Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          TdUhkWe6ZZ7kOXjV9iatq5Iv24M1tMXxKb/XbyMw4zE=
Subject key identifier:   A9:77:B0:F9:50:B1:7D:8E:54:3A:A0:E6:37:3F:52:74:D0:D3:42:AC
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       717D591D278A9D28473550547237AD3620A47828
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:40 +0000
ROA not before:           Mon 02 Jun 2025 01:58:40 +0000
ROA not after:            Mon 01 Jun 2026 02:03:40 +0000
asID:                     58369
IP address blocks:        116.197.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7d:59:1d:27:8a:9d:28:47:35:50:54:72:37:ad:36:20:a4:78:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:40 2025 GMT
            Not After : Jun  1 02:03:40 2026 GMT
        Subject: CN=A977B0F950B17D8E543AA0E6373F5274D0D342AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:b9:4a:93:fd:e2:8e:ac:8d:ec:97:b9:fd:
                    a7:38:be:40:d9:4c:19:b2:8a:a0:6d:13:ea:a5:01:
                    f6:23:43:ec:b1:7e:04:91:33:f0:3d:97:76:5b:f3:
                    b3:a2:b4:25:cb:22:47:5b:9f:14:34:9b:59:e7:d4:
                    c4:be:51:16:59:22:48:81:e8:b1:00:1b:ae:16:00:
                    d8:52:ea:ef:17:f9:3f:37:bc:1d:82:30:9c:a4:dd:
                    d1:1a:20:86:df:72:b5:a1:75:97:4c:7f:24:f1:f3:
                    98:cc:f3:9b:0d:ad:2b:25:2b:f2:50:2d:ae:11:1d:
                    de:7e:cb:e4:8d:4c:cd:9e:d8:97:70:08:06:f8:1f:
                    c3:f0:f0:64:7a:84:49:4a:5d:e1:aa:d4:64:6a:82:
                    bb:ef:21:74:58:0f:ac:b6:48:20:9f:c4:dc:f3:ba:
                    08:a8:a4:25:0c:59:09:53:c4:d3:fc:27:89:39:bf:
                    be:8a:90:37:ea:a3:94:d8:6d:70:43:00:c8:3f:25:
                    1f:f6:1b:55:69:8b:30:c2:6b:22:3f:f0:04:44:99:
                    80:88:22:9b:21:b7:92:0d:4e:cc:ec:be:a1:54:55:
                    8c:d0:7e:73:6a:b3:f7:fe:72:95:9c:33:5a:47:7b:
                    45:59:ca:0b:7c:94:5a:d3:7e:a8:b1:5f:72:74:a0:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:77:B0:F9:50:B1:7D:8E:54:3A:A0:E6:37:3F:52:74:D0:D3:42:AC
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:26:e9:67:10:07:c7:76:32:6c:3b:e4:5a:9e:52:14:52:da:
         a1:30:dd:75:2b:14:6a:c8:01:22:cd:e4:74:d7:0e:cc:2d:50:
         62:f3:a1:2b:18:dc:3f:99:4f:75:89:cc:0e:a5:a1:00:7f:a1:
         66:10:26:dd:30:ad:1f:ba:98:b6:3c:a0:09:d8:c1:4b:9f:18:
         60:a8:39:bc:e8:b9:08:da:ba:b0:a2:52:62:6b:0a:63:96:76:
         fd:71:a0:db:02:a6:2e:57:85:09:26:6b:2b:e0:27:21:66:71:
         ec:6d:f9:e5:f7:bc:e2:95:6f:29:4f:06:48:bf:5a:80:0b:87:
         5f:9b:0a:e7:ea:81:a0:ad:92:57:26:83:96:07:e5:f2:cf:b0:
         db:17:9c:ae:f8:5c:62:28:ab:0f:1e:5d:81:4f:8a:98:f0:4b:
         ee:af:68:c0:44:19:ed:21:f4:62:ce:55:a1:f0:3b:ed:e7:85:
         8b:9e:7a:83:b2:74:94:ae:1f:00:9f:04:2a:0f:47:d6:c7:3e:
         2f:50:08:81:c8:a4:4a:2e:ca:26:42:22:e1:6a:9c:fb:8c:33:
         d4:fb:cd:16:be:de:b9:21:4b:16:a0:bc:68:fe:18:03:1b:cc:
         89:9a:ed:67:23:02:df:8b:32:ca:26:d5:a1:1b:fd:55:65:41:
         72:de:b1:6a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcX1ZHSeKnShHNVBUcjetNiCkeCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNTA2MDIwMTU4NDBaFw0yNjA2MDEwMjAzNDBaMDMxMTAvBgNV
BAMTKEE5NzdCMEY5NTBCMTdEOEU1NDNBQTBFNjM3M0Y1Mjc0RDBEMzQyQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4rlKk/3ijqyN7Je5/ac4vkDZ
TBmyiqBtE+qlAfYjQ+yxfgSRM/A9l3Zb87OitCXLIkdbnxQ0m1nn1MS+URZZIkiB
6LEAG64WANhS6u8X+T83vB2CMJyk3dEaIIbfcrWhdZdMfyTx85jM85sNrSslK/JQ
La4RHd5+y+SNTM2e2JdwCAb4H8Pw8GR6hElKXeGq1GRqgrvvIXRYD6y2SCCfxNzz
ugiopCUMWQlTxNP8J4k5v76KkDfqo5TYbXBDAMg/JR/2G1VpizDCayI/8AREmYCI
Ipsht5INTszsvqFUVYzQfnNqs/f+cpWcM1pHe0VZygt8lFrTfqixX3J0oJkRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqXew+VCxfY5UOqDmNz9SdNDTQqwwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMzMzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBdMWCMA0GCSqG
SIb3DQEBCwUAA4IBAQBCJulnEAfHdjJsO+RanlIUUtqhMN11KxRqyAEizeR01w7M
LVBi86ErGNw/mU91icwOpaEAf6FmECbdMK0fupi2PKAJ2MFLnxhgqDm86LkI2rqw
olJiawpjlnb9caDbAqYuV4UJJmsr4CchZnHsbfnl97zilW8pTwZIv1qAC4dfmwrn
6oGgrZJXJoOWB+Xyz7DbF5yu+FxiKKsPHl2BT4qY8Evur2jARBntIfRizlWh8Dvt
54WLnnqDsnSUrh8AnwQqD0fWxz4vUAiByKRKLsomQiLhapz7jDPU+80Wvt65IUsW
oLxo/hgDG8yJmu1nIwLfizLKJtWhG/1VZUFy3rFq
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:28 2025 by rpki-client