:C3:E2:24:94:BA
            X509v3 Authority Key Identifier:
                keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/HMyx8sMSJivPhHD6olqow-IklLo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:cf:58:c6:20:a9:a4:a8:63:33:9b:b5:b4:69:6a:e2:d4:
         6e:84:4d:4a:d0:c3:4f:26:18:f8:c6:a3:54:a3:fe:04:9b:ea:
         0c:9d:e7:bf:1e:f8:2b:d1:1f:5f:68:98:e2:92:46:dc:4c:98:
         ae:c6:2a:69:49:f7:ec:aa:8b:c5:6d:72:a0:15:19:c2:10:a5:
         87:da:67:f9:63:88:93:7a:90:9b:b0:0e:28:be:3e:8e:cf:81:
         66:98:d6:0e:be:9e:54:4c:a0:ca:fa:19:a2:f6:63:15:00:90:
         30:b6:2e:13:b5:81:e2:e5:0f:93:e6:cd:5f:c9:fa:42:2a:dc:
         69:85:85:f8:a2:b7:29:cc:c7:cb:e9:51:cb:c8:1b:85:10:58:
         d9:90:06:6d:f4:ea:3f:e1:a3:19:a8:db:ea:bc:76:d9:b3:46:
         c9:dc:ad:2e:c1:c7:39:fd:24:43:29:94:19:44:61:6e:a4:fa:
         03:c3:a1:0d:7b:c5:d9:e4:56:1e:14:45:22:7b:eb:09:fa:12:
         22:a5:f3:aa:35:3f:aa:47:bc:71:c5:5e:04:dc:f0:ac:58:70:
         d5:94:d6:66:fa:4a:21:c3:11:fa:4b:f4:37:cf:f4:18:6d:7c:
         f6:ab:43:02:53:4e:be:21:e9:8a:a8:b6:c4:50:25:ed:b5:1c:
         90:fd:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:21:57 2026 by rpki-client