Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/595/qeTXwtzZC56ZJjlZoZw4lXdYLV8.roa
File:                     qeTXwtzZC56ZJjlZoZw4lXdYLV8.roa (raw, json)
Hash identifier:          iegbRBvxr8YBtSQhwQ/B899CBQAxkvwdbnRztle/Nlc=
Subject key identifier:   A9:E4:D7:C2:DC:D9:0B:9E:99:26:39:59:A1:9C:38:95:77:58:2D:5F
Certificate issuer:       /CN=2CA390E2780550E44EC03598082E1995474DF2FB
Certificate serial:       03
Authority key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/qeTXwtzZC56ZJjlZoZw4lXdYLV8.roa
Signing time:             Sat 05 Jun 2021 03:55:24 +0000
ROA not before:           Sat 05 Jun 2021 03:55:24 +0000
ROA not after:            Sun 05 Jun 2022 03:47:13 +0000
asID:                     58862
IP address blocks:        167.220.244.0/22 maxlen: 23

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA390E2780550E44EC03598082E1995474DF2FB
        Validity
            Not Before: Jun  5 03:55:24 2021 GMT
            Not After : Jun  5 03:47:13 2022 GMT
        Subject: CN=A9E4D7C2DCD90B9E99263959A19C389577582D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:44:4f:e3:f6:f8:c9:e1:4c:db:3b:c5:a0:
                    1c:fb:ed:76:4f:3a:d3:e2:23:a0:f0:67:80:90:62:
                    64:d5:ab:e3:a8:70:c0:89:27:4e:86:bf:0d:3f:04:
                    42:5c:2f:05:f8:98:87:3b:01:4e:2a:45:25:d2:df:
                    5b:87:e3:d9:fb:b4:9e:cb:3b:21:35:98:19:e4:7f:
                    b1:65:2a:3b:28:f5:8c:30:37:07:22:75:67:bd:1a:
                    42:da:25:b4:b1:69:7e:50:4c:07:1a:d3:a4:2b:85:
                    81:70:72:ad:cd:c0:6f:51:da:7a:26:0c:00:8e:97:
                    bf:e7:c2:f0:fa:73:09:29:d1:4a:77:53:78:02:07:
                    09:ef:45:59:4d:f6:67:80:4b:4c:bb:af:07:94:35:
                    34:72:58:23:eb:d8:14:75:81:13:78:59:73:6d:90:
                    e8:fb:5c:1d:74:2e:f6:24:21:c3:72:fb:18:07:fa:
                    01:8d:3f:2a:d0:c0:40:3e:12:e8:92:21:24:11:a0:
                    e4:58:cd:66:6d:08:86:e6:2c:64:a9:aa:fe:ba:80:
                    55:4a:a2:42:f9:ba:39:5f:0d:b7:c8:95:a0:02:40:
                    2c:05:e7:5b:8b:7a:83:d3:63:60:cd:aa:3e:9a:6b:
                    0c:53:34:49:bc:0b:d5:d7:6c:dc:39:64:c8:8c:16:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E4:D7:C2:DC:D9:0B:9E:99:26:39:59:A1:9C:38:95:77:58:2D:5F
            X509v3 Authority Key Identifier:
                keyid:2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/qeTXwtzZC56ZJjlZoZw4lXdYLV8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.220.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:c8:ff:bf:4e:a9:43:09:c0:71:43:16:1b:3d:d5:83:da:94:
         4d:9e:69:ae:38:56:24:47:9b:d8:53:a0:25:57:62:4c:3a:70:
         fe:23:96:7f:68:bc:57:4b:de:29:a4:dc:20:0c:ff:98:44:b2:
         74:ec:8a:6c:da:60:e5:a3:f1:92:58:0a:3b:28:86:9e:0f:eb:
         1b:57:fe:97:ca:6d:99:5c:d9:50:43:d0:4f:78:e1:8d:6c:93:
         8a:fe:28:41:ad:f4:11:cc:4f:84:1e:33:8b:e3:a6:f5:39:79:
         c5:a1:a2:77:ef:05:df:ec:dd:30:48:34:94:3e:cb:ff:bc:61:
         d8:bc:25:4b:d9:ee:d2:ce:cc:7c:f7:98:27:dc:15:9e:ff:79:
         ba:d5:24:f3:74:c8:e4:0f:32:66:b7:97:0a:06:8b:7f:ab:c3:
         a8:3a:06:98:0d:04:0b:04:8a:04:71:da:f4:27:9e:5b:15:9a:
         c3:55:0c:e8:13:7e:f5:1f:10:54:22:e3:90:9a:cf:7f:69:25:
         ec:f9:a2:58:4d:2c:cf:fe:14:37:dd:f1:88:47:e7:cf:d0:37:
         63:6f:2f:b2:db:24:2e:65:be:1e:3b:d5:35:8b:37:5f:23:2c:
         79:73:c2:7d:7b:81:8d:05:03:84:f9:8e:fb:5c:43:12:8f:a8:
         f9:28:1d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----