This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/qW6Bv7uoL_195H1MB_jChMWMSvo.roa
File:                     qW6Bv7uoL_195H1MB_jChMWMSvo.roa (raw, json)
Hash identifier:          AnbkRBuOTQcpm4hcUi0EemyrsDvNd2UATJd1hS1A14Q=
Subject key identifier:   A9:6E:81:BF:BB:A8:2F:FD:7D:E4:7D:4C:07:F8:C2:84:C5:8C:4A:FA
Certificate issuer:       /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1
Certificate serial:       062B
Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/qW6Bv7uoL_195H1MB_jChMWMSvo.roa
Signing time:             Thu 06 Nov 2025 02:54:52 +0000
ROA not before:           Thu 06 Nov 2025 02:54:52 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     9812
IP address blocks:        220.234.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 01:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1
        Validity
            Not Before: Nov  6 02:54:52 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=A96E81BFBBA82FFD7DE47D4C07F8C284C58C4AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:a8:be:30:76:1d:0d:43:9b:76:8d:86:80:
                    c8:0b:6a:b4:65:7f:cd:7f:b8:5b:c7:55:ce:02:d6:
                    4a:11:15:35:7c:8e:98:d4:4b:dc:57:76:19:5a:9a:
                    22:ef:7c:e7:b0:a4:7f:72:df:e4:15:e2:6f:5e:d3:
                    01:94:df:7a:50:87:e3:72:ef:5c:c5:21:11:89:14:
                    0f:cb:52:a3:a7:b7:5f:16:fe:ae:c1:a9:68:3b:79:
                    8d:29:31:5b:1a:19:c3:7a:6a:49:6f:b1:71:28:a1:
                    7a:45:3d:c0:dd:aa:60:a5:f5:7e:b1:b9:34:35:08:
                    ee:ab:c3:9e:f5:54:21:ca:1a:11:63:df:cd:33:19:
                    39:7b:81:de:9d:f5:52:f8:d0:93:9e:fe:0a:f3:a1:
                    42:fc:aa:06:84:36:24:10:ba:d0:9a:6d:47:14:68:
                    01:5a:18:4d:5a:1d:dc:56:be:27:8c:d5:9b:74:42:
                    e9:01:6f:bb:9d:9c:1b:77:65:9a:5e:ce:eb:0b:bc:
                    3e:96:2d:75:94:2a:ae:4e:5d:e8:5e:5c:13:21:c4:
                    ee:53:93:43:dc:40:92:d2:29:bb:b8:7e:0f:dc:27:
                    96:a6:c2:4a:46:59:2c:4b:70:3b:d0:43:c2:3f:69:
                    40:e6:b6:16:53:34:1c:aa:1e:00:d6:9f:40:a5:6a:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:81:BF:BB:A8:2F:FD:7D:E4:7D:4C:07:F8:C2:84:C5:8C:4A:FA
            X509v3 Authority Key Identifier:
                keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/qW6Bv7uoL_195H1MB_jChMWMSvo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:6e:bf:88:4f:81:7c:1e:dc:b1:cc:da:58:10:0a:8b:80:dd:
         8a:ef:a0:28:c1:d1:d0:01:b3:32:c5:fb:af:03:c1:66:69:b4:
         a7:da:37:d6:2b:c6:48:f8:3a:c5:6a:98:48:99:a3:1d:60:d0:
         28:43:ac:6b:a6:75:a2:30:8e:1c:47:10:09:86:b2:54:02:f3:
         a1:1f:d6:ed:63:15:b3:36:65:41:dc:6d:95:ff:b7:b0:93:2a:
         31:a3:9a:35:4e:f8:7d:0a:75:37:fe:f7:b8:f2:29:6b:9a:8e:
         f4:0e:bd:a5:47:bb:d6:2e:35:69:cd:1e:a1:09:26:a1:d6:bc:
         18:ad:03:b0:5b:38:90:65:d1:8c:6c:f1:80:06:e7:db:e8:e5:
         f6:7b:43:98:2c:a0:4e:7b:1a:e7:e1:6b:0d:e8:56:07:34:8c:
         74:a4:d4:f5:bb:c1:0d:26:0a:c9:99:3f:25:61:d3:f1:c4:b8:
         c2:0e:27:ec:e0:62:de:b1:e5:8a:5b:ef:e7:73:d8:97:9c:ab:
         5e:c2:72:6a:d6:99:cc:8c:33:35:db:75:ee:56:d8:dc:7f:6f:
         a8:6c:20:40:29:d2:7b:92:a9:f9:22:b1:70:4a:d0:b1:b6:46:
         7f:05:da:ae:41:da:8b:e5:d3:03:83:f0:39:77:a5:a7:1a:cc:
         fc:84:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 00:30:39 2025 by rpki-client