Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xhil8bmjsii_DisnQZ8pBeDBR6E.roa
File: xhil8bmjsii_DisnQZ8pBeDBR6E.roa (raw, json)
Hash identifier: Good1rk6fLTA0A6Xz9reA4xukB4fbkUkCZPjITn/vlM=
Subject key identifier: C6:18:A5:F1:B9:A3:B2:28:BF:0E:2B:27:41:9F:29:05:E0:C1:47:A1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5FB0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xhil8bmjsii_DisnQZ8pBeDBR6E.roa
Signing time: Tue 13 May 2025 06:12:38 +0000
ROA not before: Tue 13 May 2025 06:12:38 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24496 (0x5fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 06:12:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C618A5F1B9A3B228BF0E2B27419F2905E0C147A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:61:23:d2:2c:74:92:96:46:27:b0:ab:21:
05:be:18:43:43:a3:4a:01:b4:df:68:be:bb:1d:21:
ce:b0:36:19:4b:03:d4:0a:d9:43:14:43:03:7e:2f:
78:5e:31:f5:ac:27:c3:e1:7f:65:fd:e3:10:4d:27:
e9:e2:19:42:eb:b8:31:5c:a6:c0:3a:88:54:e1:f4:
10:6b:82:d0:8f:50:62:11:29:9f:83:d3:18:db:19:
0d:bd:b8:3a:e9:88:f2:a3:f1:68:65:bb:a2:94:7f:
3a:81:e9:3c:80:7f:ae:e2:cc:97:53:dd:11:9c:54:
31:0c:a0:03:de:c7:e4:7b:51:73:a7:ff:c3:60:e6:
46:e5:6c:4e:43:f7:d0:78:c0:c0:ab:5c:e7:7b:97:
f7:33:ff:0b:86:00:0c:90:ba:20:e6:cb:1d:3b:2b:
88:3b:7e:f4:d1:bd:06:2d:f1:79:a5:77:e4:01:68:
33:8d:23:f4:f2:db:9d:98:7f:ca:b2:fc:d1:c3:4f:
d9:8b:31:b1:18:e0:5f:e0:5a:c6:81:36:e4:a1:31:
ab:72:f9:b5:df:81:3f:a0:54:e6:fb:a1:e9:4d:6c:
a7:18:5c:98:5d:3c:b0:81:8f:9b:ec:ab:ef:18:30:
0c:4c:11:39:a1:f8:6d:c8:dd:e6:70:54:6e:f7:29:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:A5:F1:B9:A3:B2:28:BF:0E:2B:27:41:9F:29:05:E0:C1:47:A1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xhil8bmjsii_DisnQZ8pBeDBR6E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
5d:36:cc:a0:5d:b8:99:bf:80:9d:33:46:b0:86:85:43:e9:42:
d8:8b:b9:19:ca:bb:11:80:e6:55:2e:07:c6:d0:ac:a7:58:c7:
cf:a1:70:a4:83:fe:8c:e9:fa:73:bd:a2:46:ad:18:2f:dd:ae:
68:95:59:ac:5a:f3:4e:8f:76:ca:a2:9a:cf:8e:a9:2b:cb:8c:
8e:93:37:30:af:4b:08:07:3c:20:0f:8d:2c:ed:eb:b6:56:4f:
7d:5e:34:31:80:86:96:70:05:de:61:5e:db:31:1f:ac:5a:1c:
4d:13:06:3e:a6:11:74:9e:42:d6:84:21:76:5a:85:69:04:63:
f3:9d:57:ff:5c:a4:1b:7e:60:e6:d2:0b:e9:d6:87:af:fd:16:
74:c3:8a:9b:6b:68:0c:41:bf:86:68:10:47:c0:3e:6b:43:f8:
2c:83:53:86:b0:16:fe:1f:9b:2c:f5:17:42:45:4f:04:a0:20:
d8:d9:62:5c:10:a1:0e:11:bd:4c:43:dc:38:b7:9f:9b:1f:3f:
57:99:a3:28:1e:d3:b8:28:a1:4e:c2:d8:90:01:74:12:d2:fa:
84:3d:34:5e:4d:f5:83:ea:b3:77:d1:14:78:ce:6a:58:4a:97:
d4:1f:18:38:8b:82:05:97:2d:1f:1c:5d:47:0d:ab:65:4f:47:
b2:4f:62:81
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICX7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTMw
NjEyMzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM2MThBNUYxQjlBM0Iy
MjhCRjBFMkIyNzQxOUYyOTA1RTBDMTQ3QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgamEj0ix0kpZGJ7CrIQW+GENDo0oBtN9ovrsdIc6wNhlLA9QK
2UMUQwN+L3heMfWsJ8Phf2X94xBNJ+niGULruDFcpsA6iFTh9BBrgtCPUGIRKZ+D
0xjbGQ29uDrpiPKj8Whlu6KUfzqB6TyAf67izJdT3RGcVDEMoAPex+R7UXOn/8Ng
5kblbE5D99B4wMCrXOd7l/cz/wuGAAyQuiDmyx07K4g7fvTRvQYt8Xmld+QBaDON
I/Ty252Yf8qy/NHDT9mLMbEY4F/gWsaBNuShMaty+bXfgT+gVOb7oelNbKcYXJhd
PLCBj5vsq+8YMAxMETmh+G3I3eZwVG73Kf2fAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUxhil8bmjsii/DisnQZ8pBeDBR6EwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3hoaWw4Ym1qc2lpX0Rp
c25RWjhwQmVEQlI2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBdNsyg
XbiZv4CdM0awhoVD6ULYi7kZyrsRgOZVLgfG0KynWMfPoXCkg/6M6fpzvaJGrRgv
3a5olVmsWvNOj3bKoprPjqkry4yOkzcwr0sIBzwgD40s7eu2Vk99XjQxgIaWcAXe
YV7bMR+sWhxNEwY+phF0nkLWhCF2WoVpBGPznVf/XKQbfmDm0gvp1oev/RZ0w4qb
a2gMQb+GaBBHwD5rQ/gsg1OGsBb+H5ss9RdCRU8EoCDY2WJcEKEOEb1MQ9w4t5+b
Hz9XmaMoHtO4KKFOwtiQAXQS0vqEPTReTfWD6rN30RR4zmpYSpfUHxg4i4IFly0f
HF1HDatlT0eyT2KB
-----END CERTIFICATE-----
Generated at Sun May 18 02:16:33 2025 by rpki-client