This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vNRrlolDG9qf8dsDgehdxiZ4btg.roa
File:                     vNRrlolDG9qf8dsDgehdxiZ4btg.roa (raw, json)
Hash identifier:          +/yNMlbaGUQhibfStqxCrh4x0z3pxcRvUYBOA7OPIKI=
Subject key identifier:   BC:D4:6B:96:89:43:1B:DA:9F:F1:DB:03:81:E8:5D:C6:26:78:6E:D8
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       5319
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vNRrlolDG9qf8dsDgehdxiZ4btg.roa
Signing time:             Thu 09 May 2024 09:24:01 +0000
ROA not before:           Thu 09 May 2024 09:24:01 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        43.239.0.0/19 maxlen: 19
                          101.78.32.0/19 maxlen: 19
                          103.35.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21273 (0x5319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: May  9 09:24:01 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=BCD46B9689431BDA9FF1DB0381E85DC626786ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:12:01:65:f8:25:4e:0f:2e:a2:05:af:cc:
                    1e:6a:f5:6d:b4:92:92:75:eb:25:22:ce:89:6e:1b:
                    91:cf:67:a3:d8:35:30:e3:19:46:d8:73:09:c4:1e:
                    74:d3:12:8d:97:41:f5:03:20:8d:9a:27:51:72:64:
                    cb:b5:a6:b2:44:6f:75:d3:24:1b:49:29:3e:ba:9b:
                    a5:01:bd:1f:d4:0d:3f:5c:29:3f:cc:4a:63:46:cc:
                    07:22:7e:c8:b0:c8:f0:72:3a:bc:e4:bc:dc:14:75:
                    bb:8d:a6:82:96:24:11:a1:8b:8b:bd:33:3b:77:e0:
                    0d:16:28:3e:b4:c1:12:43:b4:0c:b0:f1:68:41:04:
                    a0:d7:d9:0a:2b:34:58:56:69:27:26:94:d2:d7:07:
                    24:5c:fe:d1:e0:7d:c2:fd:a9:f8:05:95:5c:c5:d7:
                    70:47:9b:ba:46:24:87:b6:8f:87:16:8c:e5:0d:27:
                    3f:ea:da:b2:b5:32:1f:35:ee:12:21:5d:6d:02:26:
                    2c:4b:cf:bd:4c:b7:c5:b0:e7:29:a4:a1:31:f4:53:
                    7d:d2:a3:1e:26:b3:bc:f2:8e:b3:02:60:01:59:8d:
                    63:4a:d3:c1:15:e8:9e:b8:c4:9e:bd:b5:61:46:26:
                    bd:62:a2:c0:33:9d:7b:9a:1f:f8:80:14:44:43:c2:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D4:6B:96:89:43:1B:DA:9F:F1:DB:03:81:E8:5D:C6:26:78:6E:D8
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vNRrlolDG9qf8dsDgehdxiZ4btg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.0.0/19
                  101.78.32.0/19
                  103.35.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:83:f1:09:49:8e:d7:87:4a:a9:fd:ea:e3:3f:fa:0e:b2:3e:
         53:42:6d:04:f5:57:fa:69:23:cc:43:f4:e6:5a:80:fd:3f:74:
         9a:02:e8:0b:89:40:af:27:b0:9a:85:04:14:75:86:89:bb:67:
         c4:73:3d:37:b6:aa:bd:29:cc:e1:e2:bf:ac:17:3d:60:5c:49:
         fe:c0:f3:77:4a:27:03:61:b8:f2:9a:95:7b:1a:51:ca:cf:bd:
         cd:2c:ee:ab:4c:99:39:21:69:d1:7f:08:03:ec:0d:8a:28:6b:
         b3:ec:42:cd:93:b1:9e:cd:9a:2b:16:48:7b:36:5c:64:89:1c:
         d2:42:8c:fe:2c:96:aa:e9:4a:28:c6:5d:3f:9d:d6:c8:a7:35:
         2a:d6:36:08:12:66:19:7f:f4:e9:1e:be:56:54:2a:e5:47:25:
         a2:bf:6a:78:d6:8d:a5:48:2c:d4:3a:fd:b5:9e:ca:f9:5d:a9:
         75:2f:5c:03:e8:37:13:61:3f:af:04:91:65:cf:e3:20:92:5b:
         a4:0b:e6:fb:62:ff:8f:9a:59:af:b5:83:e3:34:2f:e4:e6:aa:
         17:ed:a0:e4:42:e2:a0:f8:1f:b8:46:3f:39:7b:07:56:f5:d7:
         26:02:54:2f:18:10:62:09:b5:47:6d:af:65:40:45:7a:71:0c:
         bd:ee:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:17:08 2025 by rpki-client