Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132392e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3132392e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          sXPDEIIAGPCnHPNUKtkG0QYvXk/SDqlA8dbdD8s5aEA=
Subject key identifier:   00:5F:72:CA:84:66:EE:4B:25:7D:50:2F:A8:7A:29:52:7A:F0:3A:50
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       73ABEAF8FDC50B93CF6BD4208655B8D8A0C4E475
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132392e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:37 +0000
ROA not before:           Mon 02 Jun 2025 01:58:37 +0000
ROA not after:            Mon 01 Jun 2026 02:03:37 +0000
asID:                     58369
IP address blocks:        116.197.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ab:ea:f8:fd:c5:0b:93:cf:6b:d4:20:86:55:b8:d8:a0:c4:e4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:37 2025 GMT
            Not After : Jun  1 02:03:37 2026 GMT
        Subject: CN=005F72CA8466EE4B257D502FA87A29527AF03A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:51:df:0f:b5:29:cd:d6:69:15:0b:c7:a0:
                    eb:eb:b8:d5:48:df:fa:22:90:7e:c3:36:d7:15:d0:
                    3b:9a:50:8a:17:f3:18:70:e7:19:f1:aa:f3:0f:87:
                    ba:2d:2d:45:e3:9a:f4:d1:70:e4:09:9f:df:fb:14:
                    90:a9:ca:a4:19:4e:eb:6d:4c:cc:9f:2d:58:14:8e:
                    2f:87:98:28:0a:6a:7f:d7:fa:28:e2:ac:dc:ae:d0:
                    5e:cf:cd:c7:4a:9f:96:81:23:a7:bd:4a:6d:a8:6f:
                    45:27:23:4a:3b:d2:69:94:cf:46:0a:bd:ea:9f:a9:
                    a5:cb:32:4a:7f:47:d6:58:2d:ab:a5:c6:3c:d0:32:
                    e1:a2:69:4a:5f:8e:a3:dd:ea:14:5a:00:e7:a5:2c:
                    17:4e:46:df:57:e3:2b:ef:5c:77:9b:c0:3e:57:75:
                    fb:da:74:8e:63:5b:63:37:43:5a:cf:0f:0d:ad:f8:
                    11:55:b1:a7:ed:28:03:67:4b:a3:f9:75:9c:43:dd:
                    da:1d:c5:30:78:de:44:73:87:b8:ba:c7:19:c6:72:
                    67:b6:7d:47:ab:c9:f1:2b:c0:44:0f:3c:c6:2d:b0:
                    be:e5:b1:2f:69:ff:76:19:a5:c8:a9:6d:bc:25:22:
                    7e:b8:a5:cb:7d:6c:3c:36:c7:fb:3c:ce:e6:18:6a:
                    0c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5F:72:CA:84:66:EE:4B:25:7D:50:2F:A8:7A:29:52:7A:F0:3A:50
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132392e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:59:59:3e:bc:c7:46:cc:d9:f0:b6:2a:32:b2:33:07:66:1e:
         28:19:24:9b:93:63:08:70:c5:fb:ca:03:a7:f3:8f:df:cc:a0:
         16:93:ac:81:97:67:c8:9a:ec:3b:16:48:de:6d:81:b4:d0:a9:
         41:e9:12:22:37:27:79:f4:c8:37:81:70:d6:b5:52:3b:e7:2e:
         31:a7:ce:da:c1:04:bf:a1:0d:03:49:2b:d1:9e:f9:22:3f:bc:
         db:71:1b:a9:ef:b5:32:d8:3a:11:08:64:bb:fb:7f:3c:4a:34:
         f4:76:18:b0:f9:a2:6d:ea:e6:e9:2f:b8:0c:03:fe:a2:99:38:
         ff:bf:02:cd:9e:c4:d2:9c:d1:52:cd:1d:67:0c:ef:c2:53:7e:
         4c:de:19:ac:96:dd:28:e8:35:a8:97:7b:92:cb:8c:a3:33:f8:
         07:3e:b1:9e:5e:fb:84:87:c6:05:d3:74:54:71:a2:d7:7f:d7:
         fe:50:d2:9b:1e:6e:a7:68:24:11:74:1d:85:90:ae:c4:94:bc:
         e0:72:3f:2f:4a:f9:a6:c8:42:f7:2d:e3:85:6f:69:c4:21:47:
         4a:ed:8a:b4:ac:c0:e2:73:6c:13:25:75:d7:2f:00:10:dd:d1:
         b8:e5:4e:1f:9c:f8:99:76:39:67:71:ed:41:2f:39:ea:65:ef:
         98:1a:b1:46
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUc6vq+P3FC5PPa9QghlW42KDE5HUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNTA2MDIwMTU4MzdaFw0yNjA2MDEwMjAzMzdaMDMxMTAvBgNV
BAMTKDAwNUY3MkNBODQ2NkVFNEIyNTdENTAyRkE4N0EyOTUyN0FGMDNBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEVHfD7UpzdZpFQvHoOvruNVI
3/oikH7DNtcV0DuaUIoX8xhw5xnxqvMPh7otLUXjmvTRcOQJn9/7FJCpyqQZTutt
TMyfLVgUji+HmCgKan/X+ijirNyu0F7PzcdKn5aBI6e9Sm2ob0UnI0o70mmUz0YK
veqfqaXLMkp/R9ZYLaulxjzQMuGiaUpfjqPd6hRaAOelLBdORt9X4yvvXHebwD5X
dfvadI5jW2M3Q1rPDw2t+BFVsaftKANnS6P5dZxD3dodxTB43kRzh7i6xxnGcme2
fUeryfErwEQPPMYtsL7lsS9p/3YZpcipbbwlIn64pct9bDw2x/s8zuYYagwFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAF9yyoRm7kslfVAvqHopUnrwOlAwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMyMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdMWBMA0GCSqG
SIb3DQEBCwUAA4IBAQAGWVk+vMdGzNnwtioysjMHZh4oGSSbk2MIcMX7ygOn84/f
zKAWk6yBl2fImuw7FkjebYG00KlB6RIiNyd59Mg3gXDWtVI75y4xp87awQS/oQ0D
SSvRnvkiP7zbcRup77Uy2DoRCGS7+388SjT0dhiw+aJt6ubpL7gMA/6imTj/vwLN
nsTSnNFSzR1nDO/CU35M3hmslt0o6DWol3uSy4yjM/gHPrGeXvuEh8YF03RUcaLX
f9f+UNKbHm6naCQRdB2FkK7ElLzgcj8vSvmmyEL3LeOFb2nEIUdK7Yq0rMDic2wT
JXXXLwAQ3dG45U4fnPiZdjlnce1BLznqZe+YGrFG
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:07 2025 by rpki-client