Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa (download)

Subject key identifier:   9E:3B:42:86:40:31:B0:7D:67:27:30:98:D7:46:0A:0E:0B:90:3B:0C 
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
asID:                     AS0
Prefixes:
    1: 103.116.194.0/24 (max: 24)
    2: 2001:df3:1300::/48 (max: 48)

--
$ test-roa -p rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395 (0x95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Dec 29 19:03:10 2020 GMT
            Not After : Mar  2 00:00:00 2022 GMT
        Subject: CN=5feb7d6e-ff29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:78:c9:77:90:74:c9:b5:26:b6:42:65:b4:
                    df:60:b4:92:a9:e0:06:e5:66:cf:60:e9:80:bc:10:
                    c3:e4:c5:c6:3a:5b:8c:5b:1d:d1:a9:5f:2c:60:f0:
                    2a:9e:c2:62:82:79:00:a6:43:68:ee:1c:ed:68:90:
                    88:a7:f0:4c:a3:95:dd:71:6b:a1:5f:cf:8a:b0:9d:
                    38:01:43:2b:c6:75:a3:80:13:3f:f3:87:1a:bd:eb:
                    36:44:40:87:93:1d:68:aa:ed:90:5b:31:c2:a2:b3:
                    3c:b2:00:a4:6d:f1:58:e5:05:53:37:a7:29:c6:8f:
                    a2:2a:63:7a:2e:9b:85:bf:7d:7a:57:12:d8:b1:17:
                    10:2e:70:3f:23:b7:28:f7:a8:11:46:77:d6:8e:2a:
                    a2:90:53:a1:47:0c:64:c2:09:e0:e0:bd:e4:ec:e6:
                    1e:9d:9c:5e:a4:a6:67:0b:dd:01:5b:ad:04:22:51:
                    80:08:22:5a:86:c2:4b:5f:9e:b2:9e:fc:40:54:5c:
                    cf:d2:21:a4:1f:a5:07:23:c0:e4:c9:d8:b0:8a:cd:
                    a6:ae:a9:24:e2:80:12:3c:c3:15:8a:63:b7:56:60:
                    18:84:e4:17:d6:26:81:fb:27:02:dc:6a:6d:88:57:
                    35:72:28:f8:48:bd:ce:ec:4e:5b:ea:b3:74:a0:f8:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9E:3B:42:86:40:31:B0:7D:67:27:30:98:D7:46:0A:0E:0B:90:3B:0C
            X509v3 Authority Key Identifier: 
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                0.0.....0....gt.0.....0.... .
...
    Signature Algorithm: sha256WithRSAEncryption
         25:d8:40:cb:01:01:95:9c:76:5b:d0:bc:fd:8d:0b:bf:c2:d3:
         2b:60:fc:b0:78:9a:e7:68:1c:85:aa:80:3e:ae:7b:69:bf:2d:
         f4:a5:bc:7b:1c:26:2a:02:c8:ae:54:06:8f:47:e2:be:94:9d:
         a6:57:51:c5:8d:94:97:39:63:54:1c:38:56:a5:82:07:6b:e8:
         4a:e9:ba:94:9f:8a:76:b2:b5:4a:4b:b5:c4:8a:c4:ef:e6:40:
         b5:32:78:11:76:8e:13:36:1f:94:df:73:7f:7e:98:c5:27:fc:
         61:8a:cc:90:ec:bc:ff:0c:34:89:dc:41:eb:21:ce:f4:da:48:
         e4:15:53:0f:cf:06:a2:b6:3e:72:13:ec:ba:4e:05:5a:11:cf:
         19:91:06:25:87:4d:f8:12:7c:0c:0e:34:2f:7d:1b:99:aa:54:
         1a:28:50:cb:56:5e:db:f9:b8:92:c3:1f:a3:b0:ed:16:4e:2d:
         ec:47:25:b4:38:fb:fb:3f:94:0d:5e:7e:1b:85:41:72:7b:fa:
         af:97:59:fc:78:4b:af:8a:aa:e4:eb:95:b2:db:48:af:e6:f7:
         0a:5c:57:bb:26:2f:f9:4e:9e:f1:8d:0d:ba:98:9b:f8:58:46:
         ce:a0:bd:8f:50:b4:db:5c:ca:4c:5a:4d:2f:26:cb:cb:ff:01:
         20:44:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jun 16 08:55:48 2021 by LibreSSL & rpki-client.