Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          jYh4lWpCXY8vpKLNFN+/79dwFUOtM0wiE3JE7fqUbJk=
Subject key identifier:   EE:76:09:1E:C9:17:A0:C0:35:CD:7E:F1:3B:FA:4A:10:90:03:68:88
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       088E21F6F48179A07C42B70BA02304C7C6555AFC
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:32 +0000
ROA not before:           Mon 01 Jul 2024 00:59:32 +0000
ROA not after:            Mon 30 Jun 2025 01:04:32 +0000
asID:                     58369
IP address blocks:        116.197.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:21:f6:f4:81:79:a0:7c:42:b7:0b:a0:23:04:c7:c6:55:5a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:32 2024 GMT
            Not After : Jun 30 01:04:32 2025 GMT
        Subject: CN=EE76091EC917A0C035CD7EF13BFA4A1090036888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:73:93:96:a1:22:be:32:55:de:a6:b2:11:
                    9d:b1:b8:b7:4a:90:82:62:dc:43:dd:96:08:ce:81:
                    51:f6:83:72:c8:01:ee:51:9d:dc:ae:e2:e4:c2:e4:
                    e1:3a:96:cd:46:f1:5b:d3:72:6f:77:b6:85:74:37:
                    bf:33:d8:c2:2d:05:26:8f:6d:ab:55:79:ba:85:d8:
                    90:26:7c:5b:30:65:d4:e6:a2:43:f7:e3:fc:21:90:
                    c9:93:f9:18:99:3d:8b:64:dc:27:cb:f3:00:f4:81:
                    c6:6c:73:a7:9d:fd:4c:4d:a6:fc:c4:3d:6d:6f:a8:
                    3a:51:ff:0a:29:ff:76:ad:65:59:fa:be:91:3c:27:
                    80:ae:5e:8e:a9:b0:61:89:43:15:cd:29:56:b8:e7:
                    a9:b1:aa:96:fd:9c:3b:a9:cd:69:d5:81:ff:62:fe:
                    9b:c2:c4:c2:63:42:3a:01:61:f9:32:d0:ce:b7:46:
                    14:35:25:6e:aa:c0:81:a5:7c:1a:48:90:2e:49:43:
                    e7:ab:f4:06:5f:ae:57:66:5a:39:a5:de:0f:73:d8:
                    7a:e3:72:99:8d:1a:48:94:fa:97:a2:03:fd:c6:9e:
                    0b:7f:39:c2:6e:e8:e9:42:c8:b9:2f:c7:43:71:69:
                    95:ee:ff:92:f1:73:e5:86:76:08:a1:52:85:82:b7:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:76:09:1E:C9:17:A0:C0:35:CD:7E:F1:3B:FA:4A:10:90:03:68:88
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:75:be:1a:52:07:8b:23:89:ef:85:2d:ea:b0:d0:b5:49:f8:
         b2:f0:c5:0d:1b:3c:5b:58:c6:47:85:ad:1d:fe:1e:b6:de:18:
         de:f6:4a:95:70:b3:59:c3:bb:65:c0:22:0f:7d:f0:f5:e8:ea:
         bc:d1:f8:25:0d:2b:56:e7:62:09:26:1c:39:3f:3d:ca:15:10:
         14:95:60:cf:5d:57:66:7a:5c:f3:f5:98:57:ed:7c:6d:19:7a:
         fc:57:7f:a1:c0:88:d4:8d:b0:b8:33:80:56:b0:23:96:57:83:
         ee:9f:f2:0b:20:f3:26:f4:7e:3a:d5:46:b5:42:71:2c:9a:0f:
         cf:05:7a:ec:6e:88:ca:5f:67:5c:56:c5:77:d2:ef:85:a8:12:
         af:8c:7d:21:3e:aa:07:27:af:f2:f2:6a:3f:ce:83:1b:15:ac:
         ca:bb:1f:7d:85:96:c4:c5:3b:af:20:81:9b:e3:5f:1c:91:af:
         2c:55:7e:40:84:d8:f6:ce:54:ce:61:ef:f4:dd:82:c1:88:6b:
         a6:f8:80:25:2d:e5:0b:a1:86:d3:ad:66:41:da:8c:b0:2f:0a:
         c7:db:9b:74:41:4f:79:b8:1a:c3:c3:a7:2e:86:e9:b3:41:4f:
         d1:34:32:7a:90:ad:8c:92:04:e8:13:5a:83:54:e4:56:70:f8:
         ba:55:58:01
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCI4h9vSBeaB8QrcLoCMEx8ZVWvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNDA3MDEwMDU5MzJaFw0yNTA2MzAwMTA0MzJaMDMxMTAvBgNV
BAMTKEVFNzYwOTFFQzkxN0EwQzAzNUNEN0VGMTNCRkE0QTEwOTAwMzY4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdnOTlqEivjJV3qayEZ2xuLdK
kIJi3EPdlgjOgVH2g3LIAe5Rndyu4uTC5OE6ls1G8VvTcm93toV0N78z2MItBSaP
batVebqF2JAmfFswZdTmokP34/whkMmT+RiZPYtk3CfL8wD0gcZsc6ed/UxNpvzE
PW1vqDpR/wop/3atZVn6vpE8J4CuXo6psGGJQxXNKVa456mxqpb9nDupzWnVgf9i
/pvCxMJjQjoBYfky0M63RhQ1JW6qwIGlfBpIkC5JQ+er9AZfrldmWjml3g9z2Hrj
cpmNGkiU+peiA/3Gngt/OcJu6OlCyLkvx0NxaZXu/5Lxc+WGdgihUoWCtwblAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7nYJHskXoMA1zX7xO/pKEJADaIgwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMzMzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBdMWEMA0GCSqG
SIb3DQEBCwUAA4IBAQCTdb4aUgeLI4nvhS3qsNC1Sfiy8MUNGzxbWMZHha0d/h62
3hje9kqVcLNZw7tlwCIPffD16Oq80fglDStW52IJJhw5Pz3KFRAUlWDPXVdmelzz
9ZhX7XxtGXr8V3+hwIjUjbC4M4BWsCOWV4Pun/ILIPMm9H461Ua1QnEsmg/PBXrs
bojKX2dcVsV30u+FqBKvjH0hPqoHJ6/y8mo/zoMbFazKux99hZbExTuvIIGb418c
ka8sVX5AhNj2zlTOYe/03YLBiGum+IAlLeULoYbTrWZB2oywLwrH25t0QU95uBrD
w6cuhumzQU/RNDJ6kK2MkgToE1qDVORWcPi6VVgB
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org