Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          djHrna74Yyw7KI2eNR04M7+SjXElSskxJv9QgYQ7xOI=
Subject key identifier:   29:AB:D1:B2:42:39:42:15:7C:7F:EE:CF:5C:46:99:34:A9:A1:0A:89
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       346D78255D4F62E2A065A97D856DA9E49CD72D73
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:41 +0000
ROA not before:           Mon 02 Jun 2025 01:58:41 +0000
ROA not after:            Mon 01 Jun 2026 02:03:41 +0000
asID:                     58369
IP address blocks:        116.197.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:78:25:5d:4f:62:e2:a0:65:a9:7d:85:6d:a9:e4:9c:d7:2d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:41 2025 GMT
            Not After : Jun  1 02:03:41 2026 GMT
        Subject: CN=29ABD1B2423942157C7FEECF5C469934A9A10A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:53:14:64:b5:7a:83:4f:f4:46:0e:9d:75:
                    90:b6:23:41:ef:ad:fe:80:b6:f8:f6:e9:e9:d3:a2:
                    d6:0b:a6:32:23:a3:c9:9a:f0:c0:5b:b2:d4:49:70:
                    1a:89:97:23:f7:ea:fe:2a:51:bd:9d:ed:94:ec:d6:
                    6e:74:bf:ce:ad:67:f5:17:82:6a:c6:49:2e:86:36:
                    16:a8:97:91:16:e4:76:83:e7:cd:74:8c:78:53:5d:
                    ec:24:29:59:bc:d7:40:2b:07:8b:c2:28:98:4c:48:
                    83:b5:fc:ae:55:3e:6a:aa:06:40:69:97:45:73:37:
                    2f:0d:32:c7:23:6f:75:a4:9e:eb:ed:48:12:4b:a5:
                    dd:23:8b:c0:d0:1e:44:21:97:b1:90:31:4a:2e:13:
                    6c:37:85:d1:89:41:10:ef:11:07:c9:97:15:4e:a5:
                    c2:80:80:9a:dc:8f:19:dc:de:cc:6f:a3:44:10:6a:
                    10:ff:33:84:9d:9d:c5:8c:7c:40:4d:20:7b:b4:11:
                    77:7b:a3:6e:0d:82:ec:c3:2c:25:b5:6d:88:95:9a:
                    88:a1:67:ac:0c:35:52:76:6c:eb:15:58:90:9a:1d:
                    ac:2f:0a:58:57:a1:3e:f6:6a:a6:f8:87:99:d6:8e:
                    8f:b8:f4:d6:29:e5:07:99:87:6b:22:4e:9d:90:21:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AB:D1:B2:42:39:42:15:7C:7F:EE:CF:5C:46:99:34:A9:A1:0A:89
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:8e:06:6f:f4:ef:37:4f:60:33:74:66:9c:f9:44:d2:e4:3d:
         c0:01:c3:21:0a:d3:fb:ab:d6:51:d8:73:06:0c:d1:ea:82:5c:
         58:8d:8d:18:01:4c:17:5f:05:bb:b7:e4:50:6c:81:33:5b:05:
         ec:6b:bd:b3:82:1a:a9:d3:6d:d0:10:f8:45:bf:28:13:24:c2:
         53:0e:4d:cb:c6:15:9f:26:07:7a:82:c7:56:13:23:d2:5d:73:
         21:25:58:c6:6a:b3:bf:1b:11:a9:47:0b:36:3d:93:ca:fd:86:
         8c:0a:1a:cb:b1:d3:25:a9:4c:73:cf:73:4e:3c:36:a7:83:56:
         68:50:db:5f:0d:6a:68:b1:82:88:7a:10:34:00:55:32:c3:b3:
         42:f4:41:a9:0f:2f:fe:6b:00:91:5b:c7:b4:a6:87:de:50:0d:
         51:11:21:b3:93:89:fb:ab:62:c1:11:90:2d:0f:5f:f0:c4:46:
         a4:de:f5:ce:4f:b9:af:6b:b0:6d:84:ca:7d:6e:67:3a:4d:51:
         8f:fc:1a:d7:e6:95:e6:0b:a5:22:6c:ae:ae:a8:f5:1c:89:0d:
         8e:a5:43:04:95:ce:58:90:a0:fd:67:3e:cb:21:3e:47:11:0b:
         8a:d2:73:c4:85:8e:13:14:85:2c:32:89:ff:59:5f:49:24:df:
         63:8c:f5:53
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUNG14JV1PYuKgZal9hW2p5JzXLXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNTA2MDIwMTU4NDFaFw0yNjA2MDEwMjAzNDFaMDMxMTAvBgNV
BAMTKDI5QUJEMUIyNDIzOTQyMTU3QzdGRUVDRjVDNDY5OTM0QTlBMTBBODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1FMUZLV6g0/0Rg6ddZC2I0Hv
rf6Atvj26enTotYLpjIjo8ma8MBbstRJcBqJlyP36v4qUb2d7ZTs1m50v86tZ/UX
gmrGSS6GNhaol5EW5HaD5810jHhTXewkKVm810ArB4vCKJhMSIO1/K5VPmqqBkBp
l0VzNy8NMscjb3WknuvtSBJLpd0ji8DQHkQhl7GQMUouE2w3hdGJQRDvEQfJlxVO
pcKAgJrcjxnc3sxvo0QQahD/M4SdncWMfEBNIHu0EXd7o24NguzDLCW1bYiVmoih
Z6wMNVJ2bOsVWJCaHawvClhXoT72aqb4h5nWjo+49NYp5QeZh2siTp2QIe4vAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUKavRskI5QhV8f+7PXEaZNKmhCokwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMzMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBdMWGMA0GCSqG
SIb3DQEBCwUAA4IBAQBljgZv9O83T2AzdGac+UTS5D3AAcMhCtP7q9ZR2HMGDNHq
glxYjY0YAUwXXwW7t+RQbIEzWwXsa72zghqp023QEPhFvygTJMJTDk3LxhWfJgd6
gsdWEyPSXXMhJVjGarO/GxGpRws2PZPK/YaMChrLsdMlqUxzz3NOPDang1ZoUNtf
DWposYKIehA0AFUyw7NC9EGpDy/+awCRW8e0pofeUA1RESGzk4n7q2LBEZAtD1/w
xEak3vXOT7mva7BthMp9bmc6TVGP/BrX5pXmC6UibK6uqPUciQ2OpUMElc5YkKD9
Zz7LIT5HEQuK0nPEhY4TFIUsMon/WV9JJN9jjPVT
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:39 2025 by rpki-client