This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/f-DfKJ8Sq31rVc8TtvEkN-IzpeE.roa
File:                     f-DfKJ8Sq31rVc8TtvEkN-IzpeE.roa (raw, json)
Hash identifier:          L5OD9TVSeLaMo6aNhrXp7KaV8EM/WxX7uajea31wLf8=
Subject key identifier:   7F:E0:DF:28:9F:12:AB:7D:6B:55:CF:13:B6:F1:24:37:E2:33:A5:E1
Certificate issuer:       /CN=581041F42679F5E17F19C37E490A7794863B2BEB
Certificate serial:       120A
Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/f-DfKJ8Sq31rVc8TtvEkN-IzpeE.roa
Signing time:             Mon 26 Jan 2026 06:54:07 +0000
ROA not before:           Mon 26 Jan 2026 06:54:07 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     17621
IP address blocks:        103.96.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4618 (0x120a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB
        Validity
            Not Before: Jan 26 06:54:07 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=7FE0DF289F12AB7D6B55CF13B6F12437E233A5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:bd:bf:cf:e1:f6:3c:af:7c:f0:5a:ad:db:
                    d1:ac:02:f0:35:7a:a3:98:95:ad:41:9f:a6:fe:e4:
                    ef:5c:cd:be:07:8c:52:da:17:c7:8c:d7:57:84:16:
                    ce:0c:72:ca:b3:2b:ed:b0:30:16:84:e2:cb:32:e0:
                    68:5a:e2:00:cd:74:c3:29:60:80:c8:26:d6:e3:71:
                    93:79:6a:b6:51:34:28:f3:f3:62:bf:9e:8f:09:3e:
                    65:ad:7b:a9:d9:5c:3b:61:f0:66:08:98:33:5b:ed:
                    47:6b:03:33:bd:01:f8:a8:84:1e:d1:7a:7d:0e:a8:
                    fd:34:bb:76:3e:0f:08:08:6b:19:a6:da:13:d2:b0:
                    d6:61:8c:a2:a2:ef:0b:ec:69:13:1e:28:32:c9:39:
                    b4:79:56:51:c0:30:64:b8:87:dc:f0:8b:b0:cc:eb:
                    97:86:39:b5:2f:8c:aa:d4:2e:f8:59:1c:cf:45:9e:
                    37:69:ae:4d:70:b4:09:3b:1c:c6:37:d3:fe:db:2a:
                    f2:1d:99:7c:d4:cb:f7:a5:9a:d4:19:a1:ca:a3:2f:
                    85:f5:e1:4f:a7:95:6a:7e:d8:65:17:d0:60:14:0a:
                    d2:ae:31:f7:a1:fc:19:31:9b:63:f6:e8:45:bc:1b:
                    52:34:94:65:4f:c5:07:8c:af:b3:c4:7f:e0:59:b2:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E0:DF:28:9F:12:AB:7D:6B:55:CF:13:B6:F1:24:37:E2:33:A5:E1
            X509v3 Authority Key Identifier:
                keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/f-DfKJ8Sq31rVc8TtvEkN-IzpeE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:f3:af:61:8b:ba:36:f1:f2:90:81:bc:17:62:73:ba:e4:2d:
         e8:e2:3d:9a:c6:88:ce:60:64:e9:86:11:cd:db:fb:18:ca:d1:
         d8:90:34:ad:c5:7e:12:a5:65:64:cd:db:1e:e2:a0:fd:73:57:
         88:ad:b5:da:49:1a:62:8c:0d:d2:9c:cb:e1:5f:c8:1d:29:d3:
         37:cb:41:74:c0:58:28:ad:20:e2:f1:d1:fb:42:9b:b0:51:89:
         ad:cd:db:ad:88:35:2c:81:7f:26:dc:75:ef:dd:a5:47:02:b7:
         5b:2e:03:67:d7:36:a3:f0:c9:aa:53:ee:66:b5:af:1a:01:f9:
         ef:96:9d:8e:e7:19:ca:31:a9:71:45:e7:e8:64:b5:57:21:84:
         1d:d5:6b:db:22:50:59:69:12:a5:98:cb:e3:1e:e2:a0:e0:f9:
         67:a6:16:b0:53:3c:58:85:33:3b:a5:6b:52:79:00:11:3b:f2:
         54:22:d3:bb:e9:1f:5d:a3:b2:c8:bb:8d:29:aa:d5:07:c0:62:
         c6:b7:17:8e:ce:04:e5:75:0d:26:e6:11:d8:94:ab:45:fb:75:
         7e:83:ef:c0:8d:35:9a:f5:33:4f:de:b9:2f:55:56:5b:fa:26:
         2f:da:b5:58:47:2c:19:c1:e4:92:0a:21:f4:69:f7:d8:fd:21:
         c8:47:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:19:18 2026 by rpki-client