Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133312e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3133312e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          Anecbj3kWzq+BSFSVhpgwMbKXwJAUEjS7/h7bQwFbGA=
Subject key identifier:   B9:8E:62:17:5E:E0:85:60:EF:BB:B0:77:0A:0A:2F:F4:27:0F:6A:55
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       0B3854819FE357F45C50CECEB543CE9637B6D71F
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133312e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:29 +0000
ROA not before:           Mon 31 Jul 2023 00:02:29 +0000
ROA not after:            Mon 29 Jul 2024 00:07:29 +0000
asID:                     58369
IP address blocks:        116.197.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:38:54:81:9f:e3:57:f4:5c:50:ce:ce:b5:43:ce:96:37:b6:d7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:29 2023 GMT
            Not After : Jul 29 00:07:29 2024 GMT
        Subject: CN=B98E62175EE08560EFBBB0770A0A2FF4270F6A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:e4:29:11:d3:10:c4:0c:9c:cd:6d:79:f3:
                    35:b7:71:e1:09:10:24:85:b6:1a:ba:4f:14:67:b1:
                    0e:7e:15:e9:01:4b:73:b6:aa:20:d3:6f:65:3a:7a:
                    2f:65:fb:1d:9e:ca:c6:81:97:f2:64:a9:2c:7f:bd:
                    45:6a:87:39:9e:50:9f:f2:56:23:5c:7f:20:d9:70:
                    cd:5d:d9:e5:3a:30:f9:5b:6a:83:82:db:a5:f6:06:
                    ae:11:ff:52:a5:e2:1d:74:35:88:61:da:23:93:3f:
                    81:49:16:40:11:3a:d2:df:1e:a5:dd:bd:e1:71:06:
                    74:da:9f:0d:9a:f7:b5:19:c5:d9:07:e1:77:71:f1:
                    dd:cf:b2:55:9b:a0:08:2a:52:af:1f:bf:8f:e2:4f:
                    cf:14:85:32:30:34:74:47:47:e0:ba:68:b7:1d:6c:
                    a3:30:c0:26:19:d1:c1:6c:05:2a:b4:69:53:4b:34:
                    45:47:c0:bf:11:f1:b0:ec:67:ac:24:9b:ec:f2:7f:
                    ae:d6:55:3d:a8:2c:f4:de:14:9a:64:8f:76:a9:67:
                    52:e3:bc:3e:0e:5f:6e:08:74:5a:a2:3e:7b:28:2c:
                    c0:51:81:b1:19:14:36:bb:38:e5:22:59:95:21:fc:
                    83:c6:55:47:c8:9f:79:21:fe:1c:79:be:39:ea:00:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8E:62:17:5E:E0:85:60:EF:BB:B0:77:0A:0A:2F:F4:27:0F:6A:55
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133312e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b3:98:a1:21:7f:84:43:59:a5:d6:83:40:df:ca:bc:e1:90:
         e0:ef:72:09:18:5a:d9:77:ce:c4:28:03:91:5c:d6:dc:3f:3d:
         be:a5:77:08:45:93:e4:82:e1:8b:30:27:1e:5a:74:6b:4b:4c:
         b9:33:54:53:6b:82:16:ed:93:37:f2:31:d5:f9:ad:6c:58:ce:
         7e:92:69:09:7f:86:5d:83:e3:fc:1d:cb:1b:fa:0c:d6:8f:90:
         22:e0:ae:ab:30:54:0d:d4:d7:e1:6c:1b:54:80:d1:26:54:70:
         53:8f:d7:bf:d9:be:a1:bc:41:fb:4e:20:da:7d:2a:b2:1e:db:
         e5:7f:4a:b5:b2:a1:be:86:22:79:55:22:ac:15:9b:94:7e:44:
         b5:30:56:b2:26:75:91:d1:09:0f:06:26:5c:68:6e:46:c7:3b:
         3c:3d:f3:2a:65:35:f0:20:10:26:7f:59:1d:15:23:76:8d:ff:
         fe:b9:b4:b7:e5:22:6f:a5:3d:fb:c3:d6:0d:a7:e2:48:1b:0c:
         75:58:81:13:1f:08:a2:f8:05:60:0e:dd:82:ed:ce:ec:04:d9:
         c9:22:ed:0f:a5:fa:cf:19:0f:bd:01:5f:59:fe:d7:a2:67:aa:
         21:b6:00:af:04:e9:56:96:50:45:f4:2c:af:b0:ff:5d:52:6e:
         1e:8c:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:57:34 2024 by rpki-client on console-ams.rpki-client.org