Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/nai5wARRl27GySav8Z1rJAtdR28.roa (download)

Subject key identifier:   9D:A8:B9:C0:04:51:97:6E:C6:C9:26:AF:F1:9D:6B:24:0B:5D:47:6F 
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
asID:                     AS42831
Prefixes:
    1: 63.141.36.0/23 (max: 23)
    2: 63.141.34.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/nai5wARRl27GySav8Z1rJAtdR28.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63303728 (0x3c5f030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Jan  1 00:47:41 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9da8b9c00451976ec6c926aff19d6b240b5d476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:25:51:70:36:5e:07:0e:13:c2:98:83:c2:
                    c6:06:f4:de:a3:78:6a:e7:33:03:ea:5a:df:d7:9a:
                    f8:ba:7b:dc:83:3e:50:87:0f:d8:bf:33:b9:a8:32:
                    cd:64:f1:eb:a7:64:97:df:63:33:23:86:cd:5d:e7:
                    d4:ac:26:c5:88:7c:cd:17:11:2a:1d:a7:21:d0:92:
                    de:d6:11:8f:a5:dc:8f:1a:67:4b:30:17:41:70:7e:
                    45:60:3f:d8:38:7b:15:3d:5c:4f:60:81:18:e5:2c:
                    3a:82:d2:1b:e1:2f:4a:9a:a5:92:17:1d:15:94:d1:
                    61:39:33:7b:4a:a6:ca:03:e0:e3:98:70:d4:02:cf:
                    91:fa:48:af:11:61:7d:99:32:98:43:63:07:c4:78:
                    8e:06:b6:d7:8d:da:94:89:62:1a:cb:b1:3c:3a:e6:
                    81:c4:fe:0e:1f:b3:35:cd:aa:eb:73:79:0a:d7:45:
                    af:36:44:91:23:bd:44:12:e3:18:56:4b:6f:b8:d6:
                    57:a8:7d:02:ac:6c:07:02:6f:d6:48:bd:0c:87:2d:
                    0f:3b:3f:e8:33:57:74:79:d7:63:14:01:5f:35:3b:
                    56:47:5d:7e:aa:b5:32:00:47:72:90:d8:08:16:e0:
                    cf:df:bb:31:e5:c0:53:41:d8:63:61:c9:65:d0:c3:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:A8:B9:C0:04:51:97:6E:C6:C9:26:AF:F1:9D:6B:24:0B:5D:47:6F
            X509v3 Authority Key Identifier: 
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/nai5wARRl27GySav8Z1rJAtdR28.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.0....?."...?.$
    Signature Algorithm: sha256WithRSAEncryption
         1c:24:46:1f:53:88:8e:a8:4d:aa:fd:d3:91:cd:be:c7:6b:2d:
         b9:fa:84:3a:be:1a:65:34:5a:3a:ff:00:bf:05:94:19:f0:a2:
         31:96:3e:1b:5f:48:76:c3:b8:5d:a9:27:13:1a:a6:3b:58:7a:
         c7:62:3f:3d:82:ac:6c:4e:0c:94:41:7c:87:2c:10:63:e1:bd:
         75:37:77:2f:97:bd:4d:bf:d5:88:0f:42:87:7a:65:a0:6a:77:
         15:4d:91:a1:1c:16:90:3b:b6:69:c9:f2:f9:6f:14:76:fa:30:
         60:14:dc:79:e6:18:7d:57:11:27:73:e8:80:3b:b9:42:04:59:
         22:2d:32:b4:fb:c6:71:da:bd:1e:22:08:13:df:3c:56:f8:2f:
         3c:d0:aa:43:8d:78:40:54:38:18:8b:76:af:fb:a1:74:7a:b6:
         84:7e:27:4d:df:30:9c:6b:3a:79:0a:68:01:f3:1d:b7:da:9a:
         78:c7:07:9b:a6:3d:a3:e6:c0:a2:4f:ba:d2:18:75:1e:44:60:
         57:d1:14:62:6c:8c:4e:44:3a:a8:ee:7c:62:61:f5:10:d8:0e:
         fd:0e:73:27:35:41:2e:13:01:68:97:b2:c5:68:04:63:22:87:
         11:be:1d:2f:b5:5b:80:87:e4:7a:50:38:27:10:ce:7e:f8:ec:
         c4:0f:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----