Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/94A029162D2611EBBDB17E85C4F9AE02.roa (download)

Subject key identifier:   D9:85:E7:15:F3:6E:43:E8:78:63:32:52:93:54:15:37:C6:A7:CD:2E 
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
asID:                     AS45654
Prefixes:
    1: 199.21.172.0/22 (max: 24)

--
$ test-roa -p rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/94A029162D2611EBBDB17E85C4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
        Validity
            Not Before: Jan 31 13:06:36 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=6016ab5c-ee0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:0c:27:5d:44:76:6c:51:7e:86:83:a2:e7:
                    72:04:5a:cc:28:9f:87:d6:13:fd:3a:4b:f1:04:0a:
                    27:d5:6d:e8:dd:fc:3e:52:c5:53:3d:66:51:b0:7f:
                    41:18:f8:ee:fd:e8:db:0a:73:41:96:f6:37:64:39:
                    07:2e:41:06:db:e9:ad:2e:e3:44:4b:90:be:fd:61:
                    47:a4:cf:4b:a1:55:65:48:87:25:bf:bf:d6:e4:73:
                    16:f5:e5:0d:15:fc:1b:57:22:b2:d2:25:ef:cf:62:
                    23:80:7f:fd:96:5f:f8:27:4c:1c:73:1f:52:c3:5b:
                    b8:b6:60:72:a9:7d:18:a6:05:02:be:6b:ee:7f:25:
                    0f:4c:c5:63:06:c5:e7:0f:37:70:5e:0c:07:9f:50:
                    9c:7a:a2:75:58:0c:01:40:6b:92:f8:c1:cf:0e:d6:
                    db:e4:b5:13:0e:86:43:84:ef:a3:2d:57:cf:2b:6d:
                    bf:e9:6a:e0:b2:b8:87:68:df:c6:3e:d6:2e:e2:8d:
                    f7:1a:b8:28:82:08:06:f0:b5:24:51:ef:45:cf:ba:
                    68:e2:1f:50:ad:db:49:2d:e8:4b:01:5c:14:f6:32:
                    e7:16:13:07:5a:3b:b6:73:2e:37:a7:75:d1:83:be:
                    f4:ae:c0:b0:98:26:43:a8:f2:39:66:bc:c7:75:ad:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D9:85:E7:15:F3:6E:43:E8:78:63:32:52:93:54:15:37:C6:A7:CD:2E
            X509v3 Authority Key Identifier: 
                keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/94A029162D2611EBBDB17E85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:92:d7:d3:93:32:39:b7:75:9e:e3:7d:e1:bb:8f:13:82:82:
         fe:68:ab:b8:35:fe:29:9d:fc:e9:3c:96:4e:82:48:c3:89:42:
         c6:12:94:05:b7:2c:6d:6c:cf:31:8f:79:02:f3:83:a4:1b:a8:
         c9:fa:5c:e8:aa:89:a5:d4:35:28:2d:03:43:3f:3d:a6:96:53:
         4c:64:44:0d:e4:2e:aa:14:11:9d:52:a8:f9:f0:12:c4:9c:8a:
         ed:89:46:12:5e:11:26:64:27:64:ea:a7:a7:a3:97:e4:46:04:
         3d:b2:3e:37:8a:0e:91:f8:26:8b:a2:49:f4:b2:60:13:88:ea:
         fe:b8:e9:92:c4:d0:00:a8:df:0d:9f:82:17:5c:9f:e1:8e:6d:
         de:6c:72:f3:1a:16:85:37:a0:13:41:22:9d:d3:f2:cb:03:1d:
         1b:4a:57:83:f6:9d:5b:37:d6:c0:62:ae:68:77:bd:45:23:11:
         5b:c0:d1:34:3c:a1:8e:a1:7d:37:5b:0b:9b:9c:ba:02:f5:ad:
         22:00:1e:6e:81:36:36:f2:d2:fc:b7:17:98:f3:c9:0f:c5:df:
         58:6b:89:ea:6c:43:53:1b:fe:d7:1c:13:23:bd:e6:af:a8:17:
         d9:b9:da:4c:99:8e:18:67:1b:77:0e:59:82:66:7f:31:34:8b:
         21:85:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 13:03:51 2021 by LibreSSL & rpki-client.