Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          EhO5Zj2lIZ/S7bh4gdY1hFTBT1MW6iWvPiadPCKQyfY=
Subject key identifier:   2E:DA:30:B1:A7:29:D8:95:7F:98:35:9E:03:70:A7:8C:24:F1:ED:1F
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       1E69773E2EAECADF6A7FB37CB5F32BB4A72691E2
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:35 +0000
ROA not before:           Mon 01 Jul 2024 00:59:35 +0000
ROA not after:            Mon 30 Jun 2025 01:04:35 +0000
asID:                     58369
IP address blocks:        116.197.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:69:77:3e:2e:ae:ca:df:6a:7f:b3:7c:b5:f3:2b:b4:a7:26:91:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:35 2024 GMT
            Not After : Jun 30 01:04:35 2025 GMT
        Subject: CN=2EDA30B1A729D8957F98359E0370A78C24F1ED1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:5d:65:93:36:ea:68:59:29:39:29:e4:49:
                    dc:7e:64:62:c4:79:6e:55:d4:3a:ea:67:6e:12:f2:
                    23:58:c0:b0:c8:45:ba:6b:45:2d:1e:0a:a3:f4:48:
                    e8:bd:70:52:79:29:e2:55:c9:bf:3e:b0:d8:e8:a4:
                    08:7a:a0:d2:0a:df:68:f7:74:08:58:88:fd:d5:b6:
                    7c:aa:6d:e1:9f:bf:dc:46:76:1e:b1:f0:1c:96:d4:
                    db:d5:29:31:90:9d:56:b3:04:0d:62:61:8e:1c:d3:
                    89:29:9a:b1:74:c9:31:40:63:b1:65:d2:1d:2c:c1:
                    a7:96:c1:a0:82:b0:db:13:10:f6:ba:03:78:9b:1b:
                    ee:04:49:b6:a7:37:ea:7c:25:42:51:23:0d:df:4e:
                    10:5c:9a:d1:fb:08:83:f5:17:88:e5:b5:68:10:98:
                    23:4a:55:93:7d:d1:a8:f5:f2:f5:9c:64:8a:54:e6:
                    c7:1b:9c:dd:8a:fe:bd:f8:18:90:d3:4d:16:af:52:
                    2f:09:ad:dd:cd:06:d7:cc:6b:7c:8f:cf:7e:4d:a0:
                    fb:db:2a:23:a6:de:f7:1c:a2:94:bd:3d:e5:84:90:
                    5a:b5:4c:18:d9:d9:48:01:e5:06:a2:b0:07:63:8a:
                    8e:12:1b:46:2d:49:c4:aa:c7:8c:b2:42:fe:aa:56:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DA:30:B1:A7:29:D8:95:7F:98:35:9E:03:70:A7:8C:24:F1:ED:1F
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:f3:fd:7f:a6:2e:58:5b:40:4e:de:1c:6e:62:ad:af:49:
         e2:cc:22:a8:3f:35:50:38:0a:17:88:27:e2:fa:6f:59:3b:3f:
         e0:14:4f:01:bc:eb:76:de:cd:8e:8f:b4:43:55:79:a8:4b:7c:
         5b:12:38:42:d8:3a:34:56:45:80:b4:02:2d:d8:65:a4:34:a8:
         17:1f:68:a2:23:1d:a3:e0:68:d8:a1:b9:dd:62:9f:0b:bb:c4:
         7e:ae:91:32:10:a4:ae:31:32:af:12:7c:77:20:81:ff:da:d1:
         28:d5:1d:c6:e6:44:b8:b7:3f:1f:f9:d5:91:c1:f3:4d:95:7d:
         4a:84:46:16:90:67:3f:9c:32:81:6d:47:18:9d:65:e2:49:e7:
         35:64:20:8d:c6:6f:d9:97:cc:c3:bf:2d:eb:30:eb:65:b6:e5:
         71:17:eb:c1:da:cc:f2:fe:27:32:6a:81:7c:33:d5:fe:42:a3:
         5f:15:69:6e:f0:11:18:15:5f:4e:e4:1c:de:c9:0a:c8:f5:12:
         1b:0d:02:cb:90:57:6d:2d:ce:98:fc:5e:89:db:0d:a4:02:98:
         bc:72:e4:eb:77:7d:cf:73:81:16:25:82:57:ca:1f:5b:ba:50:
         c2:8e:a6:97:0c:c9:be:4b:ad:ac:6f:e8:c0:d7:dc:f4:8c:d2:
         28:13:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org