Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa
File:                     3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          KIVPz6uOTRc9yZyBAxlEKbnc6lpU+c+cjkRH5OsWAk4=
Subject key identifier:   9F:26:CB:05:3F:2B:99:8F:DE:07:96:A4:84:59:7C:91:9D:A6:07:C0
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       66445362DED53E958EBF0B3346C6CBF0B40C71B8
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:39 +0000
ROA not before:           Mon 02 Jun 2025 01:58:39 +0000
ROA not after:            Mon 01 Jun 2026 02:03:39 +0000
asID:                     58369
IP address blocks:        116.197.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:44:53:62:de:d5:3e:95:8e:bf:0b:33:46:c6:cb:f0:b4:0c:71:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:39 2025 GMT
            Not After : Jun  1 02:03:39 2026 GMT
        Subject: CN=9F26CB053F2B998FDE0796A484597C919DA607C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:3a:e3:ae:93:9f:13:bd:c7:b3:bf:ed:7f:
                    85:52:07:a1:ba:6b:0c:a8:b3:9c:03:35:f7:88:05:
                    8c:1b:ef:c9:52:3a:b1:86:c4:a6:d5:18:e6:10:37:
                    83:1c:38:e1:19:a9:91:de:62:d4:b7:ff:e9:75:a1:
                    86:1e:26:03:47:c3:0b:d2:72:c6:a2:cd:e1:57:d2:
                    54:7a:9a:ec:06:61:f5:87:78:a1:eb:e8:6b:b5:2b:
                    6b:33:b3:01:12:a6:6d:4e:cc:44:b9:03:57:23:86:
                    84:79:e9:47:24:92:1c:4b:8a:7f:08:0f:f7:11:7d:
                    f6:15:25:e4:b1:8c:35:51:9a:54:3f:c3:4e:ec:2c:
                    47:8a:49:c3:19:e7:21:37:aa:91:75:b3:86:45:f5:
                    38:d8:5e:88:a1:ab:89:28:90:ec:ea:2b:8c:84:7b:
                    3e:46:a1:b7:ab:dc:4c:90:2e:3d:1b:f6:28:fc:8d:
                    a5:30:76:8d:46:e0:2a:fa:09:3c:48:83:cc:b2:7d:
                    8a:02:8e:ff:91:91:d6:39:f8:04:95:ae:82:d7:69:
                    96:c6:34:d2:73:84:7a:1f:32:71:b3:a6:cd:35:0c:
                    16:a2:aa:a6:fe:33:a5:c1:ea:44:a1:e2:5e:3b:a9:
                    bf:f9:50:7c:22:a5:01:69:24:d2:1e:50:ee:9d:65:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:CB:05:3F:2B:99:8F:DE:07:96:A4:84:59:7C:91:9D:A6:07:C0
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:83:17:f4:a9:01:b0:f4:1b:7a:05:24:1f:93:90:b7:94:56:
         20:c1:43:64:c8:c4:ea:2c:c7:4e:3f:43:a7:15:11:5a:05:41:
         0a:c2:66:76:e6:c5:dc:f0:b9:c8:89:e6:85:fa:13:fb:f2:42:
         46:f3:16:cf:e8:ed:d7:d0:8c:96:e2:ea:3a:1e:5b:03:cd:80:
         89:31:12:74:f2:42:0e:ff:14:8c:72:61:5c:6c:55:7f:1e:9e:
         3e:5a:62:69:6e:fb:f6:fd:7f:0b:42:ba:48:a4:95:15:af:1d:
         08:be:b6:0a:2e:c7:c5:a7:48:05:4f:5f:1b:3a:42:58:01:52:
         4e:98:1e:12:84:3b:e6:4b:0b:16:c5:39:6a:35:9e:62:5c:e6:
         f7:21:24:5b:a5:78:c1:e8:20:77:91:80:b1:a7:30:36:b3:eb:
         06:00:d2:95:ff:69:22:04:78:b2:da:96:a0:7b:5d:04:24:48:
         c2:a0:2a:f4:2e:f1:98:57:f8:dd:49:76:04:67:ca:34:75:1b:
         81:71:44:f9:31:5c:7c:41:b0:b2:d9:e0:4d:10:70:47:49:5c:
         fa:a4:74:76:cb:d1:7e:3f:79:3a:7b:f5:0d:8d:5f:76:f8:97:
         b4:b0:33:03:f0:09:73:8b:b8:4d:6c:cc:a6:5a:81:c1:c4:08:
         e0:80:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:17:48 2025 by rpki-client