Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa
File:                     3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          8QtxXsg9aO3cgakJQlRkPvJ7WuP/4X6kr9ZidvtcuQY=
Subject key identifier:   2F:55:18:FD:3F:77:D9:26:84:4B:3E:E1:61:98:B1:03:95:F0:56:C4
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       0EEE22F7AD292AB2EE6918EA3F71F092739BF328
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:31 +0000
ROA not before:           Mon 01 Jul 2024 00:59:31 +0000
ROA not after:            Mon 30 Jun 2025 01:04:31 +0000
asID:                     58369
IP address blocks:        116.197.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ee:22:f7:ad:29:2a:b2:ee:69:18:ea:3f:71:f0:92:73:9b:f3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:31 2024 GMT
            Not After : Jun 30 01:04:31 2025 GMT
        Subject: CN=2F5518FD3F77D926844B3EE16198B10395F056C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:63:32:bb:51:8a:a4:c5:40:0b:38:d6:1e:
                    7e:59:44:4c:ee:8a:8c:3e:75:f0:8a:ad:fe:64:67:
                    c5:11:e2:9b:ec:a9:7e:23:52:99:c3:82:87:b3:23:
                    99:e5:0c:a8:e9:a0:b8:b2:c8:85:b4:6c:2a:8d:cc:
                    66:2e:f5:51:b5:6e:1d:dd:7e:1f:7f:bc:00:a5:ed:
                    ec:34:aa:2c:fe:7a:2c:ca:a9:55:22:95:68:c4:6c:
                    be:ac:67:9a:1b:f7:85:40:ba:50:68:a5:c6:26:ae:
                    70:51:84:4d:ef:14:70:0d:50:20:11:79:8f:aa:31:
                    50:42:74:9f:8d:85:ed:79:fd:af:ab:9d:e0:71:81:
                    70:70:f0:86:13:b9:fa:b2:9a:7a:01:b4:ff:6c:98:
                    92:9d:25:53:66:b9:34:db:2e:c3:06:e1:35:fb:d6:
                    95:30:81:6e:cc:2b:f1:78:7e:40:84:ff:be:2c:94:
                    10:50:2d:ec:2a:e6:4c:4f:84:23:1f:49:7f:4a:b4:
                    da:22:08:7a:dd:96:1b:21:d9:46:e7:06:10:4f:3a:
                    d6:2b:11:4a:cb:22:5f:26:54:ad:ae:74:d8:76:b1:
                    24:b0:ff:1a:54:ec:25:7c:0b:e6:12:74:58:5f:fc:
                    51:c7:5e:3f:db:9e:ea:22:27:59:cd:bc:6c:ec:c5:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:18:FD:3F:77:D9:26:84:4B:3E:E1:61:98:B1:03:95:F0:56:C4
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:12:4b:4c:22:08:c7:13:ad:42:b3:4d:1e:e7:90:0c:b7:37:
         2c:eb:6a:d1:ed:03:e7:b3:82:79:94:f9:26:8b:c1:b2:45:95:
         c7:bc:f5:af:c1:04:d9:30:df:07:32:11:c1:bd:e1:36:21:bf:
         ad:b7:91:cc:e0:02:2e:45:ae:c9:87:0f:c7:a6:75:69:90:02:
         69:67:ed:8d:e2:17:ef:03:3e:7e:62:cf:b2:b2:5a:e5:60:cd:
         8d:2a:51:df:b4:32:78:8a:68:92:50:74:0a:a9:6d:fc:85:a3:
         0b:a8:1f:76:c7:cd:d4:ae:ef:52:5b:2d:c5:8a:9a:f5:38:4f:
         e3:a2:64:f0:68:53:71:db:d7:bf:06:3e:b8:e7:20:45:41:73:
         7d:02:3d:e3:76:f5:72:91:d4:45:36:c3:63:61:30:93:21:56:
         1e:17:1b:08:0b:50:8c:01:66:ac:aa:b3:5f:f1:08:86:f9:b9:
         c8:72:66:91:c8:d2:04:84:58:5a:63:fa:75:67:ef:d1:42:c1:
         be:31:df:64:b0:ad:ca:73:e1:07:31:ff:5e:6d:04:c4:97:6a:
         4c:db:cc:02:a4:8c:ef:4d:45:61:b2:d2:ef:4c:37:35:a0:92:
         ad:a3:6b:09:26:d2:91:8a:f5:aa:e0:d4:98:43:fc:36:03:9a:
         54:be:c1:09
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDu4i960pKrLuaRjqP3HwknOb8ygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNDA3MDEwMDU5MzFaFw0yNTA2MzAwMTA0MzFaMDMxMTAvBgNV
BAMTKDJGNTUxOEZEM0Y3N0Q5MjY4NDRCM0VFMTYxOThCMTAzOTVGMDU2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhmMyu1GKpMVACzjWHn5ZREzu
iow+dfCKrf5kZ8UR4pvsqX4jUpnDgoezI5nlDKjpoLiyyIW0bCqNzGYu9VG1bh3d
fh9/vACl7ew0qiz+eizKqVUilWjEbL6sZ5ob94VAulBopcYmrnBRhE3vFHANUCAR
eY+qMVBCdJ+Nhe15/a+rneBxgXBw8IYTufqymnoBtP9smJKdJVNmuTTbLsMG4TX7
1pUwgW7MK/F4fkCE/74slBBQLewq5kxPhCMfSX9KtNoiCHrdlhsh2UbnBhBPOtYr
EUrLIl8mVK2udNh2sSSw/xpU7CV8C+YSdFhf/FHHXj/bnuoiJ1nNvGzsxdixAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUL1UY/T932SaESz7hYZixA5XwVsQwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMyMzgyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCdMWAMA0GCSqG
SIb3DQEBCwUAA4IBAQBEEktMIgjHE61Cs00e55AMtzcs62rR7QPns4J5lPkmi8Gy
RZXHvPWvwQTZMN8HMhHBveE2Ib+tt5HM4AIuRa7Jhw/HpnVpkAJpZ+2N4hfvAz5+
Ys+yslrlYM2NKlHftDJ4imiSUHQKqW38haMLqB92x83Uru9SWy3Fipr1OE/jomTw
aFNx29e/Bj645yBFQXN9Aj3jdvVykdRFNsNjYTCTIVYeFxsIC1CMAWasqrNf8QiG
+bnIcmaRyNIEhFhaY/p1Z+/RQsG+Md9ksK3Kc+EHMf9ebQTEl2pM28wCpIzvTUVh
stLvTDc1oJKto2sJJtKRivWq4NSYQ/w2A5pUvsEJ
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org