Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          PC6re3nCOb9sE8L/eTqEuEMknmcipJKq+g/0mbg27sg=
Subject key identifier:   97:8D:60:E1:33:D6:57:16:02:F4:46:4C:69:CD:54:47:AA:42:92:50
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       5D56ABBD10EB19535E379BEB38D456A099474D42
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:37 +0000
ROA not before:           Mon 02 Jun 2025 01:58:37 +0000
ROA not after:            Mon 01 Jun 2026 02:03:37 +0000
asID:                     58369
IP address blocks:        116.197.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:56:ab:bd:10:eb:19:53:5e:37:9b:eb:38:d4:56:a0:99:47:4d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:37 2025 GMT
            Not After : Jun  1 02:03:37 2026 GMT
        Subject: CN=978D60E133D6571602F4464C69CD5447AA429250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:1b:4a:66:5f:f8:85:b1:68:cd:ce:6e:cc:
                    94:11:b7:26:36:04:99:e2:66:e4:84:4d:a1:3d:60:
                    b4:da:2f:ff:09:32:4b:7c:1a:fb:20:4e:ce:05:3c:
                    ed:f8:c3:69:d4:ce:3a:0f:fd:9a:8f:cf:fe:1a:1c:
                    3c:a4:3b:40:17:56:b5:39:c4:b1:99:74:58:59:ed:
                    51:5f:b4:df:a9:5b:63:17:c7:65:75:7d:90:41:1b:
                    9f:ca:83:4e:1a:7d:22:da:82:bf:24:c9:72:26:55:
                    02:50:f0:2a:d1:ba:b5:2f:55:d0:a0:b4:51:55:71:
                    a2:ef:47:d6:92:7d:ff:98:34:86:41:7b:dd:8b:7c:
                    fc:0f:30:38:54:7b:c3:44:99:89:41:69:ce:f1:65:
                    28:45:9f:c1:0c:90:4d:12:66:1e:30:cd:43:cc:97:
                    b0:84:a3:52:5c:3f:54:fa:84:92:ce:07:25:96:35:
                    70:06:f8:df:cd:c0:50:3a:cf:44:c0:35:7b:a6:ed:
                    55:41:a2:cd:9e:b0:e9:b2:91:e2:9b:19:f1:fa:ee:
                    c4:b8:9f:63:6c:48:0a:e1:cb:68:86:38:95:e9:ec:
                    a2:14:9f:e5:55:ce:6e:41:a9:51:48:1f:ca:6b:15:
                    d5:86:03:21:6b:2d:07:7d:bd:34:e6:c4:c6:17:60:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:60:E1:33:D6:57:16:02:F4:46:4C:69:CD:54:47:AA:42:92:50
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:50:fb:11:3c:70:7a:68:1c:55:0c:d7:42:0d:ef:3b:e2:91:
         2f:b5:9a:18:00:19:02:45:1a:6d:39:76:96:0c:4c:c1:79:73:
         be:13:17:bc:74:46:d3:b2:75:98:9b:25:7c:3a:d5:51:75:a7:
         b1:cc:92:2b:14:dc:0e:2b:a1:03:38:ce:6d:57:6b:da:1e:f1:
         db:97:a9:83:a1:f0:78:c1:46:6b:8e:32:b7:27:59:77:cf:21:
         e7:88:ef:80:22:67:ac:bb:f9:8b:42:93:65:26:df:a1:e2:0e:
         7a:d7:b7:30:f0:e8:0e:c9:73:36:83:da:f9:f7:83:56:7e:ba:
         f9:f5:36:f5:d6:61:5b:ba:28:5a:45:6f:bf:75:87:4c:9d:6e:
         1a:c8:3f:80:7c:52:22:86:2e:97:0f:c5:f1:73:40:c7:ae:53:
         f7:3d:d2:36:ec:8d:98:17:3a:96:a2:34:09:05:ad:62:f4:57:
         a9:31:04:4a:e2:0f:7b:a8:2b:4f:f3:28:3b:51:9a:bb:b3:8b:
         5a:c8:b1:e0:3b:4c:ca:45:28:99:f3:d0:82:13:a4:9c:42:72:
         2f:85:23:b6:dc:48:4b:50:ec:db:8f:80:8f:8f:96:06:52:6b:
         c3:c2:65:19:1b:cc:e9:22:2a:12:68:a0:6a:78:17:f3:8a:73:
         b7:de:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:23 2025 by rpki-client