This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/zvYcJ3O0_M7H5Q5WQejkcVSqGGk.roa
File:                     zvYcJ3O0_M7H5Q5WQejkcVSqGGk.roa (raw, json)
Hash identifier:          iD0ubcjYb3Yegx+mHYs1Ln4JFD1dCH5/E2s9Wd+sB2o=
Subject key identifier:   CE:F6:1C:27:73:B4:FC:CE:C7:E5:0E:56:41:E8:E4:71:54:AA:18:69
Certificate issuer:       /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial:       1772
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/zvYcJ3O0_M7H5Q5WQejkcVSqGGk.roa
Signing time:             Fri 16 Jan 2026 04:30:26 +0000
ROA not before:           Fri 16 Jan 2026 04:30:26 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     62387
IP address blocks:        119.59.252.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6002 (0x1772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
        Validity
            Not Before: Jan 16 04:30:26 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=CEF61C2773B4FCCEC7E50E5641E8E47154AA1869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:0b:e6:4f:df:4c:81:f0:7d:1a:23:9a:51:
                    fc:b0:03:88:e2:a2:4d:29:4f:9a:fe:42:c7:c6:2e:
                    53:cf:f6:32:52:27:3d:fa:92:2a:8b:01:a8:1d:58:
                    64:ed:a7:b9:09:a0:2d:c8:6a:c2:90:bc:95:6d:5a:
                    93:b9:8a:f1:e5:0b:08:f6:11:af:b3:99:27:eb:dd:
                    be:11:f8:3b:7d:c7:75:99:12:9a:df:06:a5:ca:bc:
                    92:dd:13:5e:2c:67:da:8f:fd:47:0f:7a:1f:1f:4b:
                    a7:66:50:92:af:53:7a:f3:f6:67:c1:55:bf:37:0f:
                    01:34:aa:71:84:c9:6e:06:02:6a:a4:8a:33:ee:7d:
                    90:58:42:72:b6:78:b4:c5:75:3b:83:76:c0:2e:96:
                    6f:43:ad:3b:3a:48:e4:b8:1c:cb:f9:b0:e2:6d:63:
                    c8:68:0f:43:b4:95:da:8a:95:93:58:5b:7d:a0:8d:
                    c0:55:1d:78:14:d5:53:07:ee:92:9e:95:b9:9c:76:
                    f6:7c:b3:ea:bd:21:f7:43:b7:9d:00:79:a5:72:65:
                    73:03:b8:eb:69:c9:d3:ac:f0:bc:a2:60:11:a6:dd:
                    96:6e:c9:e4:bd:8a:81:87:c4:df:43:83:ed:e3:ea:
                    de:0c:23:5a:f4:aa:84:1a:97:0e:ab:59:3a:dc:70:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:1C:27:73:B4:FC:CE:C7:E5:0E:56:41:E8:E4:71:54:AA:18:69
            X509v3 Authority Key Identifier:
                keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/zvYcJ3O0_M7H5Q5WQejkcVSqGGk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:f3:bc:a8:70:5b:94:19:11:c2:39:0f:37:2b:d4:03:f0:b2:
         4f:29:a0:fe:9a:8b:f4:6e:80:fa:da:ee:b8:ae:31:e8:f7:99:
         91:b4:c8:59:76:8b:56:a7:13:61:6f:05:b7:97:c8:66:6a:20:
         52:7b:17:9e:fa:80:6c:a6:91:ac:ef:bb:d4:a8:81:99:16:cf:
         c9:20:78:aa:ef:b5:6e:13:1b:8f:cd:f2:ad:97:03:3c:eb:e2:
         cb:40:37:ef:dd:01:6c:05:2c:46:9d:20:70:92:75:1d:c6:d3:
         d5:2a:b2:b3:66:46:be:09:5b:f3:35:a5:88:79:d4:28:36:45:
         81:9b:de:e2:34:aa:04:f9:82:da:43:9a:7a:74:88:69:46:b4:
         18:e1:5d:f9:8f:ef:33:d5:43:27:b7:25:b3:ee:0e:83:1f:c6:
         30:29:a3:71:4a:b3:35:f8:bf:9f:61:c6:9f:96:94:a3:15:2f:
         69:6e:17:8b:47:72:89:c7:f9:a7:94:4c:d7:26:55:65:5f:b5:
         02:45:d8:79:73:dc:97:15:19:3a:32:9d:fd:d4:9c:4b:4c:fb:
         6f:32:f8:32:f7:71:8f:21:ef:8f:52:03:5f:4d:05:e6:c8:7c:
         da:89:0f:ea:d3:db:54:98:44:2b:16:7e:9c:f9:51:22:15:d9:
         73:3a:5a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 15:29:08 2026 by rpki-client