This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/dg7Yomx_GMwA9GXwQCd22pg1shw.roa
File:                     dg7Yomx_GMwA9GXwQCd22pg1shw.roa (raw, json)
Hash identifier:          2qH2yta/A3d0oX2VyhNM+kJ3z+N08bnf4/vZeyTPMC8=
Subject key identifier:   76:0E:D8:A2:6C:7F:18:CC:00:F4:65:F0:40:27:76:DA:98:35:B2:1C
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       203E
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dg7Yomx_GMwA9GXwQCd22pg1shw.roa
Signing time:             Sat 08 Nov 2025 06:07:52 +0000
ROA not before:           Sat 08 Nov 2025 06:07:52 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     13444
IP address blocks:        103.5.195.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8254 (0x203e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: Nov  8 06:07:52 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=760ED8A26C7F18CC00F465F0402776DA9835B21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:a6:80:1d:1b:46:57:ed:16:8f:44:67:20:
                    87:45:5d:72:54:f9:48:3d:35:c0:ad:54:39:60:28:
                    a4:82:69:9b:35:48:11:f8:49:45:5d:ec:6e:2b:ad:
                    80:84:f7:ec:1a:04:0b:d6:66:56:33:78:88:03:27:
                    1a:2e:03:d7:f4:84:3f:ce:96:f1:4b:02:9b:29:0a:
                    2c:28:fe:a3:ae:1d:64:65:37:55:83:84:32:3b:cf:
                    05:08:47:28:f6:e9:31:6d:21:8c:1d:1f:0b:02:30:
                    61:d6:02:4f:0c:d8:73:e9:48:b7:d1:c2:7f:bc:d3:
                    6f:d0:f7:e5:0a:6f:eb:88:7e:b2:2c:1c:f4:ae:86:
                    7c:32:6f:eb:b3:f5:51:74:ae:76:3e:81:c4:a5:04:
                    1f:4e:4b:a0:0a:87:77:05:8f:90:cd:7a:7a:aa:eb:
                    47:a6:17:1b:f7:1b:1b:fe:21:50:94:4e:e0:d1:05:
                    df:9e:28:86:80:06:14:36:d5:59:f8:c5:7b:1f:3a:
                    bb:78:cd:e4:1a:42:aa:19:82:ba:75:85:68:61:49:
                    e8:08:68:0e:1d:4d:76:a8:4a:5e:f7:63:bc:e5:cd:
                    67:5f:02:b2:d6:a7:a9:3c:13:17:83:f9:2e:e4:a2:
                    36:25:61:78:c1:22:c5:5b:dd:f9:cd:e5:e5:5c:2c:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0E:D8:A2:6C:7F:18:CC:00:F4:65:F0:40:27:76:DA:98:35:B2:1C
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dg7Yomx_GMwA9GXwQCd22pg1shw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:28:48:58:5d:7a:33:a7:33:19:17:6e:ab:69:c1:e0:a5:
         34:cb:f6:87:14:ab:98:56:a3:07:7f:7d:52:1c:bc:9e:ce:af:
         89:e4:d5:64:0a:ac:57:bc:39:6d:e5:f9:fb:d8:02:aa:38:ae:
         04:d7:8f:cc:0d:5f:9e:0d:b6:02:36:d4:b3:ef:8d:45:76:2d:
         77:18:90:44:70:5f:9f:c9:32:68:64:ea:23:b5:3c:25:c1:c8:
         2a:de:26:ce:ea:02:73:05:06:cb:9c:ff:4a:8c:83:a4:aa:73:
         f8:5d:1a:86:ac:5d:8f:75:9d:86:6b:b4:69:d2:12:af:1a:21:
         f9:ac:dd:8a:0f:7a:9f:86:3b:60:b3:55:61:62:5c:c5:0d:d3:
         a5:24:04:ee:95:ac:79:bc:f4:6a:44:d9:59:8c:1b:b6:c4:03:
         fa:bc:4a:54:67:b8:79:78:db:04:13:76:dd:5c:60:9c:5d:13:
         62:da:d9:3d:ae:89:f7:aa:bc:7e:d5:9d:22:6c:df:12:55:8f:
         15:20:75:9b:7b:2c:9d:fa:27:e6:f6:dd:58:df:05:83:1c:d1:
         ad:88:70:5b:ac:e4:16:c6:26:3f:ad:90:44:b1:cc:24:57:7e:
         97:32:c5:72:a8:20:0c:47:85:4a:29:3f:3d:2b:f5:6b:87:6f:
         5d:62:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 09:23:25 2025 by rpki-client