Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          FtQ62F4jnBN4r3t0/yMPT4TXmmklyUPI/cQzCYqXIQc=
Subject key identifier:   0F:F5:14:78:4A:34:A4:6C:A3:85:16:3C:54:F3:68:65:DA:90:EF:6D
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       2E04F518F66AB1EB3569BD08E651DE6729AAA348
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:33 +0000
ROA not before:           Mon 01 Jul 2024 00:59:33 +0000
ROA not after:            Mon 30 Jun 2025 01:04:33 +0000
asID:                     58369
IP address blocks:        116.197.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:04:f5:18:f6:6a:b1:eb:35:69:bd:08:e6:51:de:67:29:aa:a3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:33 2024 GMT
            Not After : Jun 30 01:04:33 2025 GMT
        Subject: CN=0FF514784A34A46CA385163C54F36865DA90EF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:55:17:73:d9:53:b1:43:ea:90:e5:79:72:
                    b7:ee:88:8c:69:0e:14:fa:4c:57:b7:bd:e4:6c:c8:
                    a6:fb:8b:d4:54:65:d6:13:53:4a:ab:cc:60:87:34:
                    69:ec:99:8e:f4:44:a7:60:d1:87:3d:dc:ed:1e:4e:
                    0e:02:13:89:ab:66:36:87:85:fc:71:6b:6c:76:4b:
                    88:d2:05:02:58:ca:44:c8:36:8b:66:78:31:3b:70:
                    dd:e9:dd:6f:0b:23:47:03:38:e5:d9:df:d8:6d:8a:
                    f0:7b:8f:b1:6a:10:f3:2f:71:54:ff:e9:7b:7c:c5:
                    2a:6b:58:ae:c4:dd:0d:0b:20:0e:f4:65:43:22:3a:
                    ce:a0:e7:58:cb:86:15:a4:56:5a:68:85:9f:d6:95:
                    d5:85:56:2b:ad:b8:89:8e:33:99:d7:85:af:a6:1b:
                    5b:e7:56:47:5d:26:86:ef:75:e2:9e:20:06:98:39:
                    b5:88:f0:2a:14:d2:7c:c3:7e:48:4c:db:cd:b0:19:
                    c5:84:13:e9:e3:bd:91:59:2c:c0:8d:c5:ae:87:20:
                    34:85:fb:40:3b:7e:d2:01:59:8c:92:74:d8:ae:1e:
                    a9:1f:0f:ab:77:38:17:c3:2f:0e:74:93:9c:52:bb:
                    5c:9c:fd:56:58:4c:84:b7:55:08:00:5b:96:40:da:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F5:14:78:4A:34:A4:6C:A3:85:16:3C:54:F3:68:65:DA:90:EF:6D
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:ac:24:52:69:7a:1f:6a:af:ee:a7:d5:a7:30:68:3a:9c:
         29:7c:da:2e:1a:3e:9d:94:a9:38:65:81:b3:81:b3:7c:6b:71:
         56:ee:8d:e7:5f:9a:9b:d9:82:c1:13:22:e6:4b:14:94:bf:0f:
         6e:37:33:f9:90:12:f3:ea:90:9b:a6:ad:b1:57:81:66:61:3a:
         a0:1a:79:53:bd:46:fe:e9:50:74:39:12:9c:dd:d3:c2:c1:1a:
         99:ed:f7:cc:73:ed:41:60:2a:0d:40:6b:a2:ac:d1:17:1b:05:
         00:12:22:c3:21:16:b1:b6:7a:e3:7d:41:da:32:1b:fd:d9:23:
         8e:46:54:14:9e:4e:79:82:c5:ce:d6:16:8b:2f:a1:44:19:c5:
         bb:bf:9d:f0:e8:2a:f0:51:8c:68:fd:fd:19:59:ac:cf:9c:1e:
         63:97:d1:48:e7:b0:c1:5f:87:e7:0c:29:57:02:05:aa:e6:bd:
         8f:37:cc:ee:e8:9e:d1:04:90:b4:42:59:2c:22:b0:64:5b:bb:
         03:d2:15:55:cc:19:68:d5:9f:b1:e8:71:0b:c2:0b:36:dc:d0:
         05:56:18:56:07:53:ae:72:11:98:64:0d:e3:04:7b:7c:36:50:
         fb:d0:76:26:71:e8:23:69:94:01:3a:c8:12:cd:e6:82:18:05:
         96:0d:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org