Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nn_OhtC3-15N2TkyTqGLL9Padxk.roa
File:                     nn_OhtC3-15N2TkyTqGLL9Padxk.roa (raw, json)
Hash identifier:          D1o+qbQpImh9S+k8xxQfdl9/2JTDv6pmoh6Sti5933o=
Subject key identifier:   9E:7F:CE:86:D0:B7:FB:5E:4D:D9:39:32:4E:A1:8B:2F:D3:DA:77:19
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       63A4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nn_OhtC3-15N2TkyTqGLL9Padxk.roa
Signing time:             Fri 23 May 2025 19:13:22 +0000
ROA not before:           Fri 23 May 2025 19:13:22 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     24426
IP address blocks:        43.239.48.0/22 maxlen: 22
                          43.246.0.0/22 maxlen: 22
                          43.246.4.0/22 maxlen: 22
                          43.246.12.0/22 maxlen: 22
                          43.246.16.0/22 maxlen: 22
                          43.246.20.0/22 maxlen: 22
                          43.246.24.0/22 maxlen: 22
                          43.246.28.0/22 maxlen: 22
                          43.246.32.0/22 maxlen: 22
                          43.246.36.0/22 maxlen: 22
                          43.246.40.0/22 maxlen: 22
                          43.246.44.0/22 maxlen: 22
                          43.246.52.0/22 maxlen: 22
                          43.246.56.0/22 maxlen: 22
                          43.246.60.0/22 maxlen: 22
                          43.246.64.0/22 maxlen: 22
                          43.246.68.0/22 maxlen: 22
                          43.246.72.0/22 maxlen: 22
                          43.246.76.0/22 maxlen: 22
                          43.246.80.0/22 maxlen: 22
                          43.246.84.0/22 maxlen: 22
                          43.246.88.0/22 maxlen: 22
                          43.246.92.0/22 maxlen: 22
                          43.246.96.0/22 maxlen: 22
                          103.35.48.0/22 maxlen: 22
                          103.236.0.0/22 maxlen: 22
                          103.236.4.0/22 maxlen: 22
                          103.236.8.0/22 maxlen: 22
                          103.236.12.0/22 maxlen: 22
                          103.236.16.0/22 maxlen: 22
                          103.236.20.0/22 maxlen: 22
                          103.236.28.0/22 maxlen: 22
                          103.236.32.0/22 maxlen: 22
                          103.236.36.0/22 maxlen: 22
                          103.236.40.0/22 maxlen: 22
                          103.236.44.0/22 maxlen: 22
                          103.236.48.0/22 maxlen: 22
                          103.236.52.0/22 maxlen: 22
                          103.236.56.0/22 maxlen: 22
                          103.236.60.0/22 maxlen: 22
                          103.236.64.0/22 maxlen: 22
                          103.236.68.0/22 maxlen: 22
                          103.236.72.0/22 maxlen: 22
                          103.236.76.0/22 maxlen: 22
                          103.236.80.0/22 maxlen: 22
                          103.236.84.0/22 maxlen: 22
                          103.236.88.0/22 maxlen: 22
                          103.236.92.0/22 maxlen: 22
                          103.236.96.0/22 maxlen: 22
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25508 (0x63a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: May 23 19:13:22 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=9E7FCE86D0B7FB5E4DD939324EA18B2FD3DA7719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:43:2f:74:37:4e:ee:39:43:c3:7a:0a:10:
                    55:90:7d:72:06:05:47:77:98:38:27:b0:54:dc:7e:
                    3e:bb:6e:aa:6e:19:a7:8e:24:3c:ce:6f:8c:97:36:
                    69:e8:80:ee:f1:ff:bc:cd:07:6f:2d:a3:d6:9d:b4:
                    6c:1d:16:98:15:c7:2c:dc:a2:18:3e:b1:52:7c:96:
                    dc:a0:84:be:30:fe:0d:09:b9:45:5e:79:c3:ff:6f:
                    fa:a0:19:4b:9c:96:c0:15:9e:ca:19:dd:c6:a4:84:
                    69:8c:54:19:9b:c7:f6:eb:f8:cf:08:be:49:37:68:
                    7d:33:1d:d3:55:2c:08:30:9b:f9:df:54:d7:48:1e:
                    56:30:76:e8:96:bb:f0:d8:03:34:13:d7:2a:22:65:
                    36:84:98:0d:1c:64:20:e2:7a:a3:34:41:92:d0:7b:
                    b5:fd:0c:4c:58:7b:49:3d:0d:3f:59:b7:0c:08:fa:
                    ed:de:fe:9b:86:0d:47:58:07:61:08:36:d9:5c:e0:
                    7f:e3:97:9f:8a:ca:04:fd:34:0e:b5:58:c1:06:96:
                    d2:55:de:52:88:93:03:7f:db:8c:2c:dc:e8:7a:6a:
                    d6:b9:34:7f:46:b1:6b:f4:69:8c:5a:e4:93:9c:f2:
                    05:c4:19:55:7d:35:a0:8e:71:cc:e8:e0:9d:0c:82:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:CE:86:D0:B7:FB:5E:4D:D9:39:32:4E:A1:8B:2F:D3:DA:77:19
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nn_OhtC3-15N2TkyTqGLL9Padxk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.48.0/22
                  43.246.0.0/21
                  43.246.12.0-43.246.47.255
                  43.246.52.0-43.246.99.255
                  103.35.48.0/22
                  103.236.0.0-103.236.23.255
                  103.236.28.0-103.236.99.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:fd:22:18:b9:4d:80:a3:83:b9:1c:6f:32:e0:80:ab:19:
         94:82:a2:86:f8:df:ad:2a:cf:cc:fd:f8:fb:5e:73:3b:c6:91:
         a7:30:c4:99:eb:c6:63:05:be:90:95:4f:5b:52:59:3c:72:69:
         00:2b:c1:14:50:1b:b6:74:5c:85:a9:4e:54:80:60:57:c3:d6:
         27:6d:c8:8b:98:a2:18:72:dc:02:36:bd:80:45:b4:11:d8:c0:
         38:df:06:c1:5b:3d:c3:9c:80:1f:be:51:89:2e:7f:c1:ec:6c:
         e6:22:60:62:ad:ca:4d:ef:82:e1:1d:7e:56:be:90:5a:93:be:
         40:d2:1b:b4:b6:b5:54:f6:bf:c1:cf:d8:d2:a9:a5:b0:46:ad:
         6f:2d:0a:46:d7:4f:9f:8a:dd:cc:80:e1:f7:47:f9:a4:6a:04:
         72:40:ed:c8:16:97:2a:da:39:6f:b6:25:e0:f6:43:b9:f4:db:
         37:e2:d7:e1:d6:a7:b2:b2:90:8e:f0:13:0b:76:4d:ea:ea:b7:
         90:58:5c:db:47:2d:5b:27:9a:a8:95:cb:9c:39:40:c1:3c:17:
         c6:a4:f9:c3:c7:be:f3:a8:c6:00:d4:52:7a:63:67:49:98:8a:
         03:1a:a8:55:89:73:26:2d:60:9a:3c:00:1d:0d:b9:b1:21:cd:
         0f:61:55:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:48:33 2025 by rpki-client