Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6wF3ESCknyJqs8GSOsM3_GsX164.roa
File:                     6wF3ESCknyJqs8GSOsM3_GsX164.roa (raw, json)
Hash identifier:          nuiaJYGjEK965sAeiG6myTHNo/nNlBf8GCOLW8c9jl0=
Subject key identifier:   EB:01:77:11:20:A4:9F:22:6A:B3:C1:92:3A:C3:37:FC:6B:17:D7:AE
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       787E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6wF3ESCknyJqs8GSOsM3_GsX164.roa
Signing time:             Fri 18 Jul 2025 15:42:53 +0000
ROA not before:           Fri 18 Jul 2025 15:42:53 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     24426
IP address blocks:        43.239.48.0/22 maxlen: 22
                          43.246.0.0/22 maxlen: 22
                          43.246.4.0/22 maxlen: 22
                          43.246.12.0/22 maxlen: 22
                          43.246.16.0/22 maxlen: 22
                          43.246.20.0/22 maxlen: 22
                          43.246.24.0/22 maxlen: 22
                          43.246.28.0/22 maxlen: 22
                          43.246.32.0/22 maxlen: 22
                          43.246.36.0/22 maxlen: 22
                          43.246.40.0/22 maxlen: 22
                          43.246.44.0/22 maxlen: 22
                          43.246.52.0/22 maxlen: 22
                          43.246.56.0/22 maxlen: 22
                          43.246.60.0/22 maxlen: 22
                          43.246.64.0/22 maxlen: 22
                          43.246.68.0/22 maxlen: 22
                          43.246.72.0/22 maxlen: 22
                          43.246.76.0/22 maxlen: 22
                          43.246.80.0/22 maxlen: 22
                          43.246.84.0/22 maxlen: 22
                          43.246.88.0/22 maxlen: 22
                          43.246.92.0/22 maxlen: 22
                          43.246.96.0/22 maxlen: 22
                          103.35.48.0/22 maxlen: 22
                          103.236.0.0/22 maxlen: 22
                          103.236.4.0/22 maxlen: 22
                          103.236.8.0/22 maxlen: 22
                          103.236.12.0/22 maxlen: 22
                          103.236.16.0/22 maxlen: 22
                          103.236.20.0/22 maxlen: 22
                          103.236.28.0/22 maxlen: 22
                          103.236.32.0/22 maxlen: 22
                          103.236.36.0/22 maxlen: 22
                          103.236.40.0/22 maxlen: 22
                          103.236.44.0/22 maxlen: 22
                          103.236.48.0/22 maxlen: 22
                          103.236.52.0/22 maxlen: 22
                          103.236.56.0/22 maxlen: 22
                          103.236.60.0/22 maxlen: 22
                          103.236.64.0/22 maxlen: 22
                          103.236.68.0/22 maxlen: 22
                          103.236.72.0/22 maxlen: 22
                          103.236.76.0/22 maxlen: 22
                          103.236.80.0/22 maxlen: 22
                          103.236.84.0/22 maxlen: 22
                          103.236.88.0/22 maxlen: 22
                          103.236.92.0/22 maxlen: 22
                          103.236.96.0/22 maxlen: 22
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30846 (0x787e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Jul 18 15:42:53 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=EB01771120A49F226AB3C1923AC337FC6B17D7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:e1:9e:e9:05:84:e1:bf:0f:be:b6:76:a3:
                    e5:3a:39:ff:6f:ae:01:0c:dc:52:13:1a:9f:a2:4a:
                    cf:7d:43:f3:47:12:a4:ca:2a:ae:5c:16:2e:8b:cb:
                    76:92:ce:14:f7:de:10:92:87:a3:66:52:82:29:a9:
                    70:57:d5:aa:07:26:07:80:63:58:b0:93:e5:02:62:
                    09:62:1c:8e:8a:e8:9d:3d:6a:53:4e:4f:c2:f8:7b:
                    cd:f1:84:4c:ba:e6:96:fe:92:30:28:e1:82:1a:b6:
                    78:02:a2:65:8b:c7:f3:da:0b:a8:97:e9:78:4c:cf:
                    64:e2:19:bd:17:1d:5a:f8:56:d0:31:ac:2a:d9:8e:
                    99:e3:85:54:88:d1:ad:47:ec:c1:51:2c:22:1c:16:
                    48:fe:68:76:37:97:99:10:d1:b6:4a:03:ba:05:00:
                    f7:f2:8f:4e:49:6f:c7:27:a0:36:1b:6c:7b:3f:aa:
                    ce:c0:10:e5:6f:88:1d:57:fa:ff:32:25:b7:3a:c9:
                    3d:3b:ba:95:2b:fe:06:35:e6:1f:fb:b3:29:7e:da:
                    91:b4:f8:d2:74:4b:17:63:3d:10:d1:ac:ba:4c:28:
                    41:20:8c:39:54:00:80:df:16:9d:98:d9:f0:15:85:
                    9a:43:3a:72:c5:4a:bf:b6:00:90:06:83:b0:73:e0:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:77:11:20:A4:9F:22:6A:B3:C1:92:3A:C3:37:FC:6B:17:D7:AE
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6wF3ESCknyJqs8GSOsM3_GsX164.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.48.0/22
                  43.246.0.0/21
                  43.246.12.0-43.246.47.255
                  43.246.52.0-43.246.99.255
                  103.35.48.0/22
                  103.236.0.0-103.236.23.255
                  103.236.28.0-103.236.99.255

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:a8:a6:09:83:83:cc:e3:b1:cd:6f:7a:ef:5e:29:35:e8:
         95:2a:25:95:74:1e:8d:96:1d:b9:7c:a1:27:cd:32:3b:f8:8a:
         87:35:7a:c0:e6:33:b2:a9:c6:42:c1:0a:40:bb:26:04:a5:4e:
         53:df:2b:25:1c:86:a2:7f:1e:0e:18:7e:c7:b0:76:fb:07:0c:
         e4:b6:fc:25:f7:cc:63:54:fc:dc:20:e5:fd:95:fb:f9:e0:db:
         7b:65:5f:20:23:2e:9d:ed:c5:4b:be:d7:54:9c:c0:22:a7:91:
         da:83:91:cf:7d:cc:df:c9:25:36:6c:47:30:46:fa:60:b3:73:
         51:85:ff:05:4c:39:85:52:78:0d:f4:30:18:5a:55:6a:a8:29:
         a1:bc:55:7b:57:ce:04:b8:dc:96:48:fe:f3:64:1c:6b:f5:5c:
         7b:ca:6d:e4:99:86:1e:08:d3:87:a0:ab:12:c7:72:ef:3d:fb:
         6d:49:48:b6:d5:f7:0c:ce:cd:ab:ab:5c:d7:dc:a1:f0:c6:b1:
         82:a9:e6:19:d0:4e:7a:41:f9:40:99:fa:bf:e4:9c:83:42:59:
         61:a8:29:cf:80:21:d0:63:d2:cd:fb:e9:72:e6:27:98:fa:92:
         37:ba:a9:f9:26:f5:df:33:a6:6c:3b:60:34:d8:93:2a:ca:56:
         63:3c:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:48:46 2025 by rpki-client