Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          WqTtPIYo92srUV6S07AfcE6vanX+xSO9SzJEiITPNUM=
Subject key identifier:   27:75:59:04:1D:8D:5A:DA:F9:FF:BA:B0:F4:7F:7B:84:1D:CD:EC:39
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       35AD5CF3E0F6AA2CCBEC2AD56EA121A96B0A4983
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:35 +0000
ROA not before:           Mon 01 Jul 2024 00:59:35 +0000
ROA not after:            Mon 30 Jun 2025 01:04:35 +0000
asID:                     58369
IP address blocks:        116.197.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ad:5c:f3:e0:f6:aa:2c:cb:ec:2a:d5:6e:a1:21:a9:6b:0a:49:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:35 2024 GMT
            Not After : Jun 30 01:04:35 2025 GMT
        Subject: CN=277559041D8D5ADAF9FFBAB0F47F7B841DCDEC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:d8:63:3a:cf:4d:1b:58:13:eb:99:9e:ce:
                    42:bb:4e:e8:e8:b3:c1:95:f7:da:52:43:ed:44:e4:
                    4f:b6:2f:47:2b:44:9e:41:17:07:47:07:6f:d9:ab:
                    6a:6f:fa:da:72:5c:9a:b5:e8:d8:71:85:9f:5c:eb:
                    99:cf:8e:7b:d2:b6:6e:78:89:4a:28:15:2b:b2:07:
                    1c:ec:9b:14:4e:d7:5e:29:2b:24:d8:45:93:b7:aa:
                    4e:87:02:5e:9a:04:67:fe:d5:c4:07:0c:bc:eb:d7:
                    2f:36:00:c2:eb:46:24:7a:33:30:df:dc:fa:c7:67:
                    5a:13:1c:74:38:bf:53:88:46:4f:ba:bc:c3:f1:9b:
                    44:7d:14:f9:d9:02:6e:e4:68:d6:c0:97:42:08:5d:
                    67:58:dd:28:41:52:0c:68:d4:f7:62:7e:58:b9:98:
                    df:70:20:b4:dd:fa:cd:17:10:3f:c6:4c:9f:41:55:
                    72:29:f1:bc:ea:a7:18:08:ac:f8:dc:8b:55:78:38:
                    e5:e4:f9:15:09:10:43:c0:6c:96:4e:b7:55:2e:3c:
                    3b:48:01:68:f4:11:69:12:80:69:ec:18:b7:e0:5f:
                    b5:f6:8a:35:58:77:91:1f:87:e9:b6:bd:b7:3f:d1:
                    79:7c:04:95:05:64:80:d0:2b:be:49:84:1a:3b:6a:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:59:04:1D:8D:5A:DA:F9:FF:BA:B0:F4:7F:7B:84:1D:CD:EC:39
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9c:62:36:bd:a1:b1:75:c3:c3:59:ad:c6:89:f2:7a:da:55:
         39:8f:b4:21:86:e1:0b:84:fc:b4:2c:a9:93:8e:30:ca:09:04:
         bc:c3:d0:be:af:76:02:2d:03:2a:7f:00:79:16:cf:ac:ba:53:
         a5:01:d4:ca:8e:55:d5:49:24:b5:3f:7f:a8:3e:8c:1c:2d:2e:
         c6:7a:54:cc:12:fa:58:3e:5a:af:90:ba:23:f9:5a:05:0e:97:
         b8:bc:78:d0:16:cd:10:00:3f:db:1e:5a:09:c0:d4:c7:60:d9:
         cf:55:f7:a5:c2:d5:ac:05:65:c6:fc:ef:38:8d:31:5e:8c:95:
         a5:95:2d:47:d9:05:01:c7:d8:f4:b5:78:d6:15:1f:7f:9c:07:
         3d:58:d7:58:f7:e7:e4:2d:3e:28:81:c1:b1:1f:41:84:87:02:
         aa:d0:eb:1f:d2:68:5a:25:01:ad:e4:e2:05:8c:90:e3:66:14:
         c1:07:11:fa:e3:65:90:11:e8:ef:2c:dc:e5:67:5e:8a:2a:ee:
         c8:8c:00:9c:27:27:ce:f2:52:0e:d5:b8:e8:e5:c6:93:58:09:
         8b:0c:68:18:f7:e1:90:23:28:43:5e:0d:1f:86:45:2e:22:e9:
         6e:f5:83:ce:01:e2:e5:d3:9f:25:c7:bb:8c:f5:e3:a9:08:d0:
         fc:50:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org