Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          Mw5MDEWp5uMnAUUM+izYdBgcPtIQqeyo3eHq17rke64=
Subject key identifier:   C5:CE:18:23:80:E0:5B:46:1A:11:51:64:56:44:9F:99:A5:F6:C0:9F
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       0385ED9099F088A95A203E579DB75D76008DA5BF
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:38 +0000
ROA not before:           Mon 02 Jun 2025 01:58:38 +0000
ROA not after:            Mon 01 Jun 2026 02:03:38 +0000
asID:                     58369
IP address blocks:        116.197.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:85:ed:90:99:f0:88:a9:5a:20:3e:57:9d:b7:5d:76:00:8d:a5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:38 2025 GMT
            Not After : Jun  1 02:03:38 2026 GMT
        Subject: CN=C5CE182380E05B461A11516456449F99A5F6C09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:95:c3:11:bc:ac:70:0b:78:e4:c2:e8:b8:70:
                    e9:0c:3b:2d:d9:cc:fe:aa:f7:db:bf:ce:61:a4:4a:
                    76:38:2d:cc:ac:64:23:fc:29:27:02:d8:a3:e9:7c:
                    eb:d3:06:ea:39:ba:8e:73:78:d6:3c:7e:4a:df:ed:
                    d0:87:bc:9a:97:a5:13:b7:3a:a5:20:5b:ee:89:e0:
                    dc:51:32:e1:4d:9c:54:72:9e:94:ab:98:d4:1a:1d:
                    f8:f4:78:d2:12:5f:e8:49:8b:e7:38:d2:04:16:46:
                    32:35:7c:c2:a1:36:57:fe:46:16:0d:a9:3c:ec:99:
                    6a:42:3c:6e:94:ae:62:f7:2a:85:83:fc:3e:33:90:
                    6e:b8:51:9e:16:26:fa:46:e9:8d:e8:34:fb:61:7e:
                    70:49:56:e8:10:55:d2:4e:68:d3:7d:84:21:9a:26:
                    8f:4c:9a:40:f4:9e:dc:28:d0:95:14:10:38:3e:74:
                    f5:d6:33:4f:52:63:7b:08:3a:0f:7d:e8:46:19:69:
                    4a:66:40:da:2f:da:f8:12:6f:75:fd:c3:ad:ae:fb:
                    dc:49:4a:66:96:2a:96:2e:83:3e:7d:5d:b6:b6:01:
                    0a:e3:a1:d8:5b:2a:70:74:64:4e:5f:3d:12:09:27:
                    c9:51:9c:0b:df:d8:05:7b:9e:f5:00:66:c0:94:5c:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CE:18:23:80:E0:5B:46:1A:11:51:64:56:44:9F:99:A5:F6:C0:9F
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:3e:f3:f9:7e:3c:ff:a7:78:7c:2f:d2:b8:a8:32:4d:52:
         1e:f0:b3:c4:47:f6:c0:db:65:84:d6:38:3f:32:a3:4e:9a:1f:
         4d:10:9d:f4:a4:7c:40:d3:ce:77:aa:92:80:71:da:1f:c8:fc:
         e9:bc:c4:da:35:3c:a5:eb:fd:ef:f0:8f:a3:7a:10:31:13:32:
         06:51:2c:48:e6:4f:e4:28:f1:78:53:88:f5:cc:bf:69:96:51:
         2f:4f:62:ac:1d:21:94:80:39:0b:4c:25:9e:d0:9f:e7:1d:f7:
         80:d4:3e:ec:1d:66:83:a8:fb:c2:7b:a0:6a:21:3e:d3:2c:fb:
         f2:18:a3:7a:5c:19:0d:e3:3d:9f:89:d8:aa:c8:43:b3:4a:fe:
         4d:2e:11:19:09:45:fe:9f:62:00:c0:e5:7a:14:69:23:2e:95:
         4c:ee:d3:9e:aa:5d:38:cd:d5:2f:34:bf:46:e9:0b:ca:39:9e:
         46:55:e3:f3:ad:4a:d5:66:3a:f0:b6:da:28:d7:2c:af:fd:16:
         b7:e7:07:86:36:21:c3:3f:13:46:3d:67:e2:5b:24:6c:70:a4:
         10:9b:cc:b2:a4:ac:5f:c6:16:c0:15:8c:a9:46:8c:b5:00:d8:
         3d:64:67:3f:0f:39:e5:74:4d:90:38:e1:c7:d8:8c:bd:1b:96:
         b4:c3:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:15 2025 by rpki-client