Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          z5hqhXTcOmDgigSIEPXgNeuL1qcYCc/aD1deLwbwmus=
Subject key identifier:   E7:5B:66:77:EF:66:CB:38:62:B2:6E:19:FE:81:C3:1A:25:80:AF:36
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       211BDC1D06171C86FC0284F8431E807F1D634409
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:33 +0000
ROA not before:           Mon 31 Jul 2023 00:02:33 +0000
ROA not after:            Mon 29 Jul 2024 00:07:33 +0000
asID:                     58369
IP address blocks:        116.197.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1b:dc:1d:06:17:1c:86:fc:02:84:f8:43:1e:80:7f:1d:63:44:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:33 2023 GMT
            Not After : Jul 29 00:07:33 2024 GMT
        Subject: CN=E75B6677EF66CB3862B26E19FE81C31A2580AF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:72:26:da:b6:17:c0:e7:8c:bf:fb:29:c1:
                    30:cf:ab:5a:8b:dc:c7:ff:c6:71:0e:c4:02:3d:c6:
                    f1:8e:0a:d2:91:d8:d4:a1:cc:20:f1:27:6f:b3:3f:
                    97:0f:22:92:ed:2b:ba:97:8d:56:28:51:c2:8c:cb:
                    d5:d9:19:f4:ab:58:58:7b:e0:2f:28:c5:b4:89:02:
                    85:4e:f5:ac:36:d0:66:c3:cc:da:eb:07:76:b7:cd:
                    2a:60:d0:63:55:20:72:60:78:b1:d7:f3:95:ea:08:
                    43:9e:fa:f2:6d:45:72:f0:0f:f3:d9:c7:c0:af:d9:
                    00:45:90:27:a3:c1:9a:1c:4f:e1:ec:03:71:1b:65:
                    77:29:24:84:c7:a1:61:30:1e:46:45:0d:c7:fe:89:
                    4e:fb:86:8b:e9:51:38:f1:91:d7:1a:92:2a:8f:39:
                    c5:27:6d:3d:6c:0b:6a:2a:45:0a:65:c9:6c:12:20:
                    bd:ba:5d:66:22:3d:d9:95:0a:b3:1f:8c:f8:5d:00:
                    d4:1b:fd:14:a6:23:15:44:a8:e4:38:bb:f8:6e:07:
                    f7:23:1f:ef:33:bf:db:d1:28:eb:46:45:5c:48:22:
                    9f:c9:83:d1:fb:21:53:86:1e:9b:41:c7:d8:1b:31:
                    de:79:bd:ea:d2:a6:ff:8a:57:9a:b2:83:88:d1:fa:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5B:66:77:EF:66:CB:38:62:B2:6E:19:FE:81:C3:1A:25:80:AF:36
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:3e:be:75:43:fb:0f:6d:67:0e:06:c1:83:dd:bb:2a:08:c9:
         20:ec:f4:6b:32:fb:81:13:65:67:1d:d1:2e:16:8d:eb:b6:7f:
         1c:62:ff:99:cd:f8:a9:8c:5e:90:11:a2:21:70:3f:8c:5e:6f:
         34:a6:5f:35:4b:d7:cb:b7:06:cf:1f:eb:8c:1b:22:c9:75:37:
         cc:5e:50:eb:ce:6a:cd:3f:ce:4b:20:7e:1d:7a:35:ed:70:8d:
         34:49:70:dc:b7:b5:2c:34:e7:56:89:8c:b9:4b:b5:35:5b:67:
         86:de:b5:78:20:ff:a7:80:4c:60:0b:fc:05:d4:77:b4:7d:e7:
         e1:f4:e1:94:81:a8:72:f8:c8:6b:4e:92:d8:23:97:67:8a:71:
         8d:d0:ce:3b:72:3c:78:82:97:8a:85:08:e5:b3:ed:61:85:66:
         92:82:d1:ef:39:9c:1d:0c:34:8f:4d:a7:07:30:fa:c9:e1:2c:
         ba:e9:c3:3c:83:6f:ca:42:1e:51:01:81:e3:34:19:2c:19:65:
         86:73:fc:75:32:68:6c:96:8f:c1:46:45:6a:a2:ed:a2:d4:d4:
         99:d9:63:2a:a2:45:41:9e:37:c9:29:5b:89:77:e1:b2:a4:8c:
         25:a7:8a:bb:23:07:43:4c:de:80:95:56:dc:ef:ce:e5:dc:97:
         ef:72:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:57:34 2024 by rpki-client on console-ams.rpki-client.org