Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa
File:                     3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa (raw, json)
Hash identifier:          VVGF2t5EsBSlgMF476rTNcfQjJvym7o1JetmeOmmEfY=
Subject key identifier:   7B:01:CE:40:39:5E:8E:15:FE:EF:17:C4:C3:C4:22:81:C3:66:A3:0F
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       1D842D14D4A3E5FF363425E3311EE387BE4C4D99
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:34 +0000
ROA not before:           Mon 01 Jul 2024 00:59:34 +0000
ROA not after:            Mon 30 Jun 2025 01:04:34 +0000
asID:                     58369
IP address blocks:        116.197.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Mar 2025 03:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:84:2d:14:d4:a3:e5:ff:36:34:25:e3:31:1e:e3:87:be:4c:4d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:34 2024 GMT
            Not After : Jun 30 01:04:34 2025 GMT
        Subject: CN=7B01CE40395E8E15FEEF17C4C3C42281C366A30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:60:98:d0:ff:c5:a8:77:dd:35:0f:25:ba:39:
                    9d:c9:48:5f:f5:d7:4e:2b:42:7f:e7:af:5a:13:61:
                    c0:48:a4:a0:25:1d:eb:2a:9e:8e:f3:ea:10:76:00:
                    ac:da:b4:92:6e:02:c1:05:25:f9:f8:f6:ca:56:ac:
                    9c:dc:13:c2:43:f3:d7:d5:94:3f:95:6d:89:1b:8c:
                    55:c2:54:86:98:1f:82:dc:32:61:46:46:e9:2d:6c:
                    dd:cf:af:05:6e:e4:5b:f8:f2:64:7c:bf:a8:c0:ce:
                    fb:13:0b:ab:c8:e4:36:84:98:82:3d:29:f0:fe:cb:
                    a5:a1:52:4f:6a:8f:82:1e:7f:78:71:7c:68:fb:cb:
                    a4:0a:6a:aa:dd:db:41:a4:6f:07:99:24:46:4e:3f:
                    2f:7e:44:60:23:fa:c7:17:dc:b1:e8:31:28:49:58:
                    e0:a7:f6:80:b8:69:16:a9:67:39:12:d6:a8:73:42:
                    b2:50:1e:6a:dd:be:7d:d9:d4:ba:99:d1:87:9b:4d:
                    ec:93:6b:2a:be:b9:4c:5a:69:eb:0f:2f:9c:e0:79:
                    95:1f:30:ae:37:87:8c:9a:43:3a:14:08:02:77:4b:
                    46:73:0e:6a:40:0f:ca:12:80:b5:30:b8:66:19:59:
                    81:be:30:59:6f:9a:44:93:bc:a2:40:a8:ed:27:fd:
                    7a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:01:CE:40:39:5E:8E:15:FE:EF:17:C4:C3:C4:22:81:C3:66:A3:0F
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:08:68:83:ce:af:6b:fb:5c:bd:b8:44:dc:53:ee:4f:e2:
         1d:04:6e:1e:12:b5:dc:3d:1c:02:47:ef:74:15:6c:56:38:d8:
         b7:fb:0a:fc:59:72:f4:11:b8:ff:d7:d7:74:0f:b4:44:13:bd:
         c9:a9:42:72:e4:26:c2:a1:66:9b:14:0c:19:7f:ab:4d:2f:9c:
         46:08:ba:c7:00:8c:fe:3c:5d:db:9e:22:56:60:dd:1b:f5:5c:
         d5:14:40:aa:d1:b5:95:1f:f6:3f:d3:10:4e:0f:2a:15:59:15:
         16:15:33:71:90:15:84:7f:17:a0:d6:73:bc:fe:49:06:03:2d:
         3a:42:f0:c9:91:5c:fe:ac:a2:7c:ec:dd:ab:c7:15:d3:c4:77:
         82:ce:10:f1:a0:51:6e:f3:8d:d1:1a:1c:21:d5:11:de:5a:cc:
         a6:57:1a:c2:72:2c:fa:1e:44:a0:70:57:97:dd:ec:de:ad:4f:
         eb:1f:db:79:6e:02:3c:55:04:14:c2:fa:57:9b:2d:8c:c3:18:
         5b:44:9d:07:81:e8:2d:bb:7a:af:28:ca:a5:ab:dc:ef:f0:cc:
         93:13:e4:85:52:87:50:9c:3e:91:d7:30:97:67:16:14:8d:c5:
         90:e5:91:1b:d4:f9:a7:8b:d4:42:72:57:94:3b:1d:f5:e1:cf:
         c9:14:02:db
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHYQtFNSj5f82NCXjMR7jh75MTZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNDA3MDEwMDU5MzRaFw0yNTA2MzAwMTA0MzRaMDMxMTAvBgNV
BAMTKDdCMDFDRTQwMzk1RThFMTVGRUVGMTdDNEMzQzQyMjgxQzM2NkEzMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkYJjQ/8Wod901DyW6OZ3JSF/1
104rQn/nr1oTYcBIpKAlHesqno7z6hB2AKzatJJuAsEFJfn49spWrJzcE8JD89fV
lD+VbYkbjFXCVIaYH4LcMmFGRuktbN3PrwVu5Fv48mR8v6jAzvsTC6vI5DaEmII9
KfD+y6WhUk9qj4Ief3hxfGj7y6QKaqrd20GkbweZJEZOPy9+RGAj+scX3LHoMShJ
WOCn9oC4aRapZzkS1qhzQrJQHmrdvn3Z1LqZ0YebTeyTayq+uUxaaesPL5zgeZUf
MK43h4yaQzoUCAJ3S0ZzDmpAD8oSgLUwuGYZWYG+MFlvmkSTvKJAqO0n/XoXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUewHOQDlejhX+7xfEw8QigcNmow8wHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMyMzgyZTMwMmYz
MjMxMmQzMjMxMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDdMWAMA0GCSqG
SIb3DQEBCwUAA4IBAQB4awhog86va/tcvbhE3FPuT+IdBG4eErXcPRwCR+90FWxW
ONi3+wr8WXL0Ebj/19d0D7REE73JqUJy5CbCoWabFAwZf6tNL5xGCLrHAIz+PF3b
niJWYN0b9VzVFECq0bWVH/Y/0xBODyoVWRUWFTNxkBWEfxeg1nO8/kkGAy06QvDJ
kVz+rKJ87N2rxxXTxHeCzhDxoFFu843RGhwh1RHeWsymVxrCciz6HkSgcFeX3eze
rU/rH9t5bgI8VQQUwvpXmy2MwxhbRJ0Hgegtu3qvKMqlq9zv8MyTE+SFUodQnD6R
1zCXZxYUjcWQ5ZEb1Pmni9RCcleUOx314c/JFALb
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:00:55 2025 by rpki-client