This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MEoPT3jdnXs-mmDui2qdB7kUw0g.roa
File:                     MEoPT3jdnXs-mmDui2qdB7kUw0g.roa (raw, json)
Hash identifier:          3f3d1E1FbpSRboXVcI87Rr9SqR6nQ9tqGC8lWvdrsdg=
Subject key identifier:   30:4A:0F:4F:78:DD:9D:7B:3E:9A:60:EE:8B:6A:9D:07:B9:14:C3:48
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       52B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MEoPT3jdnXs-mmDui2qdB7kUw0g.roa
Signing time:             Wed 08 May 2024 20:23:56 +0000
ROA not before:           Wed 08 May 2024 20:23:56 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        36.0.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21171 (0x52b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: May  8 20:23:56 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=304A0F4F78DD9D7B3E9A60EE8B6A9D07B914C348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:42:c2:a9:b4:46:c2:91:18:59:a3:5e:71:
                    c4:34:d5:4d:1f:ef:f7:82:ed:46:54:bd:e9:04:1e:
                    3e:f1:94:0d:b5:5b:f2:a6:3f:aa:de:af:76:54:06:
                    23:a2:f0:86:9b:44:30:55:af:a6:03:3c:3a:c4:44:
                    59:6a:65:79:9c:31:a2:88:12:6d:05:5a:70:9e:a0:
                    66:d7:8e:28:d3:30:c6:91:96:fd:d0:8c:69:92:b6:
                    d2:4e:45:8a:0d:d7:08:26:aa:8b:a8:6b:bf:d2:e5:
                    56:bf:a6:bf:e0:c7:1e:87:ae:7a:33:38:74:c2:88:
                    bd:26:25:27:f4:0e:13:04:a3:74:dc:ee:0e:78:74:
                    2b:c9:cb:6c:1b:e8:01:a2:73:4a:4d:42:ee:9a:5b:
                    b6:a1:25:c6:d2:75:96:65:3c:9a:67:bb:4d:9a:7e:
                    25:b9:ae:5c:37:f6:51:61:29:07:8a:bc:7c:47:a5:
                    78:87:20:eb:55:33:4e:b1:a1:9a:e9:92:d0:d6:76:
                    7a:ac:53:dc:78:05:5f:45:43:53:59:fd:7f:30:34:
                    05:44:0d:5f:3c:ec:4e:fd:ad:3c:1c:a9:10:2f:b4:
                    e1:a8:13:1d:dd:76:4d:c9:08:37:df:d3:ed:9f:2d:
                    e7:a7:e8:26:9d:d2:88:83:d1:fe:80:d8:de:59:24:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4A:0F:4F:78:DD:9D:7B:3E:9A:60:EE:8B:6A:9D:07:B9:14:C3:48
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MEoPT3jdnXs-mmDui2qdB7kUw0g.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:42:99:11:06:dc:c9:da:8e:7b:49:e1:6f:6e:58:0b:08:6c:
         70:a8:49:72:73:34:ba:00:4a:c7:a5:17:02:1f:1f:93:24:ce:
         f1:3f:1f:27:e0:87:e2:2f:7b:d9:d0:d2:b3:6d:5e:23:32:84:
         e3:ad:6b:4a:89:08:7d:40:96:0a:4d:23:c1:59:41:08:84:55:
         8d:2a:2e:a2:5f:f2:b4:49:1a:a4:b0:ac:18:d1:76:db:35:75:
         0c:1d:5e:11:36:42:c6:fd:47:bf:e9:bc:bd:09:32:ad:c2:63:
         fc:fd:bd:4c:c1:58:a8:20:78:63:a1:42:8a:39:d0:53:0b:07:
         65:38:1b:3c:9e:bc:b8:f7:71:e6:8e:bd:3d:e8:cd:cb:41:2b:
         8f:d9:a8:6d:fd:74:56:14:84:18:b5:c5:a8:9c:9d:5d:61:ea:
         3a:9b:1f:4f:7f:9e:ff:eb:43:3f:ee:48:5f:c8:81:18:ed:e1:
         6b:1f:e8:f0:f5:d6:a5:6b:46:6d:3c:bd:d5:21:d6:94:42:6a:
         32:2d:f2:67:a5:99:58:84:a5:08:46:88:77:11:36:0f:c5:db:
         7d:d3:46:4b:d9:df:77:51:44:50:46:d4:11:10:d0:43:de:92:
         8a:30:6f:e2:53:70:04:b4:f2:86:b8:c8:52:71:55:0e:84:b0:
         1a:1d:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:56:55 2026 by rpki-client