Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa
File:                     3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          8+Ltryy+rxSIHFpdTcV9qdRNDdj0JaEFnURfC30r/ng=
Subject key identifier:   F7:6B:73:2D:56:6F:D1:72:E2:F8:09:0E:6E:58:66:D6:5C:AE:23:CE
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       4D956D9D90A8B00588EC2337C6B7651248033E59
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:32 +0000
ROA not before:           Mon 01 Jul 2024 00:59:32 +0000
ROA not after:            Mon 30 Jun 2025 01:04:32 +0000
asID:                     58369
IP address blocks:        116.197.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:95:6d:9d:90:a8:b0:05:88:ec:23:37:c6:b7:65:12:48:03:3e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:32 2024 GMT
            Not After : Jun 30 01:04:32 2025 GMT
        Subject: CN=F76B732D566FD172E2F8090E6E5866D65CAE23CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c2:88:45:99:38:d3:fe:6e:55:06:f8:10:24:
                    d8:d6:7b:b1:47:27:57:ec:5b:4c:dd:c2:a9:44:ea:
                    8a:c2:99:08:80:52:d9:cf:1b:24:91:02:99:ee:c4:
                    1d:3f:81:f3:dd:e3:93:5e:0a:29:71:6d:f5:d6:02:
                    cb:d5:b0:15:49:1b:dc:96:13:0c:b0:cc:c2:45:7c:
                    0a:49:d2:94:cd:1a:16:0b:fa:51:b7:02:cb:86:69:
                    1a:66:b1:42:99:8d:89:b4:46:12:ee:cb:e4:20:1c:
                    5d:9d:9a:88:30:9e:13:03:62:f2:a2:44:98:79:a1:
                    65:ae:d2:33:6e:6a:40:90:f3:8c:58:02:43:f8:3c:
                    ac:0e:d5:3e:7b:af:a3:83:f4:30:61:f8:fd:53:61:
                    b7:c3:7b:a6:96:97:07:dc:80:b7:a8:cc:9b:0a:bd:
                    ac:b6:8f:36:37:2e:6e:9f:78:a9:f5:b7:99:15:05:
                    b4:03:55:fb:ca:48:e9:a1:d5:03:65:17:00:ca:d2:
                    1f:64:42:d7:e7:0d:09:48:43:13:17:b3:e1:7d:5d:
                    36:f1:67:bc:68:02:f2:bc:d2:c4:2d:85:2c:43:e0:
                    fa:e4:55:33:4d:9b:d5:aa:b2:05:9c:fe:90:56:ad:
                    60:0e:7b:1c:0a:d3:16:18:04:5c:fe:bc:fd:bd:44:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:73:2D:56:6F:D1:72:E2:F8:09:0E:6E:58:66:D6:5C:AE:23:CE
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:af:34:ea:71:7b:2b:3e:7c:df:c9:d0:45:d8:7c:e9:39:
         17:db:63:66:85:12:1c:19:0d:bf:75:93:40:45:2e:02:31:eb:
         6a:95:85:03:1d:65:dd:5e:85:9c:b4:96:21:c1:78:fc:ac:a3:
         7f:a7:46:e9:54:0c:d8:09:43:3f:79:f8:2a:75:56:d5:a8:de:
         bc:d1:ea:4b:71:1d:4b:c6:bc:cb:80:f6:d2:94:0e:29:8d:67:
         3d:10:e5:82:c3:d3:b7:05:4a:cc:41:7c:2c:94:27:22:bb:ad:
         c4:fb:cd:ac:c8:1e:59:56:13:93:90:3f:39:12:79:ed:4b:2d:
         d1:0a:30:59:4d:56:91:f4:a1:7e:2a:33:3a:d3:66:1e:fc:07:
         c8:7f:26:5d:3e:99:d4:72:11:14:1f:9a:72:36:dc:e8:d5:f3:
         78:03:57:85:b7:ce:45:61:de:5e:2d:e2:d5:1d:55:8f:ae:93:
         da:cc:bf:73:35:2a:51:66:15:ad:13:fd:53:ef:46:55:93:43:
         bb:7f:ec:a1:70:19:bf:84:6e:67:ca:b6:46:d4:55:b6:19:0f:
         0e:f5:80:7b:75:01:b6:4e:0c:d9:88:b7:ff:0a:23:fb:a0:0f:
         3a:e5:ef:f5:8e:43:f1:da:7b:0a:c4:5b:fa:81:f8:e3:ac:50:
         d6:df:86:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org