This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ycyl47arRGkBalyzoV2U-cq-lyQ.roa
File:                     Ycyl47arRGkBalyzoV2U-cq-lyQ.roa (raw, json)
Hash identifier:          T/oYSlqFj0lvV6mVcyuL1RKLKdM7rRN8Np7SauHIcS0=
Subject key identifier:   61:CC:A5:E3:B6:AB:44:69:01:6A:5C:B3:A1:5D:94:F9:CA:BE:97:24
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       4EB1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ycyl47arRGkBalyzoV2U-cq-lyQ.roa
Signing time:             Fri 03 May 2024 12:23:44 +0000
ROA not before:           Fri 03 May 2024 12:23:44 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        43.239.0.0/19 maxlen: 19
                          101.78.32.0/19 maxlen: 19
                          103.35.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20145 (0x4eb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: May  3 12:23:44 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=61CCA5E3B6AB4469016A5CB3A15D94F9CABE9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:38:b1:2a:2b:c5:d5:5c:8c:17:1e:0c:0a:
                    c6:06:79:9b:9c:e8:3b:62:6f:83:84:63:4e:a1:67:
                    8f:49:b6:61:e6:8c:7d:00:50:c8:f0:08:fc:37:63:
                    b3:f6:39:20:1f:9c:c2:cb:da:a2:de:c6:2a:cb:8b:
                    68:14:e2:8c:34:54:b6:ca:a9:b4:62:cf:38:b4:4c:
                    a4:46:7f:8e:9a:28:26:40:ad:a5:11:1a:93:f6:d0:
                    71:3f:28:52:b9:d9:0b:17:93:3f:95:12:f8:e9:1c:
                    a9:f6:77:6f:78:b7:cf:d2:c8:6a:6d:19:1f:16:ea:
                    da:65:39:fa:7f:c7:37:d7:45:27:59:75:1a:a2:eb:
                    00:61:75:ef:5a:4c:2a:d8:5d:cb:2a:4d:96:02:84:
                    4f:03:8d:ff:f1:67:d8:a9:a1:a5:2b:01:31:d2:ba:
                    c1:f5:c2:3c:3a:61:43:81:c7:a0:3c:17:74:da:c5:
                    d9:9b:f9:e3:74:b5:d5:6e:e4:74:69:fe:1f:23:f2:
                    4f:e0:ab:f4:85:9f:78:81:38:b7:f5:b8:00:52:57:
                    47:dc:01:f3:b8:72:96:24:81:f9:d1:99:d0:97:bc:
                    57:83:37:63:7c:ef:dd:77:07:75:d4:b5:1a:88:38:
                    2f:18:c6:25:f4:7d:0d:61:f0:af:ae:91:21:70:41:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:A5:E3:B6:AB:44:69:01:6A:5C:B3:A1:5D:94:F9:CA:BE:97:24
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ycyl47arRGkBalyzoV2U-cq-lyQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.0.0/19
                  101.78.32.0/19
                  103.35.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:b9:5a:e7:1d:27:7e:76:58:1b:f3:af:53:61:87:f5:fd:23:
         6f:4a:16:2e:18:db:1e:ca:22:e8:b6:f6:c5:fc:25:c8:47:91:
         30:de:45:0e:2a:84:ba:f8:82:7a:da:a9:6e:44:18:44:25:e8:
         e5:a8:88:d8:c3:b1:a7:e1:4a:85:73:20:e9:24:d5:0e:31:59:
         a4:c1:b0:d9:d2:0d:d3:61:1e:08:a5:15:dd:2f:3a:8c:dc:08:
         5c:9f:31:72:de:57:d0:fb:4c:d3:b7:17:1f:9a:ff:c3:ef:33:
         64:e9:7f:25:70:78:fd:8a:9d:e1:35:6a:72:cc:e4:65:70:0c:
         27:bf:1c:61:86:bd:cc:ca:2d:ee:ee:27:89:cd:4d:82:60:c4:
         37:db:f5:0e:b6:b7:ea:8f:56:22:c9:d9:e2:9b:20:2d:01:b8:
         52:7d:2c:3d:1c:c5:d1:23:0f:69:2b:a1:9a:42:fd:26:99:c4:
         0d:7f:53:40:1d:f8:ad:01:2d:e3:89:a2:ef:2b:8a:30:2d:af:
         38:f5:2c:0a:22:2b:db:92:b7:b0:16:c7:52:6d:cb:17:db:db:
         31:f7:96:67:84:6e:4c:26:e8:a4:a3:36:ba:cd:5c:db:11:90:
         82:c3:34:d0:fb:b6:82:90:10:c8:9e:55:b7:05:f3:b2:b1:2b:
         6e:fb:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:31:54 2025 by rpki-client