Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133332e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3133332e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          DU3uKJbMvRflmrtxis524YPzVhqOTtHupeexFMnGCac=
Subject key identifier:   B0:17:E3:BC:BE:2C:B2:8C:B2:16:FB:05:6A:E5:91:0C:A2:55:56:2D
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       073C4081C165FF81BF25C55B4B2A0F1E937A16B0
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133332e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:34 +0000
ROA not before:           Mon 31 Jul 2023 00:02:34 +0000
ROA not after:            Mon 29 Jul 2024 00:07:34 +0000
asID:                     58369
IP address blocks:        116.197.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 17:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3c:40:81:c1:65:ff:81:bf:25:c5:5b:4b:2a:0f:1e:93:7a:16:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:34 2023 GMT
            Not After : Jul 29 00:07:34 2024 GMT
        Subject: CN=B017E3BCBE2CB28CB216FB056AE5910CA255562D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:73:2e:d4:30:2f:b4:e4:c3:49:20:90:73:ea:
                    66:9c:e8:43:b4:9e:f9:92:f1:ab:dd:bc:7a:67:01:
                    f6:d8:4d:78:13:04:b6:10:43:83:d0:49:c1:49:a4:
                    21:b7:eb:17:22:da:88:30:f4:97:c1:91:07:66:0b:
                    f8:ad:79:87:34:95:cb:25:9a:5b:4c:d4:88:b0:19:
                    c5:24:b2:d3:f6:80:af:32:f2:31:27:75:cc:d0:7d:
                    84:c1:ea:0a:b7:42:dd:e4:d3:f2:1b:ed:93:72:e2:
                    88:24:af:ca:23:4b:a3:18:1b:34:28:9d:b6:b6:b2:
                    ab:05:67:37:fc:f2:37:6b:4c:1a:b1:b5:38:5f:75:
                    04:63:5a:85:01:21:98:29:5b:88:35:34:ee:46:16:
                    39:38:61:a4:5b:54:8d:a9:9a:b8:62:2d:d3:0c:6a:
                    db:28:bf:88:e5:dc:62:c5:7c:2f:8b:d0:03:44:e5:
                    ca:04:fe:65:9c:1f:47:97:02:6d:91:82:84:19:0e:
                    9b:ef:0e:1c:72:b7:27:1e:bc:9c:00:d9:e4:01:c7:
                    8b:7b:91:e3:ab:d8:6c:78:2f:3c:5f:85:20:c1:50:
                    6e:ad:75:b0:1b:0e:f6:31:56:2c:0e:2b:e0:bf:1e:
                    94:09:bd:30:02:51:49:32:b3:cd:e5:4d:19:1a:2e:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:E3:BC:BE:2C:B2:8C:B2:16:FB:05:6A:E5:91:0C:A2:55:56:2D
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133332e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:33:55:c4:97:dd:44:67:71:82:09:20:f2:81:5c:ec:cf:18:
         16:93:fc:d1:99:55:90:cb:b5:7e:47:27:a1:f8:d8:f2:83:4e:
         8b:05:12:0d:10:55:22:da:e9:3c:08:a5:46:ca:9c:72:c2:9a:
         84:05:04:99:16:2a:8d:82:e3:99:e5:7f:61:db:81:dd:b6:32:
         74:2b:8b:9f:08:c2:e9:b6:14:77:d6:dd:e2:d3:75:45:bc:9d:
         bf:3c:3f:2b:99:8f:d2:1b:8e:65:4c:92:2a:ef:8f:29:07:35:
         93:5b:3f:c2:0d:94:b6:c1:0d:ef:99:b7:65:66:c0:6d:7d:97:
         81:77:a7:43:4c:7c:94:e0:10:85:7a:7f:73:f1:d6:d4:38:fb:
         f2:97:f8:56:bd:0c:04:36:78:ac:04:6f:95:b3:f5:8e:49:a6:
         98:49:74:a6:54:87:b7:5f:17:e4:27:09:90:5f:b4:cc:f4:68:
         d0:fd:b9:95:ce:53:57:70:46:07:20:12:ed:16:88:64:68:a4:
         fb:ae:a8:2d:9a:e3:57:9a:a6:1e:b7:89:7c:d6:41:eb:f5:4f:
         5f:db:4b:dc:29:d8:46:35:cb:3a:82:67:fc:af:1f:83:e1:dd:
         62:16:87:59:3f:9b:a9:98:ea:5d:01:65:27:f4:29:13:83:5d:
         52:c4:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 13:13:45 2024 by rpki-client on console-ams.rpki-client.org