Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          zgYgWIQjExvpXyjwJw9MHkHReDLPWklQNGkbk1cwzZM=
Subject key identifier:   03:74:CF:D6:D3:04:F5:B9:29:A9:91:39:C8:66:7E:A3:16:71:FB:C2
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       08FA3916495091E3BD451A8C0BB16767D9340B7F
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:30 +0000
ROA not before:           Mon 31 Jul 2023 00:02:30 +0000
ROA not after:            Mon 29 Jul 2024 00:07:30 +0000
asID:                     58369
IP address blocks:        116.197.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fa:39:16:49:50:91:e3:bd:45:1a:8c:0b:b1:67:67:d9:34:0b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:30 2023 GMT
            Not After : Jul 29 00:07:30 2024 GMT
        Subject: CN=0374CFD6D304F5B929A99139C8667EA31671FBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:3a:a6:ad:56:d9:fe:2a:f1:09:dd:14:95:
                    79:f3:4d:d8:da:a3:91:1b:9e:a2:d1:5d:e4:cf:cb:
                    1a:c4:55:e5:30:e0:88:3e:65:54:88:43:e5:d9:61:
                    9b:d8:59:84:75:5a:b5:54:0a:26:44:1f:e3:d9:39:
                    28:54:0c:e4:ba:02:84:24:1e:92:96:6d:30:49:39:
                    5f:2a:a7:a2:6c:bb:2f:93:09:52:e7:20:d8:3e:f3:
                    f2:af:da:b1:1a:0e:24:13:3a:51:4e:2f:94:cf:50:
                    13:48:c9:bc:c7:0b:d0:e6:35:39:72:d5:6d:ee:68:
                    4f:d8:20:f7:e3:14:9c:a9:8a:33:f7:cf:5d:54:b1:
                    b0:db:d6:aa:77:48:f6:76:7b:e6:b1:f0:82:c3:76:
                    6c:e4:fd:d5:4b:1e:09:a7:90:4f:b4:70:95:d1:27:
                    b6:79:e5:a7:2c:5f:bf:7c:f1:5f:b2:4a:20:b1:4b:
                    b0:5a:f1:aa:b7:de:f0:ce:01:b1:31:17:7a:ff:f5:
                    22:15:b0:b8:a5:cd:8e:81:da:fb:22:1f:28:4d:47:
                    d0:08:bc:22:40:76:36:f7:49:2d:b0:87:bb:05:1c:
                    bc:1f:da:b5:47:50:26:df:e1:24:06:a8:a7:4d:f3:
                    42:17:68:6f:b3:14:d4:35:99:33:a0:5e:8a:85:63:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:74:CF:D6:D3:04:F5:B9:29:A9:91:39:C8:66:7E:A3:16:71:FB:C2
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:cf:2c:25:4d:fd:44:f9:e0:77:22:7b:75:9d:be:15:98:
         af:1f:02:28:95:3d:2e:95:87:db:7b:dc:41:5d:d4:aa:31:0b:
         c4:a1:df:fe:18:3c:21:ac:68:7d:e4:6d:eb:7d:07:08:9e:b0:
         92:ed:03:c5:dc:f6:c1:65:1f:dd:06:a6:fa:8f:2e:db:b7:90:
         10:dd:ea:68:bc:3e:26:8b:80:3f:9c:2a:5b:c9:26:da:2f:30:
         8f:1a:b2:19:07:48:02:a1:e0:f2:96:be:19:ff:e1:f7:49:a3:
         6f:29:23:6e:8d:44:61:3e:a1:cb:d7:a6:14:f3:1b:e8:50:b7:
         23:87:7c:2b:71:70:14:17:d4:a4:d2:60:d9:ec:fd:4c:44:59:
         8f:cc:d0:3c:4f:52:bd:68:64:51:dd:c8:65:f4:ef:da:7a:9c:
         bd:f8:4b:85:de:76:82:f6:16:54:fd:2a:c0:1c:9b:ee:46:45:
         5f:bb:58:ad:a8:9d:9d:6f:83:57:6b:87:9a:ed:68:34:e2:1d:
         76:b1:0c:04:1e:80:4b:6e:d6:63:d2:cb:97:0b:d5:6f:ee:21:
         f2:ca:fe:37:4d:e4:ab:6f:07:29:81:3a:6c:76:ce:3e:57:38:
         70:75:6d:90:2b:5c:41:dd:78:f8:61:60:8b:6a:1d:6c:41:22:
         ea:d7:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:01:37 2024 by rpki-client on console-ams.rpki-client.org