Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/CBBD0C44295B11EBB6592F7CC4F9AE02.roa (download)

Subject key identifier:   5E:F4:74:2F:3A:A1:AF:38:39:5A:9C:52:E6:63:81:A8:26:5A:F3:DD 
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
asID:                     AS58507
Prefixes:
    1: 103.81.124.0/22 (max: 24)
    2: 199.21.172.0/22 (max: 24)
    3: 2400:70c0::/32 (max: 40)

--
$ test-roa -p rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/CBBD0C44295B11EBB6592F7CC4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
        Validity
            Not Before: Jan 31 13:06:37 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=6016ab5d-a127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:e7:1c:4d:f4:24:f2:f2:20:77:fd:0d:d7:
                    e8:b5:01:ba:a7:02:d6:76:8d:a7:f5:b6:69:aa:bb:
                    ee:f9:be:b4:25:13:b6:33:1c:28:50:07:a1:83:af:
                    5a:54:36:f3:c3:9a:3c:13:45:93:26:30:b3:b9:ae:
                    b8:d3:03:f5:74:40:e2:f5:a8:90:84:c8:90:4e:45:
                    bd:e5:83:51:ab:61:96:46:16:b9:ae:98:d2:d7:ac:
                    a1:89:98:d2:d2:28:09:bf:9e:47:20:8b:c3:a8:e7:
                    1d:32:72:c6:0d:1d:9b:27:42:3b:2a:28:5e:2d:a5:
                    fb:bf:fa:a9:cd:01:e8:6f:e6:1b:60:ac:28:b5:89:
                    4a:2e:2c:b3:83:12:c0:ab:72:5c:0e:55:46:75:2b:
                    41:6e:79:7d:50:bf:f4:e8:fb:37:5a:14:35:a5:3d:
                    e2:6e:7e:dc:17:ea:07:37:c5:08:9b:01:76:c8:6f:
                    58:b4:fc:f6:de:46:67:0a:8f:a5:24:5c:8f:c3:0e:
                    47:7f:df:77:06:35:b4:49:68:ef:de:f6:f1:44:ac:
                    07:c8:78:17:0b:ff:7c:9e:52:dd:27:c7:40:27:e5:
                    5e:38:19:3c:c3:d7:19:d9:39:a7:17:92:d2:5b:c0:
                    80:40:ef:13:f4:c6:dd:f4:00:4c:82:5a:3b:b4:5c:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:F4:74:2F:3A:A1:AF:38:39:5A:9C:52:E6:63:81:A8:26:5A:F3:DD
            X509v3 Authority Key Identifier: 
                keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/CBBD0C44295B11EBB6592F7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.124.0/22
                  199.21.172.0/22
                IPv6:
                  2400:70c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:31:98:46:1b:a4:a2:5f:f7:0b:8d:cb:5e:c2:8a:0a:8d:fd:
         ef:1a:10:08:de:61:76:93:4f:69:a2:1e:96:47:bc:9f:07:a5:
         d6:ce:8c:02:8b:54:4c:70:27:04:15:39:27:31:fc:60:8c:c4:
         b9:48:35:af:b4:b4:e2:85:03:96:a9:2c:93:1e:35:89:42:71:
         8b:c5:4b:ad:5e:af:8e:7c:ad:8a:30:15:04:a8:7c:34:d2:2b:
         7f:96:74:88:0d:d3:52:62:24:b5:de:1e:8c:8b:9d:2b:5d:ca:
         63:73:57:35:19:d1:3c:00:c5:e9:b1:ee:32:76:a7:56:d9:4c:
         53:04:24:5c:8c:94:9b:bb:ce:d7:85:20:6a:3c:76:3c:73:e5:
         65:f7:24:f9:b6:b2:20:e1:09:45:ce:cc:8a:0b:dd:18:9c:ef:
         5c:30:30:0f:35:a7:22:0d:ca:88:d6:19:ac:d3:9d:d4:bb:4f:
         ca:6b:53:ad:b8:98:d3:71:e0:6d:61:d8:87:5d:fd:49:14:9b:
         74:e3:eb:ea:d9:34:1b:b2:8a:8c:a7:6a:52:37:45:3e:aa:b0:
         ab:10:47:81:88:4d:ff:14:07:ca:01:0a:d5:c1:eb:51:13:06:
         ab:53:49:a0:ce:ef:cc:fb:e6:f1:c6:42:91:c3:34:18:ab:b1:
         54:c5:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 13:03:51 2021 by LibreSSL & rpki-client.