Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/795DEE70073111EA993EC663C4F9AE02.roa (download)

Subject key identifier:   A4:9D:19:50:14:8C:36:28:FD:31:2D:79:BF:97:B0:04:A1:12:76:8B 
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
asID:                     AS397218
Prefixes:
    1: 120.29.252.0/24 (max: 24)
    2: 120.29.253.0/24 (max: 24)
    3: 120.29.254.0/24 (max: 24)
    4: 203.17.72.0/24 (max: 24)
    5: 2001:dcd:1::/48 (max: 48)
    6: 2001:dcd:2::/48 (max: 48)
    7: 2001:dcd:3::/48 (max: 48)
    8: 2001:dcd:4::/48 (max: 48)
    9: 2001:dcd:5::/48 (max: 48)
   10: 2001:dcd:6::/48 (max: 48)
   11: 2001:dcd:7::/48 (max: 48)
   12: 2001:dcd:dd05::/48 (max: 48)

--
$ test-roa -p rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/795DEE70073111EA993EC663C4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
        Validity
            Not Before: Mar 25 08:04:25 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=605c4409-493e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:59:38:c0:2a:5c:fe:b8:08:35:2c:74:32:a0:
                    94:f6:41:c5:db:6e:7a:2b:fd:60:93:3b:cf:b1:c7:
                    70:23:7d:cf:fe:c4:b9:fb:54:df:47:9c:46:f0:80:
                    58:af:f9:bb:ed:05:14:d7:83:21:8c:af:10:24:29:
                    d7:fe:07:c2:8e:e2:e5:26:34:2f:b4:8b:5e:89:87:
                    f5:b5:08:04:ef:bf:be:e6:c6:68:17:b5:ae:5a:bb:
                    26:89:47:7b:03:7e:8c:43:8f:90:59:10:fa:3b:a0:
                    74:64:07:1d:3e:9b:e3:f6:11:a2:68:b4:2e:6d:cc:
                    4e:9d:5e:b8:16:89:6f:1d:83:b2:4d:11:49:4c:e8:
                    85:ba:e4:f8:8f:ba:14:80:5d:90:ca:5c:f7:23:43:
                    28:a5:6c:98:ad:82:d0:90:22:b3:0a:47:a6:61:8d:
                    84:14:a8:fa:0f:88:1d:3c:8e:7a:e1:df:f2:00:11:
                    68:af:ca:24:b5:09:52:f3:ee:33:28:b7:a2:25:8b:
                    40:5e:9d:81:3a:2b:28:1f:b4:2b:60:b9:78:43:40:
                    8d:83:60:2e:72:ef:20:55:25:b0:d0:cc:8a:41:42:
                    b6:5e:7e:a7:33:1f:73:df:de:d1:e1:6d:63:82:a5:
                    73:8c:92:a3:69:d5:48:ed:62:59:e6:bc:4a:ec:82:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:9D:19:50:14:8C:36:28:FD:31:2D:79:BF:97:B0:04:A1:12:76:8B
            X509v3 Authority Key Identifier: 
                keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/795DEE70073111EA993EC663C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.252.0-120.29.254.255
                  203.17.72.0/24
                IPv6:
                  2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
                  2001:dcd:dd05::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:a9:d1:d2:30:42:7b:a1:1d:44:b5:52:a7:42:af:00:60:9c:
         f9:36:76:d1:f2:bf:86:1a:8b:63:cf:e9:a9:25:f5:43:a5:a3:
         c2:63:f5:f0:a0:73:33:c0:20:7b:7c:90:1b:86:83:a0:67:86:
         e8:5f:ba:2c:16:b9:41:a1:d1:08:84:45:10:59:20:cf:4d:0a:
         fc:4c:46:4e:0b:d1:9a:6d:66:6f:5c:0e:5f:ef:74:17:6c:c3:
         33:46:69:5f:29:c8:8c:bd:b5:55:1c:7f:ef:e5:6b:e9:ab:02:
         44:46:e6:d1:c9:43:3b:9c:52:c4:a3:af:d0:2a:c3:7b:19:b3:
         19:ae:63:17:c0:03:cb:ef:fc:75:c3:27:e4:96:18:b9:88:88:
         b1:3d:a1:96:1b:d7:7e:8f:d7:bd:e4:32:a1:cb:19:5f:58:8f:
         02:fb:75:dc:3b:03:7d:b9:de:d0:61:19:6b:31:01:db:a6:a6:
         90:00:61:ba:56:2e:a1:36:9e:d4:ab:c2:33:e6:a6:8f:c1:f3:
         0a:29:d6:40:ba:89:1e:05:3a:43:55:bf:1b:1a:de:88:92:3f:
         98:a1:e4:e4:26:c7:f0:e0:80:10:1f:1a:b5:3b:1a:ee:4d:70:
         a9:02:58:24:32:c6:8c:51:21:39:97:c6:cd:84:58:68:51:9a:
         0e:ed:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 13:08:06 2021 by LibreSSL & rpki-client.