Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/298912B87C7C11ECAE9C7965C4F9AE02.roa (download)

Subject key identifier:   F4:FB:2F:07:EB:F4:3F:F8:44:A2:CC:C6:FD:6C:D4:45:17:C8:19:94 
Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
asID:                     AS210542
Prefixes:
    1: 2400:3e20:3000::/36 maxlen: 36
    2: 2400:3e20:f000::/36 maxlen: 36

--
$ test-roa -p rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/298912B87C7C11ECAE9C7965C4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
        Validity
            Not Before: Jan 23 18:42:06 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61eda17e-86af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:70:98:cc:a2:16:33:ab:a2:15:f5:e3:f4:
                    5d:4e:28:c4:ef:59:c7:53:e2:71:6f:54:c1:e4:6e:
                    d1:c2:0c:c7:3c:2b:78:05:35:94:16:bf:ae:f4:f3:
                    e6:38:62:1c:6d:a4:4c:d2:fe:7b:d9:3c:88:7e:84:
                    9e:d4:05:88:56:43:02:a6:17:e0:d1:9f:ae:10:54:
                    21:46:9f:e5:b4:a8:3b:c1:14:29:24:3b:6e:6e:5a:
                    76:5c:33:a5:ec:41:04:8f:19:b2:1e:48:a7:7b:e9:
                    fe:2f:a9:d1:69:8e:1a:38:1f:1f:88:57:8c:ba:9c:
                    a5:13:25:90:ec:94:e0:79:a0:50:00:9e:df:01:aa:
                    f5:3f:c6:b5:d7:5e:1a:92:2d:d9:b8:d9:43:2a:b5:
                    7a:b9:57:ee:1f:15:ff:a2:b7:7f:f6:43:42:e3:34:
                    0f:66:f5:90:7f:13:e8:45:eb:bc:a8:e3:87:31:c6:
                    d4:d9:b3:13:8b:43:69:b1:88:7c:1d:09:ce:97:8f:
                    9c:ca:b2:39:f0:d0:f5:87:95:d5:2f:ca:04:84:3f:
                    39:16:17:81:40:c7:37:da:02:62:46:ed:b4:6d:ca:
                    63:0d:90:f7:50:79:6f:f3:e8:5d:33:d3:af:77:b5:
                    2d:0f:78:03:e1:4d:3c:14:d8:a3:74:0a:46:57:ef:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F4:FB:2F:07:EB:F4:3F:F8:44:A2:CC:C6:FD:6C:D4:45:17:C8:19:94
            X509v3 Authority Key Identifier: 
                keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/298912B87C7C11ECAE9C7965C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3e20:3000::/36
                  2400:3e20:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:0e:b7:7e:3f:a4:a4:d8:1b:9f:3c:6d:e7:6a:ac:d5:61:c6:
         a9:78:2c:11:80:57:c9:1f:9d:a1:43:bc:58:91:27:2e:2a:e6:
         d6:8a:b8:7f:f6:8a:4f:cb:62:9f:22:a5:c4:49:ef:4b:f5:12:
         c6:d0:81:6a:74:c1:ee:25:b2:7c:be:e1:bb:75:4b:c4:91:3c:
         c5:c9:37:44:0e:5c:e8:d7:5e:d6:c0:f0:d2:97:11:9c:8b:63:
         fa:b3:ae:6e:bb:1e:4a:71:8f:64:bb:c8:32:3c:5e:d5:cb:80:
         fa:45:03:77:2c:ab:61:35:7b:d0:4c:e3:52:bd:99:3a:12:14:
         a6:ac:f5:90:af:6f:e1:a4:19:cd:83:2b:10:30:db:a3:d8:6f:
         86:35:45:70:1c:8c:e8:d9:4c:d6:a3:9f:74:2b:b0:41:34:ec:
         b5:0d:83:78:72:b7:d5:0d:37:08:68:eb:90:d7:40:65:d1:59:
         e2:c0:d3:88:f3:23:07:31:b6:69:a7:8a:a6:97:2d:41:17:3f:
         01:25:a3:96:e4:74:06:cb:20:23:ce:64:c8:25:aa:24:db:a1:
         f5:58:fc:7b:e1:d6:36:4d:c8:77:57:7c:92:60:3a:1b:38:2a:
         7f:f9:49:4c:f2:59:0e:29:92:d4:6a:d8:72:8a:a1:5d:f6:1c:
         83:5d:96:8e
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MEUxMTExMC8GA1UEBRMoM0Q2NDQ3RDcyOTc0ODMyOTRFQ0VDQjg1M0E1RTUwMDkz
NUQxQjhENzAeFw0yMjAxMjMxODQyMDZaFw0yMzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxZWRhMTdlLTg2YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwg3CYzKIWM6uiFfXj9F1OKMTvWcdT4nFvVMHkbtHCDMc8K3gFNZQWv6708+Y4
YhxtpEzS/nvZPIh+hJ7UBYhWQwKmF+DRn64QVCFGn+W0qDvBFCkkO25uWnZcM6Xs
QQSPGbIeSKd76f4vqdFpjho4Hx+IV4y6nKUTJZDslOB5oFAAnt8BqvU/xrXXXhqS
Ldm42UMqtXq5V+4fFf+it3/2Q0LjNA9m9ZB/E+hF67yo44cxxtTZsxOLQ2mxiHwd
Cc6Xj5zKsjnw0PWHldUvygSEPzkWF4FAxzfaAmJG7bRtymMNkPdQeW/z6F0z0693
tS0PeAPhTTwU2KN0CkZX72LzAgMBAAGjggKfMIICmzAdBgNVHQ4EFgQU9PsvB+v0
P/hEoszG/WzURRfIGZQwHwYDVR0jBBgwFoAUPWRH1yl0gylOzsuFOl5QCTXRuNcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRTExL0QwNjBDOUIyNUJE
NjExRUNBRDgzMzY1MUM0RjlBRTAyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVO
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUFdSSDF5bDBneWxPenN1Rk9sNVFDVFhSdU5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi8yOTg5MTJCODdD
N0MxMUVDQUU5Qzc5NjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDApBggrBgEFBQcBBwEB/wQa
MBgwFgQCAAIwEAMGBCQAPiAwAwYEJAA+IPAwDQYJKoZIhvcNAQELBQADggEBACAO
t34/pKTYG588bedqrNVhxql4LBGAV8kfnaFDvFiRJy4q5taKuH/2ik/LYp8ipcRJ
70v1EsbQgWp0we4lsny+4bt1S8SRPMXJN0QOXOjXXtbA8NKXEZyLY/qzrm67Hkpx
j2S7yDI8XtXLgPpFA3csq2E1e9BM41K9mToSFKas9ZCvb+GkGc2DKxAw26PYb4Y1
RXAcjOjZTNajn3QrsEE07LUNg3hyt9UNNwho65DXQGXRWeLA04jzIwcxtmmniqaX
LUEXPwElo5bkdAbLICPOZMglqiTbofVY/Hvh1jZNyHdXfJJgOhs4Kn/5SUzyWQ4p
ktRq2HKKoV32HINdlo4=
-----END CERTIFICATE-----

Generated at Sun Jan 23 21:28:57 2022 by LibreSSL & rpki-client.