Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          dgcFLDFgMA3DOKxslIpZ/5AVvRRshVYwOkH4X7SCgzg=
Subject key identifier:   A4:08:01:47:F1:A3:52:39:9D:68:BB:00:C4:94:44:FF:18:5F:0A:E5
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       32005E208327372AC178CCDBEE7763273A46A0F1
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:31 +0000
ROA not before:           Mon 31 Jul 2023 00:02:31 +0000
ROA not after:            Mon 29 Jul 2024 00:07:31 +0000
asID:                     58369
IP address blocks:        116.197.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:5e:20:83:27:37:2a:c1:78:cc:db:ee:77:63:27:3a:46:a0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:31 2023 GMT
            Not After : Jul 29 00:07:31 2024 GMT
        Subject: CN=A4080147F1A352399D68BB00C49444FF185F0AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:07:f2:d6:c6:4d:27:d8:67:8c:45:a2:71:
                    73:f0:c1:cf:73:3c:22:3a:1d:8a:8a:10:e3:d7:d9:
                    3e:e3:2c:39:11:01:35:3b:ff:c7:d9:16:8e:0b:1a:
                    65:7d:65:8d:2e:d7:99:a6:4e:68:9b:71:d7:e0:b4:
                    83:9d:f1:2c:e0:7c:6a:1c:f2:7b:3b:71:65:dc:9f:
                    a6:3e:c8:82:77:55:7f:97:cc:55:3f:ab:6c:e6:85:
                    14:8e:c0:4e:57:01:47:1d:86:e1:79:bf:69:68:5f:
                    1a:d2:15:87:7c:d7:45:45:fc:23:f1:ce:e7:70:7c:
                    7e:82:e2:6b:e8:ed:45:2b:00:ff:8a:8e:c2:5b:65:
                    8f:22:00:6b:b6:c4:26:e8:a2:db:df:aa:f4:73:aa:
                    5c:99:05:66:c4:3b:94:60:80:25:be:c8:50:9e:57:
                    98:8e:41:ca:30:38:ca:91:64:a4:2b:80:d5:e3:7b:
                    76:c9:dd:54:6d:7e:cf:81:a9:da:f2:fa:e5:a6:88:
                    b1:9e:42:fd:c4:a8:95:07:d4:c5:6c:83:cd:d4:10:
                    1b:96:93:dc:05:7d:12:18:3f:f2:7e:bd:62:41:83:
                    9c:a8:a4:7c:9d:8c:14:43:6e:19:11:b6:a7:ca:5b:
                    bc:da:99:65:c9:52:61:c3:ad:c3:38:46:2e:87:0b:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:01:47:F1:A3:52:39:9D:68:BB:00:C4:94:44:FF:18:5F:0A:E5
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:c7:bf:94:fb:46:01:ee:02:22:c3:2e:7a:ff:a0:1f:d1:
         fd:31:e0:4d:7d:41:93:d6:ee:09:fb:c6:61:f4:50:a3:8d:7b:
         94:b5:aa:c8:b2:71:ca:28:1c:d8:72:3c:c5:d4:77:8e:a3:91:
         11:de:64:81:6e:4f:37:91:21:f6:19:57:98:08:7f:76:d0:68:
         4e:33:b4:10:81:98:b8:25:b1:b4:f8:1b:0b:36:bf:92:30:ae:
         ec:6c:7a:44:45:ed:6d:7d:97:8b:cf:e8:27:25:f2:7e:6d:10:
         00:f4:01:d8:7c:79:30:23:ac:a2:28:2a:b2:e0:23:10:33:f9:
         29:d1:f2:ed:f1:d1:62:e4:54:1e:c8:7f:c6:a3:1e:2f:8e:ce:
         67:2c:f9:1d:57:87:9e:67:e6:90:f8:67:ed:9f:0b:83:9a:c2:
         59:4a:0d:54:36:9e:60:7f:02:16:20:ed:4e:e2:a4:c4:fb:bf:
         b0:74:66:f8:62:a0:8b:bf:45:b9:c4:67:4b:0b:d4:18:01:fa:
         cc:f6:c5:86:3b:12:15:2e:2f:4f:bb:29:3c:f6:c5:d0:51:2a:
         14:0a:9e:c8:c1:0b:26:49:e1:2b:82:79:01:1b:52:ce:82:8e:
         cd:16:e1:8c:35:79:bc:a8:e9:85:0d:6a:7c:0b:2f:82:9a:67:
         40:a6:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:08 2024 by rpki-client on console-fra.rpki-client.org