Route Origin Authorization

$ cd rpki.cnnic.cn/rpki/A9162E3D0000/1672/

$ rpki-client -vvf iedkdW_3rUtCrAyooItK6p4LULo.roa
File:                     iedkdW_3rUtCrAyooItK6p4LULo.roa (download)
Hash identifier:          A5sJOfowwWI9rOAp/wgtF/Gn+4gVooOp3CpsgFfDv2E=
Subject key identifier:   89:E7:64:75:6F:F7:AD:4B:42:AC:0C:A8:A0:8B:4A:EA:9E:0B:50:BA
Certificate issuer:       /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
Certificate serial:       03
Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/iedkdW_3rUtCrAyooItK6p4LULo.roa
ROA valid until:          Jun 01 06:58:54 2023 GMT
asID:                     135386
IP address blocks:
    1: 103.212.108.0/22 maxlen: 24
    2: 139.5.212.0/22 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
        Validity
            Not Before: Jun  1 07:11:36 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=89E764756FF7AD4B42AC0CA8A08B4AEA9E0B50BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e1:e6:15:4b:6e:c3:aa:1a:6a:3f:9b:93:a8:
                    f4:f5:68:1b:ce:84:1c:bf:ce:d5:5d:0a:41:e4:a7:
                    63:56:3e:15:91:f3:17:77:8d:46:7c:63:b2:f0:2d:
                    7c:ce:ed:ff:f7:61:7f:25:9a:ee:d6:2d:5f:2f:94:
                    f1:c6:a5:fd:03:9a:9a:b6:a5:58:b5:11:bd:65:76:
                    b0:f1:da:2c:89:9a:b0:be:21:46:be:e7:b2:a1:6e:
                    32:af:d1:1c:1d:ec:20:4f:bb:77:42:e4:0e:b7:6a:
                    7a:1b:01:79:95:d8:17:ff:5c:29:c1:f7:32:ed:49:
                    76:62:af:fe:02:0b:a9:98:a2:9d:e3:c8:a0:27:bf:
                    f5:b4:f4:4e:81:a3:40:e1:92:d3:cf:b6:74:c9:e6:
                    70:4c:be:2e:58:20:8a:46:ca:4d:36:07:08:14:c7:
                    a5:2b:16:d4:57:c2:e1:bd:22:0e:51:ac:ec:e8:a8:
                    f9:42:34:50:4a:10:d8:13:51:51:37:55:40:01:7d:
                    0b:3a:49:e5:19:d0:b5:c8:f7:be:5c:b7:95:18:ea:
                    c7:9b:08:6d:96:76:7e:05:75:6d:94:0e:83:85:8d:
                    14:73:9e:b8:1b:f6:e1:c1:98:b5:2d:a4:e7:0e:59:
                    10:69:c9:3c:f3:58:3d:7f:c5:a2:ae:30:4d:50:9b:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                89:E7:64:75:6F:F7:AD:4B:42:AC:0C:A8:A0:8B:4A:EA:9E:0B:50:BA
            X509v3 Authority Key Identifier: 
                keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/iedkdW_3rUtCrAyooItK6p4LULo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.108.0/22
                  139.5.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:b8:17:29:1b:60:da:3f:8d:18:0f:43:b4:fa:6b:32:3a:
         76:2d:e0:7b:50:ee:94:85:c0:da:41:b4:05:23:2f:bb:60:d1:
         73:6b:fe:99:2b:a9:67:c4:c3:5b:ce:00:2a:cb:a1:e2:2a:7f:
         40:69:0f:67:b5:ad:0d:f8:db:12:a7:c0:54:a7:09:f2:40:21:
         c2:ef:04:ea:aa:c5:ad:69:1c:86:a0:40:c6:76:2c:fc:21:71:
         17:54:e6:3c:14:a4:dd:b2:fc:49:36:ca:df:a7:1e:e8:a2:3e:
         99:14:d1:84:cd:2f:83:7c:9d:59:1c:13:86:c9:3b:e4:cb:c3:
         58:55:08:55:8c:66:1f:50:dd:02:49:6d:c7:f0:c3:ad:a7:c7:
         fa:e2:6f:74:00:3f:38:54:17:82:d6:33:dc:ae:c1:e3:bb:e9:
         9f:ad:a4:06:00:4c:27:ee:06:92:38:b1:64:4c:5a:f6:3b:be:
         18:cb:f7:6e:45:94:c2:70:8b:79:8e:94:28:c8:3d:e2:f5:95:
         37:ea:e0:3c:6a:d5:3b:76:10:b0:65:7b:34:85:4b:ff:f7:fb:
         33:40:dc:ac:5c:d9:d3:01:96:3f:4f:0f:59:85:34:21:a0:47:
         9d:71:46:fe:86:3b:a7:bb:bf:f6:2c:e7:d3:78:27:f1:f8:ce:
         a0:ad:35:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 18:39:00 2022 by rpki-client.