Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bs7xjymIfqiZPEzKJjWQ-UjTKjM.roa
File:                     bs7xjymIfqiZPEzKJjWQ-UjTKjM.roa (raw, json)
Hash identifier:          cwDclYA7/jTuVzutvrwLsu193Wq9XK/4VVH9Gqaj4po=
Subject key identifier:   6E:CE:F1:8F:29:88:7E:A8:99:3C:4C:CA:26:35:90:F9:48:D3:2A:33
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       7886
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bs7xjymIfqiZPEzKJjWQ-UjTKjM.roa
Signing time:             Fri 18 Jul 2025 17:43:34 +0000
ROA not before:           Fri 18 Jul 2025 17:43:34 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     24426
IP address blocks:        43.239.48.0/22 maxlen: 22
                          43.246.0.0/22 maxlen: 22
                          43.246.4.0/22 maxlen: 22
                          43.246.12.0/22 maxlen: 22
                          43.246.16.0/22 maxlen: 22
                          43.246.20.0/22 maxlen: 22
                          43.246.24.0/22 maxlen: 22
                          43.246.28.0/22 maxlen: 22
                          43.246.32.0/22 maxlen: 22
                          43.246.36.0/22 maxlen: 22
                          43.246.40.0/22 maxlen: 22
                          43.246.44.0/22 maxlen: 22
                          43.246.52.0/22 maxlen: 22
                          43.246.56.0/22 maxlen: 22
                          43.246.60.0/22 maxlen: 22
                          43.246.64.0/22 maxlen: 22
                          43.246.68.0/22 maxlen: 22
                          43.246.72.0/22 maxlen: 22
                          43.246.76.0/22 maxlen: 22
                          43.246.80.0/22 maxlen: 22
                          43.246.84.0/22 maxlen: 22
                          43.246.88.0/22 maxlen: 22
                          43.246.92.0/22 maxlen: 22
                          43.246.96.0/22 maxlen: 22
                          103.35.48.0/22 maxlen: 22
                          103.236.0.0/22 maxlen: 22
                          103.236.4.0/22 maxlen: 22
                          103.236.8.0/22 maxlen: 22
                          103.236.12.0/22 maxlen: 22
                          103.236.16.0/22 maxlen: 22
                          103.236.20.0/22 maxlen: 22
                          103.236.28.0/22 maxlen: 22
                          103.236.32.0/22 maxlen: 22
                          103.236.36.0/22 maxlen: 22
                          103.236.40.0/22 maxlen: 22
                          103.236.44.0/22 maxlen: 22
                          103.236.48.0/22 maxlen: 22
                          103.236.52.0/22 maxlen: 22
                          103.236.56.0/22 maxlen: 22
                          103.236.60.0/22 maxlen: 22
                          103.236.64.0/22 maxlen: 22
                          103.236.68.0/22 maxlen: 22
                          103.236.72.0/22 maxlen: 22
                          103.236.76.0/22 maxlen: 22
                          103.236.80.0/22 maxlen: 22
                          103.236.84.0/22 maxlen: 22
                          103.236.88.0/22 maxlen: 22
                          103.236.92.0/22 maxlen: 22
                          103.236.96.0/22 maxlen: 22
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30854 (0x7886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Jul 18 17:43:34 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=6ECEF18F29887EA8993C4CCA263590F948D32A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:d6:cd:c8:48:1c:7c:65:11:f4:14:fb:17:
                    3f:cd:85:e8:1e:32:a6:c2:6b:c0:c0:7d:78:b3:70:
                    8b:dd:a2:46:4e:53:90:52:87:82:cb:48:36:5c:eb:
                    2c:1e:7c:a4:79:07:f6:0e:ea:ce:ca:09:55:96:ee:
                    c1:8b:59:27:89:3c:a9:38:54:e8:43:a8:2c:b9:e0:
                    2a:96:2c:3a:4d:5c:b7:eb:2a:ee:92:bd:60:2d:48:
                    54:4b:fe:ff:60:5e:71:ca:ed:fd:1c:dd:45:2c:e9:
                    f7:8c:dc:7b:d3:8f:6a:fe:a8:28:82:5c:09:63:89:
                    45:26:08:14:42:51:69:51:53:9a:ad:31:4f:7e:f0:
                    16:cd:03:26:74:ed:3b:79:97:93:4e:e0:a5:2e:43:
                    c2:a4:a1:3f:7d:2a:4a:67:60:d7:f9:29:1b:a7:60:
                    cc:7c:24:83:5c:cb:94:46:84:47:ea:95:a0:50:28:
                    b9:ad:fd:fd:71:b4:f8:e8:03:27:6c:d6:c3:e5:89:
                    f3:f7:50:0a:ce:12:34:f7:d9:83:38:c4:45:01:2f:
                    99:42:cb:04:9e:39:df:74:db:ae:b9:92:79:82:e0:
                    50:36:96:28:31:83:55:a0:0d:55:86:8b:76:c6:c9:
                    b9:12:9b:00:40:21:56:64:c5:5b:7e:7d:77:18:31:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CE:F1:8F:29:88:7E:A8:99:3C:4C:CA:26:35:90:F9:48:D3:2A:33
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bs7xjymIfqiZPEzKJjWQ-UjTKjM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.48.0/22
                  43.246.0.0/21
                  43.246.12.0-43.246.47.255
                  43.246.52.0-43.246.99.255
                  103.35.48.0/22
                  103.236.0.0-103.236.23.255
                  103.236.28.0-103.236.99.255

    Signature Algorithm: sha256WithRSAEncryption
         07:9c:98:93:58:27:a2:33:fb:c9:94:b6:cf:ea:18:f2:f7:57:
         68:2e:d2:d4:75:27:d0:d3:64:5d:e1:01:39:99:b5:96:c9:29:
         0d:61:e4:3f:7f:32:49:b1:4b:4b:c8:db:3f:b4:86:ea:76:5c:
         fd:14:83:95:22:37:04:dd:6e:e6:2e:1b:97:9b:60:85:82:ef:
         b3:18:27:5e:78:40:74:ed:da:05:47:7d:5d:05:cf:55:4b:cf:
         fd:10:14:be:ed:f3:7d:20:2a:a7:75:3f:92:93:66:ba:bd:c4:
         c2:46:04:7f:fb:40:21:9b:2c:b5:9d:f6:e7:d1:b3:cb:6a:cd:
         a7:52:27:70:39:fe:e6:c6:10:2a:7c:c2:09:3b:12:5d:97:01:
         65:7c:ba:ef:03:61:e4:c7:41:9e:bc:96:ab:e7:42:eb:42:5d:
         69:68:2f:1d:fd:e9:36:a9:e0:13:51:bc:3d:6b:80:0a:30:2a:
         75:fd:8e:10:6f:f5:38:08:28:28:0e:b1:58:a5:62:58:f1:b6:
         17:ed:40:9f:0b:e4:ae:02:3c:18:79:fb:39:4b:7d:b7:a7:24:
         80:7a:de:73:fe:36:88:15:e2:0f:87:d3:7a:ea:95:6c:7f:7e:
         60:b5:0c:c5:51:cd:d0:fa:f5:03:13:bc:fa:f7:3a:8a:02:95:
         1f:00:dd:04
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICeIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MTgx
NzQzMzRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZFQ0VGMThGMjk4ODdF
QTg5OTNDNENDQTI2MzU5MEY5NDhEMzJBMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDch9bNyEgcfGUR9BT7Fz/NhegeMqbCa8DAfXizcIvdokZOU5BS
h4LLSDZc6ywefKR5B/YO6s7KCVWW7sGLWSeJPKk4VOhDqCy54CqWLDpNXLfrKu6S
vWAtSFRL/v9gXnHK7f0c3UUs6feM3HvTj2r+qCiCXAljiUUmCBRCUWlRU5qtMU9+
8BbNAyZ07Tt5l5NO4KUuQ8KkoT99KkpnYNf5KRunYMx8JINcy5RGhEfqlaBQKLmt
/f1xtPjoAyds1sPlifP3UArOEjT32YM4xEUBL5lCywSeOd902665knmC4FA2ligx
g1WgDVWGi3bGybkSmwBAIVZkxVt+fXcYMaXXAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUbs7xjymIfqiZPEzKJjWQ+UjTKjMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2JzN3hqeW1JZnFpWlBF
ektKaldRLVVqVEtqTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAHnJiT
WCeiM/vJlLbP6hjy91doLtLUdSfQ02Rd4QE5mbWWySkNYeQ/fzJJsUtLyNs/tIbq
dlz9FIOVIjcE3W7mLhuXm2CFgu+zGCdeeEB07doFR31dBc9VS8/9EBS+7fN9ICqn
dT+Sk2a6vcTCRgR/+0Ahmyy1nfbn0bPLas2nUidwOf7mxhAqfMIJOxJdlwFlfLrv
A2Hkx0GevJar50LrQl1paC8d/ek2qeATUbw9a4AKMCp1/Y4Qb/U4CCgoDrFYpWJY
8bYX7UCfC+SuAjwYefs5S323pySAet5z/jaIFeIPh9N66pVsf35gtQzFUc3Q+vUD
E7z69zqKApUfAN0E
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:38:18 2025 by rpki-client