Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/7D5F356C26FF11EBAC6E5B50C4F9AE02.roa (download)

Subject key identifier:   05:98:A9:5D:E7:90:68:3D:65:EA:E0:54:50:1F:D1:9F:1D:6A:F8:E6 
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
asID:                     AS38466
Prefixes:
    1: 27.125.224.0/19 (max: 19)
    2: 27.125.224.0/24 (max: 24)
    3: 27.125.225.0/24 (max: 24)
    4: 27.125.226.0/24 (max: 24)
    5: 27.125.227.0/24 (max: 24)
    6: 27.125.228.0/24 (max: 24)
    7: 27.125.229.0/24 (max: 24)
    8: 27.125.230.0/24 (max: 24)
    9: 27.125.231.0/24 (max: 24)
   10: 27.125.232.0/24 (max: 24)
   11: 27.125.233.0/24 (max: 24)
   12: 27.125.234.0/24 (max: 24)
   13: 27.125.235.0/24 (max: 24)
   14: 27.125.236.0/24 (max: 24)
   15: 27.125.237.0/24 (max: 24)
   16: 27.125.238.0/24 (max: 24)
   17: 27.125.239.0/24 (max: 24)
   18: 27.125.240.0/24 (max: 24)
   19: 27.125.241.0/24 (max: 24)
   20: 27.125.242.0/24 (max: 24)
   21: 27.125.243.0/24 (max: 24)
   22: 27.125.244.0/24 (max: 24)
   23: 27.125.245.0/24 (max: 24)
   24: 27.125.246.0/24 (max: 24)
   25: 27.125.247.0/24 (max: 24)
   26: 27.125.248.0/24 (max: 24)
   27: 27.125.249.0/24 (max: 24)
   28: 27.125.250.0/24 (max: 24)
   29: 27.125.251.0/24 (max: 24)
   30: 27.125.252.0/24 (max: 24)
   31: 27.125.253.0/24 (max: 24)
   32: 27.125.254.0/24 (max: 24)
   33: 27.125.255.0/24 (max: 24)
   34: 103.1.144.0/22 (max: 22)
   35: 103.1.144.0/24 (max: 24)
   36: 103.1.145.0/24 (max: 24)
   37: 103.1.146.0/24 (max: 24)
   38: 103.1.147.0/24 (max: 24)
   39: 123.136.96.0/19 (max: 19)
   40: 123.136.96.0/24 (max: 24)
   41: 123.136.97.0/24 (max: 24)
   42: 123.136.98.0/24 (max: 24)
   43: 123.136.99.0/24 (max: 24)
   44: 123.136.100.0/24 (max: 24)
   45: 123.136.101.0/24 (max: 24)
   46: 123.136.102.0/23 (max: 24)
   47: 123.136.104.0/22 (max: 22)
   48: 123.136.104.0/24 (max: 24)
   49: 123.136.105.0/24 (max: 24)
   50: 123.136.106.0/24 (max: 24)
   51: 123.136.107.0/24 (max: 24)
   52: 123.136.108.0/24 (max: 24)
   53: 123.136.109.0/24 (max: 24)
   54: 123.136.110.0/24 (max: 24)
   55: 123.136.111.0/24 (max: 24)
   56: 123.136.112.0/24 (max: 24)
   57: 123.136.113.0/24 (max: 24)
   58: 123.136.114.0/24 (max: 24)
   59: 123.136.115.0/24 (max: 24)
   60: 123.136.116.0/24 (max: 24)
   61: 123.136.117.0/24 (max: 24)
   62: 123.136.118.0/24 (max: 24)
   63: 123.136.119.0/24 (max: 24)
   64: 123.136.120.0/24 (max: 24)
   65: 123.136.121.0/24 (max: 24)
   66: 123.136.122.0/24 (max: 24)
   67: 123.136.123.0/24 (max: 24)
   68: 123.136.124.0/24 (max: 24)
   69: 123.136.125.0/24 (max: 24)
   70: 123.136.126.0/24 (max: 24)
   71: 123.136.127.0/24 (max: 24)
   72: 2405:3800::/32 (max: 32)
   73: 2405:3800:80::/41 (max: 41)
   74: 2405:3800:100::/41 (max: 41)
   75: 2405:3800:200::/41 (max: 41)
   76: 2405:3800:280::/41 (max: 41)
   77: 2405:3800:380::/41 (max: 41)
   78: 2405:3800:400::/41 (max: 41)
   79: 2405:3800:480::/41 (max: 41)
   80: 2405:3800:500::/41 (max: 41)

--
$ test-roa -p rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/7D5F356C26FF11EBAC6E5B50C4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12188 (0x2f9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
        Validity
            Not Before: Sep  3 15:20:51 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=61323d52-f030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:b7:02:ad:7c:4c:9a:63:7f:8c:2a:08:58:
                    70:90:fd:61:15:6c:6e:8e:ad:ab:65:c0:b6:06:f8:
                    52:e9:3f:ad:60:d5:f9:39:e2:75:cb:9e:14:70:37:
                    df:a1:0a:5e:91:f1:98:2d:9c:c0:ca:a3:35:9b:1a:
                    84:3e:34:41:99:7e:66:70:cb:8c:a4:a4:3e:19:33:
                    c4:6d:55:e8:f5:b8:b1:45:e7:8f:3b:1a:00:4e:64:
                    58:45:b0:18:fd:cb:b7:bf:fc:7b:7e:48:98:e8:88:
                    f8:32:58:00:3d:cc:b9:b7:a3:56:b2:4e:8a:13:fd:
                    9c:29:64:02:b4:ef:c1:a4:84:3c:3d:ce:3d:c1:d0:
                    ee:36:7f:d8:23:17:56:41:9a:d3:f6:5e:da:95:eb:
                    1c:f2:40:e7:14:31:62:1b:2a:47:3c:83:e2:cd:32:
                    8b:2a:fa:72:a9:dd:b0:0c:3e:62:4f:59:1b:de:8a:
                    33:b1:e5:07:95:7f:2d:8e:7f:d4:52:82:8e:1c:1a:
                    90:a6:17:c5:10:80:85:48:0a:30:7c:40:ad:d7:dc:
                    52:ca:32:af:06:38:5d:78:7d:9a:42:15:c8:97:da:
                    f3:a5:88:2d:3c:78:da:4c:f5:81:c5:e4:45:05:13:
                    7d:a8:8e:e1:ce:07:cd:2a:a0:80:79:7c:22:0b:95:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                05:98:A9:5D:E7:90:68:3D:65:EA:E0:54:50:1F:D1:9F:1D:6A:F8:E6
            X509v3 Authority Key Identifier: 
                keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/7D5F356C26FF11EBAC6E5B50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.125.224.0/19
                  103.1.144.0/22
                  123.136.96.0/19
                IPv6:
                  2405:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:62:6e:de:2a:16:e3:84:40:65:ea:5e:11:87:16:35:ac:e8:
         5b:49:e2:f6:cf:94:ca:34:00:2d:2d:7c:87:7f:93:4e:d6:a7:
         14:8b:76:a8:a7:aa:72:a1:37:ea:fa:cb:fc:2f:c1:d8:cd:21:
         ac:c0:d2:cb:b6:cb:a7:a0:ce:31:c4:55:cd:f3:aa:e5:18:25:
         30:71:1d:97:7a:3e:57:d2:dd:c7:6b:ea:1f:51:07:19:cc:3e:
         de:a8:51:a9:64:4b:c8:9a:48:66:59:29:41:b0:05:70:20:62:
         0b:21:1b:e4:c9:89:71:45:dd:27:33:63:86:c9:c1:a2:7e:2f:
         08:a8:e7:71:ec:59:88:ab:55:3a:b8:fe:73:c6:c5:0f:2c:da:
         53:bb:59:84:fa:0f:4d:aa:e5:6d:f8:8f:cc:92:4f:a4:2b:45:
         77:a4:07:83:22:ae:97:47:49:86:d8:34:83:28:6b:6e:c5:dd:
         16:ed:86:7f:dd:d0:fb:be:a3:36:b4:db:15:c2:9f:38:ba:27:
         eb:d0:46:a5:c6:e0:e5:20:f6:43:9e:d2:c4:05:70:7d:7b:0f:
         d0:c5:4b:5b:e6:5b:51:e7:6a:b0:01:2c:94:d5:ba:5a:9f:2d:
         4f:9a:10:d9:a7:d7:72:87:fe:ea:b7:16:82:e8:dd:21:fa:c4:
         ea:f5:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:57:10 2021 by LibreSSL & rpki-client.