Route Origin Authorization
Location:                 rpki.cnnic.cn/rpki/A9162E3D0000/1411/fOTf7al5zrYIzSnIjsnANVnhYlA.roa (download)

Subject key identifier:   7C:E4:DF:ED:A9:79:CE:B6:08:CD:29:C8:8E:C9:C0:35:59:E1:62:50 
Authority key identifier: 14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
asID:                     AS61317
Prefixes:
    1: 49.128.4.0/22 (max: 24)
    2: 103.244.116.0/22 (max: 24)
    3: 223.29.252.0/22 (max: 24)

--
$ test-roa -p rpki.cnnic.cn/rpki/A9162E3D0000/1411/fOTf7al5zrYIzSnIjsnANVnhYlA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
        Validity
            Not Before: Feb  6 21:01:15 2021 GMT
            Not After : Nov 17 06:20:39 2021 GMT
        Subject: CN=7CE4DFEDA979CEB608CD29C88EC9C03559E16250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:81:11:ba:82:3e:1d:61:3f:c7:74:ee:d0:
                    51:1b:a9:cb:1f:6c:85:32:37:d3:5c:89:37:b7:0c:
                    01:0c:37:3b:98:4b:a3:73:2a:eb:6a:92:91:68:01:
                    cb:ed:9b:52:be:dc:24:18:ba:0a:e6:06:13:b6:45:
                    1a:90:c8:3d:bc:02:fd:c5:10:45:f4:ae:3f:ff:6f:
                    2b:0e:a2:9b:8a:b5:c6:b3:a0:33:13:95:b3:eb:c8:
                    70:a7:fe:81:17:39:70:90:bf:89:da:51:2f:3a:97:
                    2e:b2:b1:68:b0:0e:9b:42:25:c8:3f:8d:41:f6:7e:
                    5d:51:80:54:71:c8:ae:e0:87:3b:df:58:5d:10:da:
                    a6:98:d3:5c:28:aa:3f:24:cd:f7:88:80:45:1f:0a:
                    91:fd:90:0a:25:42:98:29:ca:63:66:2a:85:2f:e8:
                    f6:f1:1c:8b:04:c2:b1:fb:7f:45:c8:31:23:20:23:
                    4b:91:86:71:d2:d4:eb:c9:5e:a5:03:6f:6b:e2:cc:
                    3e:d2:6e:52:9a:8a:1c:b1:cf:77:f7:a0:c2:81:ad:
                    e8:5b:06:d3:44:98:1e:95:5d:cf:a4:7d:52:c2:d5:
                    9c:08:1f:42:8e:12:33:44:79:ee:0f:ba:f8:8c:06:
                    d6:87:e4:fb:45:83:32:a8:4b:af:7d:55:15:41:f5:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7C:E4:DF:ED:A9:79:CE:B6:08:CD:29:C8:8E:C9:C0:35:59:E1:62:50
            X509v3 Authority Key Identifier: 
                keyid:14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/fOTf7al5zrYIzSnIjsnANVnhYlA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                0.0.....0....1.....g.t......
    Signature Algorithm: sha256WithRSAEncryption
         10:37:dc:d5:6d:da:76:69:7b:8e:23:9a:52:66:0c:55:76:65:
         f0:c7:d4:1c:2e:be:d1:11:6d:b1:40:4d:73:5d:b9:6d:07:fa:
         a2:d4:a0:57:b3:27:fe:6e:ad:6f:72:ff:1d:0f:f0:73:5a:a3:
         1b:01:69:71:27:4e:b7:d0:3f:49:4b:cd:2d:65:0d:91:20:fe:
         db:2d:b2:11:44:03:7c:bf:d4:6a:f5:37:a9:05:04:4c:95:9d:
         22:a7:2b:18:2e:36:fc:4d:7c:d7:59:bd:2f:c7:42:1b:63:ec:
         54:9a:2f:8b:d4:6a:14:81:8d:f4:8a:03:1b:0a:cb:11:7f:07:
         8e:5f:39:6a:3e:ea:5b:eb:e6:c8:a4:54:74:7a:2f:9d:05:32:
         2f:a6:a7:af:38:ba:fc:b8:cf:75:a7:7f:9e:f8:9b:c6:aa:4f:
         eb:1b:0e:39:f0:27:28:71:4c:ce:ff:97:ce:da:e6:a1:c7:73:
         93:7e:26:d2:c1:3c:74:29:1f:8f:f4:6d:a6:ba:29:44:4e:31:
         5e:19:5a:69:ab:5b:f2:96:6b:38:28:dd:3f:9d:bd:ab:7d:f1:
         15:52:cc:a5:ea:41:ec:24:7e:85:48:9f:c3:c3:be:28:ce:15:
         84:38:ed:14:1a:1f:be:6c:1a:ec:88:2e:47:4b:77:33:5b:52:
         7c:b1:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Jun 14 14:13:15 2021 by LibreSSL & rpki-client.