Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AB4AF641E9A11F0B6C5443FC4F9AE02.roa
File:                     5AB4AF641E9A11F0B6C5443FC4F9AE02.roa (raw, json)
Hash identifier:          sydYTG9tdd9QOVbgJxpTpoSi2faSDvoqmiyZwTr3HqI=
Subject key identifier:   3F:CE:18:91:B5:48:07:00:7E:39:0C:14:69:08:2A:D3:F7:6D:73:86
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       275F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AB4AF641E9A11F0B6C5443FC4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:07:18 +0000
ROA not before:           Mon 02 Jun 2025 21:07:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     214351
IP address blocks:        180.178.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 20:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10079 (0x275f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  2 21:07:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e1286-5408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:bc:b9:7c:ad:56:25:89:e9:fc:34:28:93:
                    f0:a6:42:8e:8d:32:16:34:3d:31:ea:ad:33:d9:ce:
                    7a:0b:4b:3e:5b:09:d2:ca:01:42:ad:1d:9b:e8:14:
                    67:79:32:15:a5:b9:a0:2a:cf:11:c4:b3:53:86:58:
                    0b:59:95:41:8e:7b:76:69:80:fe:e9:f1:96:10:43:
                    3a:c2:8b:5d:d4:41:dd:29:37:db:0a:ec:62:d9:5b:
                    79:2b:c8:a0:2b:03:d3:ae:96:56:ab:e0:51:77:0a:
                    86:16:28:a9:0a:dc:cf:ae:94:53:a9:0f:3b:9b:dd:
                    46:9e:35:17:de:9c:c9:31:4c:a9:e8:e0:06:d9:6a:
                    c8:df:cb:fe:8b:43:07:41:2d:3e:79:38:78:11:aa:
                    12:77:d1:15:b6:bb:d0:30:1f:4c:18:d2:b2:ea:8c:
                    af:87:d1:13:11:d6:9d:15:fd:db:38:39:b1:d8:09:
                    65:42:25:2d:64:0d:a3:1b:1f:10:ce:f8:a0:b5:c1:
                    7d:c2:70:d2:c7:cc:f2:09:6f:fb:8f:b2:d7:33:9d:
                    9e:fe:76:93:42:1b:68:33:14:ec:1e:c8:ae:9e:e5:
                    7f:59:96:d7:9d:f5:52:71:97:76:8e:b3:d0:e2:01:
                    7e:eb:7d:4e:9e:31:61:f9:78:0b:c4:e5:0f:ec:ac:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CE:18:91:B5:48:07:00:7E:39:0C:14:69:08:2A:D3:F7:6D:73:86
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AB4AF641E9A11F0B6C5443FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:1e:7c:9a:78:8a:d4:24:7b:63:9e:08:84:78:28:51:04:
         6a:3c:cc:dc:1e:e1:4a:69:e6:ab:33:90:31:65:6f:fe:3c:d3:
         78:38:71:45:94:6e:11:af:d0:d4:4c:25:03:5c:ea:49:8c:c8:
         67:8d:64:ff:95:92:05:7c:f8:de:f4:f0:d8:93:66:80:e7:5b:
         ee:e4:49:73:21:f2:ae:ea:c9:99:2a:64:f9:30:01:0d:e9:fd:
         fb:b7:cf:33:aa:32:34:84:2d:29:f6:87:62:d9:50:61:4c:7e:
         e6:a0:7f:3c:d2:30:15:b6:3d:7b:01:d6:7d:13:b6:e2:82:dd:
         f5:73:9f:55:0f:0b:82:15:bb:8d:5f:19:e2:2a:3b:b0:a2:1c:
         0b:aa:32:a5:7a:ca:50:27:8e:b0:14:8e:cc:2b:29:aa:f2:de:
         87:71:b3:6b:c7:ad:96:57:cc:33:27:ce:5a:41:2a:54:57:89:
         35:9d:23:9a:30:2c:95:ef:47:eb:b4:b0:29:77:76:c7:5f:77:
         eb:56:ae:62:fd:98:6b:e4:ff:80:99:a3:09:0c:32:c3:b3:f5:
         8d:51:51:a3:f4:a3:a4:df:13:0a:94:4b:fd:46:fd:6a:02:75:
         2c:65:8c:4a:87:0f:dd:a6:5d:9e:ab:3d:2e:79:9d:fd:ee:05:
         8c:b9:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:19:29 2025 by rpki-client