Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa
File:                     3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          L5e35M8gDBj/2JCG9wrEfu331iWu2rxRKfUyFncxt8c=
Subject key identifier:   8E:D9:A5:6A:42:03:A7:C8:8A:B3:E1:88:00:A5:EA:C2:8A:49:74:38
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       07CBEE975179DAE46CDE61021B18103848E9AC91
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:39 +0000
ROA not before:           Mon 02 Jun 2025 01:58:39 +0000
ROA not after:            Mon 01 Jun 2026 02:03:39 +0000
asID:                     58369
IP address blocks:        116.197.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cb:ee:97:51:79:da:e4:6c:de:61:02:1b:18:10:38:48:e9:ac:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:39 2025 GMT
            Not After : Jun  1 02:03:39 2026 GMT
        Subject: CN=8ED9A56A4203A7C88AB3E18800A5EAC28A497438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:a6:27:50:30:7c:fd:d0:41:f9:56:03:9d:
                    1d:d5:bd:30:13:1e:56:30:0d:4b:99:93:4a:e8:71:
                    49:9a:08:92:7f:15:18:fb:6d:c4:32:4d:5d:45:63:
                    f8:ae:46:68:08:30:81:ee:bf:cc:d4:5b:18:bd:31:
                    c7:75:e3:e7:82:0c:12:65:46:3d:a4:54:15:74:f5:
                    6d:6e:28:8e:a9:ba:f1:f5:60:92:2a:11:60:fb:75:
                    3f:d6:60:46:5e:9c:3c:0a:5e:21:16:51:e4:2e:47:
                    93:17:c5:88:b6:82:dc:44:cd:99:8a:49:fb:3d:73:
                    78:40:50:68:64:18:63:e7:75:b2:7b:9b:a4:bd:4e:
                    49:58:41:97:4f:e9:d4:4d:10:f7:61:ba:ae:db:a9:
                    1d:d1:29:9b:56:70:8c:df:53:68:11:f9:eb:3b:ef:
                    36:6b:dd:d0:5d:29:d1:23:44:ec:cf:ea:14:86:76:
                    54:12:05:43:06:f5:1c:8a:f2:20:d4:89:c5:61:06:
                    e4:fc:a6:25:d4:71:0a:67:0f:58:2c:93:9b:f5:5f:
                    79:63:04:3e:9d:0c:78:7c:68:ac:22:71:3b:af:75:
                    2e:d3:7a:d7:af:1c:76:45:77:fc:41:0a:e6:ba:4b:
                    18:e6:fd:07:a1:7d:6c:c2:ee:cd:9c:f2:81:7b:c0:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D9:A5:6A:42:03:A7:C8:8A:B3:E1:88:00:A5:EA:C2:8A:49:74:38
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:7b:e2:03:ae:e4:cf:30:86:f3:22:7f:4e:b7:8d:14:c1:
         d2:61:b5:46:32:b1:3d:8f:89:5e:1d:a8:76:a7:78:6b:f2:37:
         55:23:49:27:86:df:aa:91:cb:27:f1:0a:f4:48:67:bd:c8:ed:
         c3:05:9b:d9:65:dc:95:f7:a7:b7:94:59:60:6a:f2:d6:f6:cb:
         bf:3a:66:29:ee:13:0a:27:80:da:d5:4f:fe:82:4f:c2:04:0d:
         2e:f5:0e:6a:dc:80:3f:5e:30:58:1c:e4:c4:f4:3a:99:25:85:
         0a:de:25:8f:4b:72:b5:45:2f:d8:37:b1:eb:c9:01:4a:69:1b:
         13:2d:0c:30:e9:3c:cc:3b:bf:86:04:3f:31:da:97:c5:ae:49:
         bc:8b:c0:26:53:1f:74:7c:b6:40:68:1c:d9:2b:a6:59:eb:a7:
         71:b2:58:ae:22:5b:cd:ed:0b:40:13:5b:b0:c6:34:fe:a7:ab:
         81:4e:82:e5:dc:3b:4d:22:9b:2e:75:b0:bf:d0:3c:13:79:08:
         59:ad:89:3d:92:ea:e6:c5:79:c2:50:32:b5:9b:a4:31:97:73:
         cc:ba:4a:fe:8b:b5:09:b3:4c:d2:0f:77:48:74:70:2a:cd:3a:
         b4:56:df:9a:d0:44:18:be:bd:39:12:e7:42:9e:d9:9c:1b:46:
         b8:6d:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:37 2025 by rpki-client