Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1ECC1CFEA02211EFA0EA5451C4F9AE02.roa
File:                     1ECC1CFEA02211EFA0EA5451C4F9AE02.roa (raw, json)
Hash identifier:          HlB4RL+DtSFEmas1SLeoMxpM+QiLyT3EqBxXbi9Cetc=
Subject key identifier:   A5:CE:31:53:6E:2E:9E:84:68:18:C9:A5:C8:E6:20:6F:C5:75:13:70
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1C26
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1ECC1CFEA02211EFA0EA5451C4F9AE02.roa
Signing time:             Mon 11 Nov 2024 11:43:08 +0000
ROA not before:           Mon 11 Nov 2024 11:43:08 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     51765
IP address blocks:        180.178.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 06:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7206 (0x1c26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 11 11:43:08 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6731edcc-082e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:42:ad:36:d0:8f:2a:f9:d4:47:4a:60:8c:
                    30:71:5a:50:f6:79:a8:4f:5c:6d:36:45:00:ed:69:
                    4a:ce:70:48:15:79:be:c1:a2:30:f3:03:75:4e:30:
                    bf:cb:9f:fc:82:87:f7:c3:75:e1:38:c7:99:17:f8:
                    e0:fa:a4:d8:52:81:a1:ce:49:9e:c7:95:d6:2c:cc:
                    c7:8a:ca:4f:54:67:7b:fa:42:05:66:98:fc:5a:25:
                    d9:2e:54:1e:66:de:5c:98:09:d2:12:db:4c:44:c1:
                    df:05:61:84:26:42:af:de:4d:dd:f6:07:ce:48:63:
                    2e:9d:67:bc:31:18:ac:ce:2e:f7:f5:9d:fd:29:31:
                    fa:5a:53:dd:3b:48:52:56:6d:7c:22:91:90:79:eb:
                    2a:59:79:95:3b:c5:c6:d8:35:7b:bc:44:33:90:d1:
                    aa:0f:96:9b:41:01:48:00:94:ba:00:40:38:0d:d9:
                    55:61:fe:73:75:0b:ed:2e:72:1b:65:f3:5f:ec:d2:
                    5d:70:fa:ca:56:4f:f7:9a:06:c0:e1:09:c0:91:39:
                    d6:02:8b:3f:1e:89:f9:07:72:b3:35:50:6b:d1:03:
                    5b:1b:2b:41:76:3e:5a:73:56:53:91:a5:de:c3:da:
                    f6:21:36:84:ab:72:70:d1:14:bc:cc:e8:83:83:b1:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CE:31:53:6E:2E:9E:84:68:18:C9:A5:C8:E6:20:6F:C5:75:13:70
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1ECC1CFEA02211EFA0EA5451C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:8b:b2:e0:3b:f9:b9:8c:95:2b:91:5e:4c:26:30:79:d0:
         2e:70:95:1e:6c:6f:70:3c:fe:e3:27:f9:11:fc:b9:53:2c:39:
         a1:ad:ed:4d:15:32:df:d3:28:ed:63:d7:c4:1e:ba:c1:ea:87:
         28:46:27:41:58:fd:b4:e8:77:bb:56:c9:9c:70:73:b0:4f:75:
         62:40:10:f3:12:46:cd:93:b4:17:56:83:75:69:88:73:bc:65:
         91:03:69:8e:da:98:08:dd:80:24:4e:5d:0e:8d:1f:7c:f8:64:
         a9:9d:b7:44:72:af:83:3a:26:71:46:66:e8:00:5e:7d:76:a0:
         01:ed:62:81:b6:77:c8:9e:14:51:20:11:22:1d:ed:7e:67:b3:
         e0:79:ae:7a:7f:bb:07:15:92:af:f4:0b:6f:ee:24:b9:5b:cd:
         ef:f7:22:76:4c:4d:54:9e:0a:f4:40:4e:b9:d2:db:d5:f8:c5:
         b8:fd:25:93:da:01:04:a4:cb:df:6a:26:51:a6:ab:a5:0d:75:
         a8:85:44:de:1a:07:a1:40:1a:c3:93:e6:be:de:a6:b4:ef:8c:
         4d:bc:d8:ec:3a:dc:32:93:5f:ea:f4:c1:71:d8:38:e7:8a:ae:
         43:5a:7d:5d:89:3d:74:fe:13:73:f0:50:0f:85:90:06:79:24:
         c5:f9:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:04:28 2024 by rpki-client on console-fra.rpki-client.org