This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-GbdRIxvVGXus9bdYKIscTF7mD8.roa
File:                     -GbdRIxvVGXus9bdYKIscTF7mD8.roa (raw, json)
Hash identifier:          t6KO90IYqLoNnnrmAvFATLb5W654RCkgGuuUMoGj42Y=
Subject key identifier:   F8:66:DD:44:8C:6F:54:65:EE:B3:D6:DD:60:A2:2C:71:31:7B:98:3F
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       41A1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-GbdRIxvVGXus9bdYKIscTF7mD8.roa
Signing time:             Tue 16 Apr 2024 02:23:24 +0000
ROA not before:           Tue 16 Apr 2024 02:23:24 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        43.239.0.0/19 maxlen: 19
                          101.78.32.0/19 maxlen: 19
                          103.35.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16801 (0x41a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Apr 16 02:23:24 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=F866DD448C6F5465EEB3D6DD60A22C71317B983F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:3a:f5:56:29:7e:44:e8:32:bf:da:e9:cf:
                    32:d1:5a:b1:d6:8b:03:3a:a7:05:48:5b:c6:a4:72:
                    d1:dd:23:0c:8f:5e:22:f2:58:5c:0e:42:32:96:5a:
                    6c:33:51:9c:69:a4:e0:2d:7b:f8:47:0c:b7:04:41:
                    db:37:c4:81:f5:56:78:35:78:79:a1:3b:e8:66:ed:
                    c1:f4:62:93:71:a4:b3:1e:28:eb:e6:e7:fc:ca:e4:
                    b7:b4:ce:24:e7:1d:85:82:bf:1e:80:e7:27:d7:9a:
                    0c:82:76:be:65:e1:2a:61:45:e8:5b:07:70:cc:e1:
                    c6:4e:1c:3f:d1:87:1a:0b:36:7d:a2:9d:c5:aa:3f:
                    00:86:88:5c:e0:49:f5:a2:94:f0:eb:fd:6e:88:c1:
                    c2:d5:ce:d7:4a:e7:72:be:f9:20:d6:b7:13:85:d1:
                    7d:1c:be:40:a3:40:06:e8:b2:da:55:b7:cb:5c:68:
                    ee:44:4f:1f:a8:94:d4:83:9a:1c:f3:8c:00:13:5a:
                    b4:55:47:e4:f7:70:3d:c9:9d:ac:8d:9b:45:66:35:
                    e9:a9:68:d8:8e:02:d2:ca:a8:2f:11:5e:aa:2d:75:
                    3e:73:29:11:4a:28:72:63:7c:19:c4:68:ad:71:ab:
                    74:c5:60:a5:7c:e7:b1:34:23:32:80:5d:9f:60:92:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:66:DD:44:8C:6F:54:65:EE:B3:D6:DD:60:A2:2C:71:31:7B:98:3F
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-GbdRIxvVGXus9bdYKIscTF7mD8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.0.0/19
                  101.78.32.0/19
                  103.35.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:66:6a:5e:f2:38:0b:07:8d:ca:08:d7:9c:8c:10:54:2b:4a:
         29:ba:b7:e9:cf:01:10:14:19:f6:01:0f:8c:93:52:c3:eb:d2:
         68:fd:ea:e9:77:fa:6e:1e:65:5a:01:7e:10:eb:ac:de:fa:2b:
         35:0d:56:e8:dd:63:3c:04:2c:ba:86:1b:c8:8a:76:c3:13:3f:
         ef:84:20:b9:7d:fe:ad:a6:a1:95:b9:bd:4a:f2:25:46:38:04:
         6c:2d:dc:d7:1d:43:d5:9c:72:7a:4f:1f:dc:7b:a8:95:5b:b7:
         d4:01:80:aa:f6:9c:46:ea:d4:48:29:16:c8:61:30:0e:e9:dd:
         22:bb:87:ee:e7:ac:22:3e:c9:8e:7e:29:12:5a:9b:d4:d7:c9:
         49:90:6d:d3:27:af:f0:97:ce:02:96:b0:6b:0e:94:21:e0:da:
         21:4e:76:c7:cb:be:cf:66:cd:b1:30:8e:2e:f6:73:0c:19:5f:
         03:65:0a:4c:e2:28:b6:06:88:f9:2e:22:aa:e8:36:26:d3:a2:
         f6:f6:0d:55:30:02:c2:a6:53:91:26:df:1e:a3:7c:34:8d:2f:
         0d:c1:3d:65:25:ab:6e:18:ff:f1:40:4f:dd:fa:21:5a:9c:15:
         d0:68:2b:b4:6c:1a:ce:86:3d:4c:fb:11:62:c9:c0:7b:c4:35:
         87:3e:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:34:38 2026 by rpki-client