Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DFB23C926D4311ECA4197B25C4F9AE02.roa (download)

Subject key identifier:   DA:C7:92:F4:E4:20:0F:F0:C6:7B:6C:E0:45:90:44:B1:D1:5C:7D:E5 
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
asID:                     AS400171
Prefixes:
    1: 103.239.56.0/22 maxlen: 22

--
$ test-roa -p rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DFB23C926D4311ECA4197B25C4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17687 (0x4517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan  4 09:51:22 2022 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=61d4189a-8a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:9a:85:fd:21:7d:7b:ec:e8:6f:35:1f:d7:
                    92:06:1f:34:ca:3b:83:f2:74:62:fb:06:6e:08:91:
                    49:1c:b5:1f:5e:a7:23:fa:1a:08:95:d0:18:aa:dc:
                    15:60:1b:f6:9f:89:54:d2:f8:40:16:b0:59:6b:6e:
                    9b:b6:fd:6f:94:fc:b0:2b:7f:e8:43:27:05:1e:3a:
                    d9:40:d4:25:5e:bc:22:b6:fd:67:bf:79:27:e0:93:
                    c4:44:78:45:22:ec:b2:e7:ce:fe:b4:a2:8f:fd:9e:
                    1a:03:a9:57:90:f0:ff:8d:c9:7b:00:55:ea:02:5d:
                    38:1f:6b:b8:73:38:a5:ba:14:41:3c:17:0f:93:f7:
                    fb:19:38:4e:2e:e1:b9:95:38:f0:61:86:30:a5:69:
                    e4:5c:ee:32:0d:12:14:66:fb:25:26:f7:2c:e6:e9:
                    ae:db:c7:e4:70:26:fe:fe:0b:a8:42:de:25:20:fd:
                    0f:4e:bb:51:58:d6:b0:ee:cd:ea:d6:ba:5c:9d:81:
                    17:c5:81:db:d1:64:31:6f:20:a6:e3:3b:d3:f0:ba:
                    89:c4:be:72:24:1c:21:6c:6a:f8:e5:61:c9:2b:e1:
                    62:d1:f8:28:64:df:bb:1f:38:a9:fc:0f:c3:34:0e:
                    56:a2:79:b0:18:aa:72:e7:f3:02:4f:34:be:b7:3d:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DA:C7:92:F4:E4:20:0F:F0:C6:7B:6C:E0:45:90:44:B1:D1:5C:7D:E5
            X509v3 Authority Key Identifier: 
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DFB23C926D4311ECA4197B25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:af:c8:11:b7:c0:07:fb:f1:ce:bb:c5:6d:7c:12:dd:44:
         1f:4f:33:7a:79:71:6b:a4:24:d1:30:8f:23:ab:d6:90:b1:67:
         ba:37:3c:1f:df:1b:d5:04:f3:05:11:38:89:02:24:d6:56:b0:
         96:aa:13:00:a5:e9:d9:38:1a:f9:78:db:69:a2:cb:ca:84:1b:
         a6:97:d6:70:fe:af:0e:72:ab:af:d0:dc:ef:24:af:71:1d:ba:
         f5:5d:30:2f:dc:bf:19:df:0e:b2:94:7b:a8:d8:17:19:61:2f:
         58:cc:f7:56:4e:5f:a3:35:c5:13:86:d6:db:81:d4:a4:a1:3f:
         e1:de:43:cc:ab:69:85:eb:51:d6:4e:12:f1:0d:24:0c:ea:94:
         93:e7:7d:b9:53:95:0c:e7:0b:bc:72:f6:59:bd:7b:75:a2:6d:
         9f:39:67:9d:fe:ee:37:93:d6:db:ff:3a:33:ec:a1:28:22:cb:
         02:a3:51:24:f3:7a:d6:6c:74:a2:6a:b3:9c:fb:63:ad:29:ab:
         2e:29:8c:4f:fa:2d:31:da:8b:70:75:77:ad:09:d0:7c:e6:74:
         35:e2:6c:47:0e:6d:6b:ac:cc:d8:f9:26:99:c1:db:d9:f8:f0:
         89:68:73:6a:12:c3:91:7b:8d:86:5e:de:f1:d9:05:52:24:b0:
         10:f5:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 4 11:28:18 2022 by LibreSSL & rpki-client.