Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          +JpjheLHb3bBJXuFRKf/LI6yNOk0T/JB5HHNaxw6eO0=
Subject key identifier:   03:DA:04:DA:B8:F3:6F:07:5B:1A:E8:AE:0A:92:6F:1A:D2:28:CD:2D
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       192B07A806D875C8DE133A236A66CEC82764022C
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:41 +0000
ROA not before:           Mon 02 Jun 2025 01:58:41 +0000
ROA not after:            Mon 01 Jun 2026 02:03:41 +0000
asID:                     58369
IP address blocks:        116.197.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2b:07:a8:06:d8:75:c8:de:13:3a:23:6a:66:ce:c8:27:64:02:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:41 2025 GMT
            Not After : Jun  1 02:03:41 2026 GMT
        Subject: CN=03DA04DAB8F36F075B1AE8AE0A926F1AD228CD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:c3:8b:96:f0:c2:58:f5:d7:0b:13:3f:f4:
                    05:10:b2:dd:69:24:9b:be:b8:36:fd:5c:20:57:21:
                    42:fc:3e:bb:b8:a5:05:4f:95:63:5b:39:04:19:c4:
                    8d:c8:49:c8:1d:65:1a:07:84:01:35:b2:d6:79:09:
                    c3:b2:e3:bb:3f:68:d4:85:56:95:12:c9:02:f7:33:
                    54:a4:2f:dc:a4:39:26:72:17:83:b5:8d:0b:15:c4:
                    77:6c:cb:38:e2:f5:b9:24:44:0c:e2:30:c5:40:1e:
                    8b:12:5a:19:9e:47:34:8d:c0:f0:a6:15:37:b9:36:
                    69:70:cf:17:c9:65:95:cc:58:f4:91:c3:98:e5:5b:
                    c3:ce:e0:92:77:0d:86:6d:0e:46:3f:c0:56:f3:db:
                    f1:fb:0f:97:f3:a7:a1:76:b3:7d:e3:b2:f1:e5:25:
                    bc:0d:a6:48:8e:c7:39:eb:cd:5c:a3:46:5f:0b:7d:
                    10:3a:39:09:cd:3a:f7:de:30:fd:8c:81:0d:fa:55:
                    f6:da:3c:15:9b:03:9c:50:c7:6d:b1:71:d8:e5:a9:
                    a2:96:b9:8e:6c:9f:35:08:c1:4d:8c:a0:a0:ec:04:
                    2f:d3:54:34:e7:66:12:c7:86:f8:ac:00:57:2d:30:
                    5f:32:41:65:30:8a:c6:84:a2:19:f7:de:99:7f:e2:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DA:04:DA:B8:F3:6F:07:5B:1A:E8:AE:0A:92:6F:1A:D2:28:CD:2D
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:91:b5:d8:c8:df:79:ce:1c:e8:20:fb:8c:98:5a:6d:98:3b:
         35:71:97:57:4e:de:97:bf:d4:26:60:65:17:23:d0:6e:22:bf:
         e1:23:7d:a3:c0:22:12:37:0c:8f:85:1e:09:e1:64:23:4d:b2:
         b6:1b:8b:9a:5f:ff:0d:6e:86:27:50:db:06:74:8e:60:9b:9c:
         4e:d3:10:11:1a:f7:1d:fd:a3:d8:65:dd:95:6f:97:d3:45:4b:
         8c:18:72:5d:65:4c:98:ba:c6:70:4d:59:8a:b7:1a:a3:94:94:
         df:be:bb:6d:ba:ee:46:ed:53:b5:42:b0:b9:06:42:70:58:dd:
         95:12:00:8d:4e:d3:13:d7:a8:4a:ec:f9:e0:a9:37:7a:50:57:
         36:54:05:00:6e:2a:94:a4:b2:43:2e:34:db:88:fd:98:be:61:
         2c:42:eb:23:3e:a4:60:91:84:26:23:67:4b:17:a9:67:6a:93:
         73:5b:85:b0:57:af:24:4f:35:30:f1:30:c1:8b:79:b1:77:0f:
         7c:ba:b4:a7:f9:ef:e5:bb:01:2f:18:7c:9a:5b:44:ce:e5:af:
         3a:03:42:8a:42:aa:39:e0:21:50:ac:b5:75:3a:42:e2:d5:c2:
         d9:29:52:f8:4c:fa:88:d4:83:83:df:bd:6b:e4:f5:c3:54:ca:
         c5:01:fa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:49 2025 by rpki-client