Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2543901C11C511EFA56B1D53C4F9AE02.roa
File:                     2543901C11C511EFA56B1D53C4F9AE02.roa (raw, json)
Hash identifier:          62kig1WpF9uiNPXJKjx/WO9/X1keVvKltOuBUGIO+a4=
Subject key identifier:   0C:59:5F:36:1D:EA:AA:31:B9:58:A5:48:AD:5A:06:93:FD:C7:9B:36
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1257
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2543901C11C511EFA56B1D53C4F9AE02.roa
Signing time:             Fri 24 May 2024 22:32:31 +0000
ROA not before:           Fri 24 May 2024 22:32:31 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        180.178.147.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4695 (0x1257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 22:32:31 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6651157f-9f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:47:a7:e1:d4:f1:1e:f2:cb:f7:30:11:ba:
                    a6:0c:1b:56:d9:94:a1:52:40:06:21:f0:6b:48:73:
                    2b:ce:d9:27:57:99:f2:99:77:43:3a:39:be:ae:4a:
                    9a:61:30:27:df:52:08:08:4c:06:cf:c6:96:04:a1:
                    86:19:da:a1:d5:38:a6:51:43:d0:fa:1a:c3:37:c6:
                    6c:e6:6a:cf:73:78:15:40:1f:17:c4:cc:b3:d1:b7:
                    6f:20:d4:71:7e:41:8a:5f:82:a6:90:58:8e:2d:18:
                    a2:0d:d6:d4:e7:27:bb:bb:8c:3b:ef:54:14:0c:ac:
                    e1:09:b2:3e:18:e1:ae:6f:8f:83:58:51:e3:6b:8f:
                    d8:e7:47:65:ca:4f:8f:96:36:e3:20:8d:80:75:1f:
                    8d:63:39:36:ab:68:3d:a6:c8:a4:53:53:b9:52:db:
                    83:8c:e2:02:b6:2b:dd:d9:ca:aa:e0:41:49:19:c6:
                    b3:0e:5b:3c:b4:7b:61:90:b4:05:16:0f:c1:45:2f:
                    6c:09:38:27:aa:fe:b0:95:a6:c8:c8:4a:be:d0:3e:
                    d5:af:f9:96:0b:d2:c7:58:90:ec:83:d1:e4:34:60:
                    3e:63:99:c3:42:f1:db:52:e8:af:50:4f:18:c5:16:
                    43:80:ed:e1:46:35:f0:ea:a7:9b:3b:61:40:10:25:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:5F:36:1D:EA:AA:31:B9:58:A5:48:AD:5A:06:93:FD:C7:9B:36
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2543901C11C511EFA56B1D53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.147.0/24
                  180.178.162.0/24
                  180.178.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:29:e4:d2:58:f4:e4:93:3c:ee:aa:72:09:86:13:dd:fa:2f:
         b5:3a:c8:00:23:0b:94:06:92:17:ba:0f:a1:a4:5d:cf:32:dd:
         55:c7:28:56:d9:c6:35:a5:df:5d:6b:e1:f9:92:6d:6a:08:7a:
         54:48:9e:24:9d:be:0d:ad:c2:88:ca:12:cc:9a:f5:e8:fa:b2:
         20:ce:bc:bd:ee:3b:62:25:c9:f8:0c:e6:15:ba:3e:0c:55:67:
         a3:61:4b:a6:5f:67:4f:29:45:a2:47:56:c2:d2:87:4c:0f:bd:
         77:e2:ba:ec:a5:04:f6:90:40:5c:85:78:3a:31:b0:b8:b2:a2:
         58:a8:0b:78:61:cd:02:f1:a5:70:49:4d:6c:8f:3a:ef:e0:a7:
         75:19:04:fb:07:60:4c:21:2c:a7:01:e7:c5:cf:3b:e5:87:7b:
         d3:77:b3:7a:18:1a:f7:23:d9:0a:66:cd:f2:1e:b6:f6:4a:b2:
         eb:8f:ce:ed:cc:1c:07:98:de:7f:45:ae:ea:a0:73:ba:08:5a:
         6f:48:16:39:fe:1f:be:a2:33:28:e6:e9:ce:29:ce:e4:1b:18:
         c8:64:9f:2b:ad:a2:8d:e9:e5:71:ca:ee:4b:b6:fb:66:39:be:
         14:62:9b:ed:65:4f:c2:13:b9:cc:4f:4a:ee:65:0b:84:79:a6:
         e0:71:15:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:31 2024 by rpki-client on console-ams.rpki-client.org