This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/acorVBVG2qdLINAMixU2vOs3CQs.roa
File:                     acorVBVG2qdLINAMixU2vOs3CQs.roa (raw, json)
Hash identifier:          yfZLYDw/CXR3S2PNxGLmVSR1IVsZ78BlFAJF7Wv7MGU=
Subject key identifier:   69:CA:2B:54:15:46:DA:A7:4B:20:D0:0C:8B:15:36:BC:EB:37:09:0B
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       4ADB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/acorVBVG2qdLINAMixU2vOs3CQs.roa
Signing time:             Sun 28 Apr 2024 09:23:41 +0000
ROA not before:           Sun 28 Apr 2024 09:23:41 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        36.0.64.0/18 maxlen: 18
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19163 (0x4adb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Apr 28 09:23:41 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=69CA2B541546DAA74B20D00C8B1536BCEB37090B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:97:77:d7:cd:54:ed:3d:54:cb:1c:47:c2:
                    4e:f9:fa:88:19:9e:37:fe:d8:47:f4:ce:61:ce:fb:
                    12:05:e3:f7:e9:d2:b7:90:89:08:b9:9e:d6:18:e1:
                    20:92:d7:33:43:18:49:3f:45:80:b7:ba:1b:70:c7:
                    87:aa:be:4b:74:f5:d4:1e:42:33:9e:27:ec:bb:72:
                    6b:9c:4f:c9:99:92:53:c3:48:c4:20:43:9a:84:a6:
                    bd:2c:d2:1d:75:97:8a:cf:0b:b9:ad:2c:81:ae:89:
                    c3:76:e7:4b:1c:31:6b:ab:4f:6f:cb:ec:79:36:da:
                    26:1c:4c:46:af:cd:84:e5:e9:22:bc:7a:6d:65:92:
                    2c:6f:08:03:56:fe:90:91:59:6a:14:db:70:a4:c6:
                    cf:b3:06:30:d0:74:0e:6e:bc:6e:05:9b:09:3f:97:
                    b8:52:c4:59:38:f7:7b:5c:89:c7:17:89:a7:2d:c5:
                    19:78:5b:62:5b:ad:ce:1e:49:8d:fd:80:c0:4a:e7:
                    95:14:a7:a7:9f:75:b7:a2:ca:0a:5d:ac:d7:1f:90:
                    4f:2b:48:4d:51:8a:72:be:a4:fa:82:77:44:03:55:
                    f2:b1:c4:c5:70:11:09:52:04:44:38:78:d0:a7:6f:
                    cc:c2:6e:00:c1:0b:ce:b9:8d:8c:a8:c6:b5:3e:5f:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CA:2B:54:15:46:DA:A7:4B:20:D0:0C:8B:15:36:BC:EB:37:09:0B
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/acorVBVG2qdLINAMixU2vOs3CQs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2b:df:bb:d0:73:c2:d0:e2:0c:95:75:c8:a7:b2:1f:fb:3a:86:
         5c:de:c8:8c:e8:38:58:04:dd:a9:46:8a:72:d7:5a:2e:37:0d:
         4b:6c:fa:b0:b1:65:7a:9b:1d:26:b1:2f:fe:b4:9b:84:75:74:
         b5:63:c6:92:78:ed:e9:8b:d9:43:0a:bb:11:70:e8:28:57:a0:
         cc:7b:09:33:66:72:4b:ef:4a:8d:a6:a5:b1:84:87:59:31:f1:
         3f:6a:66:6b:b3:97:4e:a0:8f:a6:18:e5:f3:0a:87:e6:c1:f7:
         fd:30:39:f5:58:0a:f4:1a:87:0c:0c:3f:c9:9e:55:0c:27:03:
         68:e9:25:13:be:b4:fa:ba:1b:9e:c7:12:af:62:62:54:a1:a6:
         38:13:34:7f:da:22:23:dd:ac:6f:eb:52:c4:d4:2e:83:71:c5:
         42:78:bf:7b:6c:a5:f4:48:46:0f:af:7f:44:b3:0a:25:74:3f:
         9a:d3:9a:4b:17:7c:87:43:20:1a:d6:5d:f1:a0:6a:1b:37:ec:
         ba:cf:46:97:6e:f7:0d:fc:e1:a6:fa:73:95:b4:b5:b9:d8:ba:
         c7:9e:39:5c:59:6b:5c:7a:e6:0c:59:7b:67:1d:c2:cc:a7:af:
         9b:c0:1f:b5:c9:87:4e:5f:76:d9:59:88:08:06:72:24:dc:ac:
         1f:a8:7e:ac
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICStswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjgw
OTIzNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY5Q0EyQjU0MTU0NkRB
QTc0QjIwRDAwQzhCMTUzNkJDRUIzNzA5MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9RZd3181U7T1UyxxHwk75+ogZnjf+2Ef0zmHO+xIF4/fp0reQ
iQi5ntYY4SCS1zNDGEk/RYC3uhtwx4eqvkt09dQeQjOeJ+y7cmucT8mZklPDSMQg
Q5qEpr0s0h11l4rPC7mtLIGuicN250scMWurT2/L7Hk22iYcTEavzYTl6SK8em1l
kixvCANW/pCRWWoU23Ckxs+zBjDQdA5uvG4Fmwk/l7hSxFk493tciccXiactxRl4
W2Jbrc4eSY39gMBK55UUp6efdbeiygpdrNcfkE8rSE1RinK+pPqCd0QDVfKxxMVw
EQlSBEQ4eNCnb8zCbgDBC865jYyoxrU+XyfLAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUacorVBVG2qdLINAMixU2vOs3CQswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2Fjb3JWQlZHMnFkTElO
QU1peFUydk9zM0NRcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACvfu9BzwtDiDJV1yKeyH/s6hlzeyIzo
OFgE3alGinLXWi43DUts+rCxZXqbHSaxL/60m4R1dLVjxpJ47emL2UMKuxFw6ChX
oMx7CTNmckvvSo2mpbGEh1kx8T9qZmuzl06gj6YY5fMKh+bB9/0wOfVYCvQahwwM
P8meVQwnA2jpJRO+tPq6G57HEq9iYlShpjgTNH/aIiPdrG/rUsTULoNxxUJ4v3ts
pfRIRg+vf0SzCiV0P5rTmksXfIdDIBrWXfGgahs37LrPRpdu9w384ab6c5W0tbnY
useeOVxZa1x65gxZe2cdwsynr5vAH7XJh05fdtlZiAgGciTcrB+ofqw=
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:25:25 2025 by rpki-client