Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          t9iD80hybSeyE53SoNUe6im/3lUWpM/Am+waKMdjeVo=
Subject key identifier:   13:96:9D:27:96:F6:02:D2:2B:E7:19:48:9B:69:E0:5D:99:52:42:51
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       2D81E3F56D774B36CE3E08B59B8664EED880AAC1
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:32 +0000
ROA not before:           Mon 31 Jul 2023 00:02:32 +0000
ROA not after:            Mon 29 Jul 2024 00:07:32 +0000
asID:                     58369
IP address blocks:        116.197.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 17:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:81:e3:f5:6d:77:4b:36:ce:3e:08:b5:9b:86:64:ee:d8:80:aa:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:32 2023 GMT
            Not After : Jul 29 00:07:32 2024 GMT
        Subject: CN=13969D2796F602D22BE719489B69E05D99524251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:51:f5:46:76:63:c6:3f:0c:85:4c:f5:df:
                    ab:b1:f9:7f:b5:20:3f:b6:4d:11:2d:bf:e1:18:e3:
                    e4:18:2f:49:5a:d8:72:1a:5a:a2:79:f4:5c:50:10:
                    10:f8:7f:75:09:84:7f:36:a9:c9:da:c4:2a:c3:36:
                    cf:69:a9:b9:58:62:36:22:ff:f1:7a:05:0a:e7:ad:
                    f5:68:fe:f8:bd:63:bf:9d:be:24:bf:63:0d:6e:40:
                    54:e4:bd:e4:a6:4c:31:f5:a8:5f:e5:60:fb:d2:70:
                    54:cc:fe:32:73:9f:94:35:4e:f6:07:ab:54:97:40:
                    3a:e7:c2:5e:11:2a:0b:a3:ef:e1:f2:b7:5b:0c:5f:
                    19:d0:8e:c4:5f:99:f3:ca:64:31:63:74:08:f7:cc:
                    98:28:58:30:25:fc:ce:f1:f0:89:3f:dd:54:ae:ca:
                    66:15:4b:48:d1:dc:9a:10:bd:13:81:21:77:ad:e6:
                    1d:9b:e5:34:c7:d0:e5:e3:0b:7a:52:b1:d3:f0:c7:
                    53:ce:11:7d:1e:b5:e6:26:26:3f:fd:b0:a3:a5:c1:
                    82:8e:02:09:c2:81:e4:2c:4b:bb:12:5f:ae:e7:ad:
                    e7:d7:19:b6:d2:05:ad:6c:c9:4a:a4:ae:54:02:0c:
                    15:b8:ae:29:29:9f:5d:2f:ac:30:c3:a0:bb:f8:24:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:96:9D:27:96:F6:02:D2:2B:E7:19:48:9B:69:E0:5D:99:52:42:51
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:48:76:c5:eb:68:d9:16:21:82:c4:38:5c:f1:e3:de:bf:02:
         9a:f4:66:ab:6c:25:26:9a:7d:f8:ce:f7:0f:84:53:95:6e:5c:
         19:43:6e:61:96:7a:6c:a2:43:2c:c3:92:1f:96:a0:39:7a:7b:
         ba:67:c8:87:55:0e:9d:4f:a5:c1:42:40:b4:c1:2e:76:42:1c:
         af:74:83:df:a6:33:d3:9b:35:3e:00:c5:9b:3a:42:87:ff:99:
         74:10:c8:25:0f:9b:7e:dc:3e:0b:77:a7:53:87:cb:2b:6e:f2:
         59:70:36:0f:55:d1:ca:5f:e9:bc:c3:75:76:c2:71:4a:b1:88:
         f6:05:31:7e:43:38:9e:fd:04:5e:d0:c0:53:36:63:d1:73:16:
         93:92:94:9a:88:fb:d1:26:e4:b8:da:92:4b:ef:e7:67:74:3d:
         7d:fb:65:89:8d:0c:d2:16:b7:e8:d5:4c:0b:08:fe:32:ef:89:
         ae:81:6b:67:f4:4f:ef:5b:fe:b6:c6:f1:28:79:14:bb:9c:e1:
         51:e0:e7:d8:11:8a:40:14:da:55:f9:7c:d0:5a:a4:76:54:e7:
         b9:dd:b9:36:41:8f:62:e0:d6:5d:d0:68:82:d0:e1:fd:18:49:
         90:41:27:00:66:bd:ac:02:b0:1e:f4:ac:5a:f6:68:c1:60:2a:
         dd:bf:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 11:29:21 2024 by rpki-client on console-fra.rpki-client.org