Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          NpWfdbgXuzvfOhY0AjKs9EAX2ZoI/wXJj0i2U58Ry6Y=
Subject key identifier:   7F:DE:7E:A9:2E:92:EE:92:3B:C9:35:28:10:17:2B:D8:2B:DD:BA:1C
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       2688BB0BF65E19DFA9B02BE1185364D113C98CD6
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:35 +0000
ROA not before:           Mon 01 Jul 2024 00:59:35 +0000
ROA not after:            Mon 30 Jun 2025 01:04:35 +0000
asID:                     58369
IP address blocks:        116.197.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:88:bb:0b:f6:5e:19:df:a9:b0:2b:e1:18:53:64:d1:13:c9:8c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:35 2024 GMT
            Not After : Jun 30 01:04:35 2025 GMT
        Subject: CN=7FDE7EA92E92EE923BC9352810172BD82BDDBA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:f7:d5:98:b3:2f:8c:e2:7c:a7:cc:2b:f2:
                    a0:2f:ad:a9:49:cc:29:a4:95:c1:41:59:61:ef:16:
                    e6:44:5b:b2:75:0c:72:5a:80:75:51:76:70:71:81:
                    b8:9f:a1:43:08:96:4c:d7:a0:81:96:fb:bc:92:d5:
                    01:f3:8c:79:0f:68:12:d1:c9:dd:d9:bc:d1:d9:7c:
                    8a:5e:c4:fe:aa:e7:2f:da:5b:ee:bd:7b:e6:a5:b2:
                    38:25:56:37:e2:0b:ba:46:20:96:70:6f:15:e1:13:
                    e1:a8:03:fb:50:4c:c9:08:ab:79:12:60:a8:95:b3:
                    73:93:1c:67:d0:03:8d:a2:e6:2c:dd:c2:df:c3:fb:
                    6f:c0:11:ee:cd:e4:46:b7:69:f6:68:82:d7:9a:8b:
                    a8:d4:99:34:fe:b2:4c:14:04:71:ef:0a:d5:a3:7c:
                    b6:46:98:84:e5:c0:c1:53:9e:c1:c0:d0:d9:39:51:
                    5a:44:73:16:8f:9b:30:10:2d:81:1a:e2:82:27:f5:
                    92:41:b0:bb:cc:15:78:58:29:9a:5c:b6:69:af:32:
                    4c:8a:f3:f6:e9:b8:d7:17:e8:84:75:49:ef:ab:52:
                    9a:0e:23:b8:9e:6e:7d:ea:8c:fd:4c:80:30:5e:1a:
                    68:cd:21:d8:d9:a0:3b:b6:78:21:dc:8e:bb:ed:91:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DE:7E:A9:2E:92:EE:92:3B:C9:35:28:10:17:2B:D8:2B:DD:BA:1C
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:a3:63:89:57:a6:c3:f8:bd:6e:0e:26:10:ac:83:b2:8f:d0:
         46:9d:98:51:6f:08:ae:21:aa:96:73:7e:12:71:a9:8f:34:ab:
         9c:20:41:4a:bb:2c:02:9c:ac:29:7d:64:de:f4:f3:90:60:6e:
         c2:c2:17:59:96:33:42:6b:db:c4:5c:8a:89:e7:71:52:2f:a5:
         42:67:cf:57:0d:1e:bd:16:df:19:ca:ad:21:8f:68:fb:71:e1:
         43:14:4a:59:aa:cb:13:4a:ce:46:37:8d:30:71:c6:15:c8:40:
         f1:28:9a:ea:07:88:fd:bf:8f:4f:79:ac:a8:93:8f:16:14:4c:
         4d:c3:c6:6f:d0:43:58:a8:95:89:d2:62:c1:30:9f:68:f5:30:
         f5:96:d6:5c:c5:17:40:13:1b:a4:54:18:7a:98:18:5f:35:c8:
         c4:e8:0d:09:6a:d0:a5:4f:2b:14:ca:5f:10:24:e9:b8:22:3d:
         f1:3c:c4:67:1f:17:9a:01:1b:27:09:8e:85:52:fb:ac:0d:11:
         0f:bd:12:6c:5f:e3:bd:38:11:ed:73:4c:64:5e:d3:a8:2c:c7:
         ad:5e:30:38:fa:a2:91:c1:b7:7f:d0:c3:d0:92:90:00:eb:12:
         7e:e0:2b:3f:7b:c2:5c:7f:f9:0e:19:26:0e:de:d5:37:af:9c:
         b7:59:66:bf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJoi7C/ZeGd+psCvhGFNk0RPJjNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNDA3MDEwMDU5MzVaFw0yNTA2MzAwMTA0MzVaMDMxMTAvBgNV
BAMTKDdGREU3RUE5MkU5MkVFOTIzQkM5MzUyODEwMTcyQkQ4MkJEREJBMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuffVmLMvjOJ8p8wr8qAvralJ
zCmklcFBWWHvFuZEW7J1DHJagHVRdnBxgbifoUMIlkzXoIGW+7yS1QHzjHkPaBLR
yd3ZvNHZfIpexP6q5y/aW+69e+alsjglVjfiC7pGIJZwbxXhE+GoA/tQTMkIq3kS
YKiVs3OTHGfQA42i5izdwt/D+2/AEe7N5Ea3afZogteai6jUmTT+skwUBHHvCtWj
fLZGmITlwMFTnsHA0Nk5UVpEcxaPmzAQLYEa4oIn9ZJBsLvMFXhYKZpctmmvMkyK
8/bpuNcX6IR1Se+rUpoOI7iebn3qjP1MgDBeGmjNIdjZoDu2eCHcjrvtkQe/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUf95+qS6S7pI7yTUoEBcr2CvduhwwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMzMzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBdMWCMA0GCSqG
SIb3DQEBCwUAA4IBAQA/o2OJV6bD+L1uDiYQrIOyj9BGnZhRbwiuIaqWc34ScamP
NKucIEFKuywCnKwpfWTe9POQYG7CwhdZljNCa9vEXIqJ53FSL6VCZ89XDR69Ft8Z
yq0hj2j7ceFDFEpZqssTSs5GN40wccYVyEDxKJrqB4j9v49Peayok48WFExNw8Zv
0ENYqJWJ0mLBMJ9o9TD1ltZcxRdAExukVBh6mBhfNcjE6A0JatClTysUyl8QJOm4
Ij3xPMRnHxeaARsnCY6FUvusDREPvRJsX+O9OBHtc0xkXtOoLMetXjA4+qKRwbd/
0MPQkpAA6xJ+4Cs/e8Jcf/kOGSYO3tU3r5y3WWa/
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org