Route Origin Authorization
Location:                 rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa (download)

Subject key identifier:   E1:E1:0F:E6:4E:83:40:FA:F9:AD:E0:70:CE:E0:BB:8E:D6:BB:DD:89 
Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81
asID:                     AS396982
Prefixes:
    1: 103.20.245.0/24 (max: 24)

--
$ test-roa -p rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
        Validity
            Not Before: Jul  6 08:47:41 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=60e418ac-73d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:4d:f9:d5:41:bf:ff:92:82:13:ac:cd:74:
                    3a:fa:0e:40:94:48:7b:46:c1:3c:a6:78:dd:89:42:
                    6a:5c:d6:dd:2e:ec:dd:1e:1c:2d:aa:c8:37:83:f5:
                    bc:3c:93:2b:46:1d:e5:8d:90:09:a0:bf:dc:1e:9a:
                    23:79:79:1e:c5:f6:f1:f9:16:f2:31:10:d0:e0:b9:
                    b7:74:27:c9:12:48:83:47:b2:34:99:7a:f4:d2:aa:
                    1b:cf:dc:7e:05:99:4a:e0:ff:d4:db:de:29:0b:01:
                    94:d6:18:0b:ba:cc:7e:f7:b5:54:8f:9e:bb:0c:e5:
                    1f:50:5d:b4:f0:d6:ac:46:49:dd:b9:1e:93:6e:ff:
                    e5:52:1e:65:a3:32:90:93:2f:4e:b2:de:0f:6f:21:
                    2b:e7:ce:de:9a:13:79:de:f8:c4:25:11:f4:ec:2f:
                    15:09:1f:8b:e3:8b:cb:40:38:b7:ba:d0:5a:16:44:
                    4c:31:33:89:1c:a4:95:bb:e1:16:f1:ce:d3:fd:10:
                    11:65:c0:57:06:a1:8d:72:23:ac:15:a6:eb:48:9f:
                    56:5d:99:58:36:38:ce:3d:40:8b:ae:22:ec:e2:4d:
                    b0:8d:11:3d:d9:06:5f:51:68:73:00:93:fc:9a:2d:
                    a9:8f:d2:5d:84:a8:d2:4c:ec:ed:ff:87:47:c8:46:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E1:E1:0F:E6:4E:83:40:FA:F9:AD:E0:70:CE:E0:BB:8E:D6:BB:DD:89
            X509v3 Authority Key Identifier: 
                keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                0.0.....0....g..
    Signature Algorithm: sha256WithRSAEncryption
         89:07:d1:69:10:a6:da:ff:39:dc:d3:46:6c:03:9c:f5:2f:1c:
         3d:de:4a:87:2f:1a:f7:f8:48:37:c7:16:34:64:69:e9:32:50:
         5d:92:7b:e8:72:e9:c0:af:09:1d:f4:0a:7c:48:c2:95:04:0a:
         26:d1:48:00:59:cf:76:82:92:83:2c:db:9d:49:68:38:8d:38:
         83:ec:7f:98:3c:e0:8d:24:c9:46:45:85:62:6d:1b:5b:24:32:
         1b:47:c0:c4:4b:d2:26:0c:97:20:f8:df:0d:fc:92:e2:8f:d8:
         d3:a6:a4:47:e4:24:81:cf:10:75:3c:d7:3e:9b:a1:50:88:f0:
         7f:33:df:cc:16:e0:06:30:7e:92:26:c5:fa:68:9a:53:a1:53:
         fb:ae:ef:d7:fe:ae:68:32:7d:4d:7d:57:04:57:92:ff:c3:ff:
         50:ef:db:86:13:f8:77:c1:e4:01:32:b1:30:61:ed:c8:7a:87:
         da:f7:f9:f1:a6:51:dc:a7:8f:ef:ed:f8:09:0e:7a:f7:9b:ab:
         a1:52:2a:4a:ee:1d:37:0e:90:d8:30:88:6e:1b:6e:67:d6:d4:
         b9:d3:71:c2:0e:79:43:1f:56:49:c7:5e:1d:43:5d:a5:82:3c:
         36:bd:d1:ee:8c:78:35:80:cf:ad:bf:f5:53:dc:8b:6b:56:3d:
         0a:e0:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jul 28 05:37:04 2021 by LibreSSL & rpki-client.