Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa
File:                     3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          8jaudphFn+D9WojPzPE1IrKxk7LseaZnQYWG+vIHp6s=
Subject key identifier:   07:F5:6E:35:06:CC:74:67:EE:76:11:6C:3C:07:36:52:5B:EC:8E:C1
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       5F1ED9612C242D526C02BB8E4903E7D1716712B7
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:31 +0000
ROA not before:           Mon 31 Jul 2023 00:02:31 +0000
ROA not after:            Mon 29 Jul 2024 00:07:31 +0000
asID:                     58369
IP address blocks:        116.197.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1e:d9:61:2c:24:2d:52:6c:02:bb:8e:49:03:e7:d1:71:67:12:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:31 2023 GMT
            Not After : Jul 29 00:07:31 2024 GMT
        Subject: CN=07F56E3506CC7467EE76116C3C0736525BEC8EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:e4:de:24:39:98:4a:b5:91:33:c7:99:a1:
                    ae:0e:50:b7:08:15:74:c5:4f:dd:ce:60:14:e2:95:
                    87:7a:8d:d4:86:d8:7b:2c:80:1e:59:78:5a:e4:e2:
                    97:ef:21:e1:d3:13:b2:32:b6:e9:26:14:b1:0f:48:
                    46:48:15:c0:56:ac:0a:a7:1d:6d:4d:af:1e:15:dd:
                    3a:c9:21:d9:bd:23:ad:68:c8:57:82:84:06:ac:f5:
                    17:da:7b:76:ee:f3:41:b7:3a:b9:e2:a3:70:c6:22:
                    b9:c5:58:10:fd:44:4a:c2:dd:7f:a6:a4:3f:c0:ee:
                    2a:2c:37:6c:60:48:3a:3c:fd:65:b3:7f:c3:45:b6:
                    bd:74:a7:0c:35:41:0e:18:76:8b:33:12:5e:cd:dd:
                    2e:c1:b1:fe:4e:9a:99:5f:a7:95:86:ff:48:1d:05:
                    72:22:96:08:83:aa:e9:bb:68:bb:70:4b:31:7b:a8:
                    a4:2a:42:35:e8:9f:ae:53:23:e4:67:9c:fc:16:e0:
                    8e:f7:34:90:c9:2a:14:9e:c2:08:a3:ed:77:46:7c:
                    84:34:c7:fa:79:ef:e5:e8:36:cf:e4:11:cb:dd:59:
                    d8:1c:3f:f8:f5:39:ad:e7:4e:5e:0d:a8:bf:6e:f4:
                    cd:bb:49:f3:41:bb:f0:09:c6:e1:e2:27:5d:10:d9:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:6E:35:06:CC:74:67:EE:76:11:6C:3C:07:36:52:5B:EC:8E:C1
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:76:37:56:dd:7a:63:93:16:9f:d4:a1:6a:9a:f6:be:c4:6a:
         21:3a:1a:19:74:23:6b:d5:ea:f9:a8:8b:54:a7:05:30:ab:7e:
         cc:c5:03:8a:43:68:4b:00:bf:3b:36:50:f3:e9:a2:42:87:b8:
         b4:4c:f1:0e:64:e8:58:45:d1:02:f1:21:82:6d:03:bc:e5:5e:
         a5:9c:07:7e:69:68:21:ab:66:d4:90:27:24:31:62:3f:14:8f:
         01:ff:24:ef:86:e6:c0:c2:af:bd:60:d1:e1:77:0c:6f:29:d5:
         57:0a:24:be:db:85:d9:f8:20:08:bb:b7:7a:3b:f0:b9:81:aa:
         64:96:66:b7:4d:17:e2:26:a4:70:c8:c4:12:f2:1a:b4:78:cd:
         ea:80:45:46:4b:2b:fc:f6:ee:a8:8b:64:1e:15:2b:7e:0e:d4:
         98:5f:7e:59:02:55:fa:64:f9:40:a5:84:b2:45:63:75:75:53:
         70:d3:af:2c:f8:f1:67:61:4c:12:50:99:b6:7f:2b:b8:54:7c:
         42:6a:ba:19:bd:1e:1e:21:b6:f8:52:38:3c:7f:f4:5b:87:34:
         c5:1f:bf:99:b0:31:c8:3a:23:24:f8:68:11:2b:be:cd:e9:2c:
         13:6d:af:b4:29:da:a4:29:6c:05:e7:37:bf:8c:2d:41:a5:0c:
         ba:a7:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:57:34 2024 by rpki-client on console-ams.rpki-client.org