Route Origin Authorization
Location:                 rpki.cnnic.cn/rpki/A9162E3D0000/756/319wjIz2fz6TnRjBqXsSmJfCv7E.roa (download)

Subject key identifier:   DF:5F:70:8C:8C:F6:7F:3E:93:9D:18:C1:A9:7B:12:98:97:C2:BF:B1 
Authority key identifier: 5D:52:75:08:7E:81:EF:56:49:7D:62:41:5B:79:98:9C:93:63:C2:0F
asID:                     AS398704
Prefixes:
    1: 103.232.144.0/22 (max: 24)

--
$ test-roa -p rpki.cnnic.cn/rpki/A9162E3D0000/756/319wjIz2fz6TnRjBqXsSmJfCv7E.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D5275087E81EF56497D62415B79989C9363C20F
        Validity
            Not Before: Dec 29 07:02:04 2020 GMT
            Not After : Dec 29 06:57:40 2021 GMT
        Subject: CN=DF5F708C8CF67F3E939D18C1A97B129897C2BFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:59:82:dc:58:65:94:e9:fe:cf:38:ce:ad:
                    18:9a:69:f7:c5:a6:12:00:25:f4:47:64:53:d5:83:
                    4a:a4:ac:ef:4a:09:01:5b:78:11:53:40:c6:5b:76:
                    39:da:3d:c6:94:3b:07:fd:ec:86:69:5d:a0:d6:45:
                    c1:3d:5f:77:66:af:d0:63:f5:03:3b:a6:68:5c:2f:
                    07:4c:4e:97:0a:d0:b1:5e:27:87:ae:98:f3:da:5a:
                    29:e3:cc:d1:ab:5f:e6:0a:86:29:b9:c8:a8:66:bb:
                    e9:c1:89:a6:75:cb:a6:3a:00:99:d1:b3:43:7c:5a:
                    32:cb:2d:a1:e7:82:b6:62:4e:4f:e3:f3:dd:83:41:
                    21:ab:7a:86:c1:ba:2f:80:16:81:c5:37:96:50:6b:
                    df:66:63:45:82:6d:77:60:e1:50:91:db:a2:fa:99:
                    ff:f6:4f:7f:72:21:cb:62:f9:33:69:8b:53:c0:86:
                    2a:ae:ff:4e:ea:b0:53:fd:a9:2a:92:d6:e6:58:be:
                    a4:97:33:35:b4:fd:d4:bf:d0:c7:e1:9c:57:7f:22:
                    d2:5a:a4:85:fe:c5:8c:55:92:1a:31:54:d8:7d:cc:
                    2b:a4:7e:57:30:18:de:1a:99:a5:95:40:e7:03:a3:
                    fc:eb:6d:89:0c:c0:81:58:fa:8e:8f:6c:9f:1a:c2:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DF:5F:70:8C:8C:F6:7F:3E:93:9D:18:C1:A9:7B:12:98:97:C2:BF:B1
            X509v3 Authority Key Identifier: 
                keyid:5D:52:75:08:7E:81:EF:56:49:7D:62:41:5B:79:98:9C:93:63:C2:0F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/319wjIz2fz6TnRjBqXsSmJfCv7E.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:4f:dc:55:5c:40:6e:c4:52:ee:31:f7:31:97:17:ab:69:
         4b:a1:2b:51:fb:9d:b9:e6:ec:bb:15:8c:c3:c5:84:2a:41:1e:
         5b:77:3c:d8:75:98:7c:d6:9c:ce:74:d9:c1:4d:8f:1e:19:94:
         3a:01:50:b4:c0:40:db:d3:b4:53:e1:59:39:1a:60:56:d2:02:
         7a:f7:8c:8e:b6:dc:73:59:9b:72:ce:9e:58:a8:f2:93:8c:f6:
         47:17:07:3b:8a:76:25:2a:69:0b:de:43:d8:ff:af:2b:75:da:
         8f:90:2e:90:c2:92:1b:8e:c4:75:2c:d5:bb:d3:77:63:da:bc:
         2e:85:d2:ae:e0:5b:16:34:7c:cf:2a:21:a5:5c:14:02:ae:86:
         90:2c:e6:be:f1:b7:61:60:11:d1:ec:73:c0:f5:fd:2a:bb:5b:
         22:7b:62:ec:77:ec:ce:7d:69:ff:3c:65:3d:db:7d:6b:93:59:
         74:36:4f:31:5f:d8:a3:1f:52:33:c0:62:62:a6:74:ef:d1:c6:
         23:9d:e7:cb:b6:77:be:1d:9f:3f:62:2d:99:fe:b1:89:fd:dc:
         71:9c:9d:dd:b7:3e:7e:83:e6:49:27:df:e9:6c:e0:26:bd:ce:
         13:a3:5e:eb:27:62:56:a9:5a:43:e2:be:c2:31:e1:a0:9c:08:
         ff:f7:dc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 13:34:38 2021 by LibreSSL & rpki-client.