Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/793803867DEA11EC9FC67D66C4F9AE02.roa (download)

Subject key identifier:   CA:45:59:31:93:9B:6C:06:10:8F:ED:24:8F:2D:6B:A2:DC:0B:D7:A6 
Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
asID:                     AS45671
Prefixes:
    1: 2400:3e20:1000::/36 maxlen: 36

--
$ test-roa -p rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/793803867DEA11EC9FC67D66C4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
        Validity
            Not Before: Jan 25 14:24:15 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61f0080f-988b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:80:b3:3e:0b:ec:2c:26:03:05:aa:47:cf:
                    2e:aa:5c:97:8d:44:d1:7f:cb:7b:52:6e:74:bb:aa:
                    c7:d4:e1:2b:62:09:7c:5e:75:c8:3b:4a:3c:f5:da:
                    69:09:bf:c0:e2:5d:db:65:a3:00:50:41:c2:8f:5e:
                    62:0a:ea:13:0b:3f:8c:16:02:bf:0e:61:18:49:47:
                    10:24:be:33:1c:2e:cc:60:42:5c:d3:ac:c0:ad:f2:
                    89:4f:f5:c7:05:ab:aa:19:3c:50:13:0f:e9:5e:b7:
                    a8:a3:aa:94:db:d0:eb:73:07:d9:54:08:1a:7c:27:
                    e4:64:96:08:93:ce:d1:30:27:0a:ab:36:93:c4:1c:
                    22:8f:6a:1e:26:5e:92:25:af:3a:de:4d:6c:e8:1f:
                    a0:0d:e0:10:32:85:b4:b2:a5:c1:f5:da:45:98:aa:
                    79:82:e6:2f:c2:04:b3:23:67:d6:86:22:47:79:0e:
                    e9:03:44:2b:3b:3c:4c:e0:4d:7b:a0:50:80:54:39:
                    a0:d3:6d:e1:c3:86:80:41:7f:d3:d7:7a:f6:eb:92:
                    35:6e:d6:01:27:df:59:97:91:a0:10:19:4d:1e:09:
                    06:ff:0e:66:7a:f6:45:d0:4d:a0:a9:d1:6b:e9:10:
                    17:86:96:09:b1:48:97:9c:81:33:db:10:bc:2c:6c:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CA:45:59:31:93:9B:6C:06:10:8F:ED:24:8F:2D:6B:A2:DC:0B:D7:A6
            X509v3 Authority Key Identifier: 
                keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/793803867DEA11EC9FC67D66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3e20:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:80:45:b1:a9:0c:ea:61:f1:6d:a5:cd:b1:fc:bc:8c:90:84:
         37:07:f5:99:c8:fd:79:91:92:35:dd:50:58:ab:ac:60:9f:e5:
         a8:14:27:58:60:6e:d8:fa:f7:45:88:05:12:a0:4d:9e:b3:38:
         a5:e7:6c:44:9d:f9:52:aa:6f:4f:2e:90:67:43:22:5f:2f:6b:
         8f:2a:0d:9a:54:31:4b:a9:68:bd:69:a3:c2:d7:c0:65:80:6d:
         7b:76:5c:14:50:ff:cc:12:b3:4f:3b:b0:11:d4:b6:48:90:ff:
         57:a8:dd:8c:40:c6:d9:dd:5a:b7:ff:07:fe:d8:c5:a9:be:18:
         02:08:da:eb:a5:5d:9e:20:6a:61:78:bf:be:be:60:b5:bf:1c:
         e3:48:f2:11:11:e8:c1:84:31:23:e7:79:1c:1c:8b:51:27:82:
         3d:64:9e:ac:ed:5a:54:d7:ce:56:b9:e3:b6:8a:65:3f:a9:9b:
         3d:9d:5e:4f:26:78:e3:6c:d7:14:a3:2d:0b:65:e5:45:d6:58:
         2e:b5:37:f6:8e:8d:24:d6:4e:74:33:0b:1e:3b:6e:3d:fb:59:
         9f:ec:98:e7:dd:95:b3:3a:77:45:0d:68:1d:b7:3e:26:0e:28:
         7b:d9:c5:1f:a3:67:a3:a1:d4:1e:25:2a:cb:8d:6e:cf:32:b7:
         31:ce:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 17:23:21 2022 by LibreSSL & rpki-client.