Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa (download)

Subject key identifier:   98:B0:B6:20:47:27:2C:EC:57:34:4D:DE:6B:2C:31:34:CD:26:DE:4B 
Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF
asID:                     AS0
Prefixes:
    1: 123.255.88.0/21 (max: 21)

--
$ test-roa -p rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6509 (0x196d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF
        Validity
            Not Before: Feb 23 06:33:24 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=6034a1b4-ce09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:f0:93:64:4f:e3:c1:f7:27:c5:a0:6f:0b:
                    2b:58:34:66:40:c8:a1:2a:7b:b6:f5:a5:65:de:b2:
                    d2:c8:fa:94:c3:0f:39:1a:8c:93:2c:9a:49:1d:35:
                    c2:f5:eb:26:4d:2e:7a:d7:2b:6f:83:ca:be:8b:6c:
                    69:44:bd:67:10:9a:7e:59:13:f0:74:a4:be:ba:8f:
                    a5:11:69:8a:85:bf:f6:aa:9c:3d:6b:55:25:6f:2c:
                    18:96:d7:d7:3b:2a:d0:34:63:71:83:42:ff:26:a5:
                    cf:ac:74:ec:6d:50:c4:d5:b2:24:21:79:29:2b:05:
                    a8:6c:61:e6:3f:e3:19:39:7d:85:db:14:83:e9:9a:
                    1d:99:c9:02:00:ac:6b:04:da:97:c0:48:3d:fb:3f:
                    0f:7c:f6:79:af:4f:03:be:65:28:eb:ae:16:ee:e9:
                    fa:9a:5b:ca:00:99:8d:9d:66:15:9e:21:98:1a:fd:
                    f2:ad:e1:f3:b1:58:43:97:c4:8d:1a:67:dd:b8:8d:
                    f0:7d:15:15:6c:de:13:16:ad:df:84:b5:cb:36:e4:
                    1a:3a:ba:e3:f9:76:a9:e1:8b:45:6e:75:2d:72:78:
                    aa:2f:ce:5f:33:6f:8e:dd:82:cf:d6:94:03:01:47:
                    b6:af:ee:01:d6:da:b6:31:11:09:0d:27:b8:d6:16:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                98:B0:B6:20:47:27:2C:EC:57:34:4D:DE:6B:2C:31:34:CD:26:DE:4B
            X509v3 Authority Key Identifier: 
                keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                0.0.....0....{.X
    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:94:ea:6b:c4:87:cc:7c:3d:38:95:dc:0b:05:2e:34:4c:
         36:e3:e9:0d:b3:e0:62:3f:a1:3a:f6:68:9a:08:d3:62:96:28:
         10:f4:aa:a0:51:c3:98:e9:c8:bb:d7:dc:86:f0:ec:42:22:89:
         b7:f6:9e:d1:94:a7:6d:dc:46:e1:ac:18:11:ac:eb:d9:10:c0:
         40:b7:50:db:ab:3c:cd:6b:02:08:d0:f6:02:9a:ee:f5:b7:78:
         8f:ed:ac:0e:25:cf:0c:69:c1:47:33:a1:25:67:62:cb:0e:d3:
         fc:e8:e4:41:5d:74:33:f2:6c:42:72:e0:90:5c:f1:40:d8:63:
         2b:77:d7:4f:ac:70:9b:9b:b9:4e:9e:51:e5:e9:f3:63:16:58:
         a4:0e:f7:e4:45:93:84:db:7a:9d:60:0f:18:4c:f4:6a:80:61:
         7f:9d:83:0f:8a:aa:f6:d8:1d:7e:67:a1:6f:18:c5:de:c1:c9:
         0c:4b:18:95:01:f5:7a:02:e7:d8:f3:a9:2c:ae:7d:ad:33:5b:
         df:6e:e5:51:2e:82:b3:bf:68:6c:bc:26:74:95:2c:38:7c:d8:
         9d:56:85:8c:ca:af:61:55:72:cf:86:2e:a6:0c:55:61:f0:61:
         74:98:9a:b4:11:93:ff:ae:1b:89:af:1a:bb:f8:9b:15:e9:25:
         24:a7:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 10:16:45 2021 by LibreSSL & rpki-client.