Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AB4AF641E9A11F0B6C5443FC4F9AE02.roa
File:                     5AB4AF641E9A11F0B6C5443FC4F9AE02.roa (raw, json)
Hash identifier:          cG81eAbXflgxk51Gq3Fy9nyc8Bp5/wo5OBnNc42B5M0=
Subject key identifier:   AD:74:04:39:EA:75:3B:9B:16:BF:F6:C2:63:7C:F3:8E:CB:88:34:0E
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2609
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AB4AF641E9A11F0B6C5443FC4F9AE02.roa
Signing time:             Mon 21 Apr 2025 10:21:14 +0000
ROA not before:           Mon 21 Apr 2025 10:21:14 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     214351
IP address blocks:        180.178.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9737 (0x2609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 21 10:21:14 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=68061c1a-fdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:83:d5:78:4a:2e:9a:c3:45:6f:d9:5b:c5:
                    26:6b:47:46:4c:8d:29:3d:65:85:66:c7:19:7b:f4:
                    a7:f3:dc:16:99:d7:eb:8d:b8:3e:8a:69:b2:0f:f7:
                    6c:83:92:ce:19:63:06:a3:7f:fc:2e:71:ef:28:ca:
                    e9:c6:bb:ce:57:93:52:36:45:63:b6:9b:d0:61:35:
                    16:e1:07:6b:90:8c:50:22:ef:f7:4a:f7:34:bf:76:
                    b7:37:1c:5c:07:d9:e3:41:fc:52:1e:74:ac:55:f4:
                    cf:d6:4a:16:8a:82:75:99:fd:5c:61:da:6c:c1:3b:
                    5e:b0:8f:01:b7:1f:0c:ba:f1:cc:f6:ce:cc:77:25:
                    86:41:fb:48:ba:c1:a5:f4:33:f5:a8:f1:6e:e8:37:
                    fb:46:31:5d:69:8e:e5:df:1a:50:54:48:c3:fa:ec:
                    c3:1d:5e:69:b1:b7:4b:ca:5e:9a:7b:6a:5b:ab:2e:
                    00:3d:c8:e8:6e:0e:2d:ea:4b:67:9a:de:26:e1:3c:
                    39:8f:9c:7b:91:d5:26:5a:43:44:17:d0:7b:1c:17:
                    64:46:4c:70:3d:50:df:c0:38:ef:2b:73:5d:6f:a6:
                    45:89:79:ed:cb:35:db:42:87:49:bc:2e:1e:33:63:
                    8d:6f:08:75:11:54:21:e7:af:6e:f1:60:19:ce:0f:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:04:39:EA:75:3B:9B:16:BF:F6:C2:63:7C:F3:8E:CB:88:34:0E
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AB4AF641E9A11F0B6C5443FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:9c:e2:fb:71:ab:f4:ee:8a:ae:3c:72:26:c1:10:97:a0:36:
         8b:ff:1f:e9:73:9d:9e:33:a5:2b:b8:f8:89:1a:34:26:11:1b:
         d0:ef:1f:dc:c3:6d:dc:a3:7b:6a:18:46:f6:ed:db:8d:4f:05:
         44:89:d8:66:8d:ad:32:0a:f8:aa:3c:9e:a8:75:41:46:55:32:
         e5:43:ae:3a:74:ec:46:ff:6c:11:8a:52:1c:cf:ac:15:45:38:
         7a:20:55:8d:ff:e4:af:90:ff:0a:46:ce:76:39:28:8b:1f:56:
         0e:e8:82:ba:3a:a5:67:ce:56:e8:06:b5:71:eb:5e:43:f1:f4:
         ba:a8:6c:b7:81:82:8e:49:7e:65:f0:14:6b:18:b4:28:a1:81:
         a7:61:f4:2c:2e:f4:36:a0:27:30:aa:58:f0:ac:a2:9b:5d:de:
         fb:b1:9b:f0:e4:73:61:ae:fa:10:fe:6d:9f:0c:56:8c:7f:57:
         4f:25:5a:30:33:59:9f:fb:39:c5:42:8c:7e:4b:22:74:db:b9:
         c7:c7:cc:b0:00:a9:3d:35:19:1c:88:72:a1:d0:f4:6d:25:13:
         df:ae:26:68:79:16:ec:e2:f9:64:f5:cd:8f:6f:9f:76:0e:8e:
         5e:e0:22:59:2c:32:b0:6c:f2:2e:80:8c:25:25:14:86:a4:1c:
         30:6d:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:24:37 2025 by rpki-client