Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139342e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          rq5/i26/AcTg5IpSMpklvmwb2+sNv8J6dh8+Y5513C8=
Subject key identifier:   52:AD:C8:45:E7:7F:BD:DB:B7:AE:B5:44:F1:A9:26:F3:4A:3F:B5:E9
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       670F824E38DA1854A84F437B031A0658D1EC0809
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:51:57 +0000
ROA not before:           Fri 24 Nov 2023 03:46:57 +0000
ROA not after:            Fri 22 Nov 2024 03:51:57 +0000
asID:                     18059
IP address blocks:        202.78.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0f:82:4e:38:da:18:54:a8:4f:43:7b:03:1a:06:58:d1:ec:08:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:46:57 2023 GMT
            Not After : Nov 22 03:51:57 2024 GMT
        Subject: CN=52ADC845E77FBDDBB7AEB544F1A926F34A3FB5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:d6:6f:e1:3a:8c:0a:7a:a7:1d:8c:cc:6f:
                    6b:0d:92:ec:3f:3c:a9:ba:68:e4:7f:ed:b2:bc:d9:
                    5a:63:b3:24:fc:f5:33:b3:1a:72:6b:8a:aa:66:12:
                    8b:3b:1a:0c:a4:6d:f0:8e:20:42:ee:8a:a8:b9:78:
                    9b:60:65:4f:71:0f:64:d8:83:2d:ec:07:1f:d2:25:
                    45:f3:2d:12:1d:fd:16:38:ab:77:10:f4:db:96:5b:
                    66:c6:dc:72:3f:97:10:f8:01:67:9d:4e:a4:7f:de:
                    be:5f:c6:71:30:9e:fe:c0:c4:d1:62:f3:45:ea:85:
                    ac:b9:8d:b7:86:0d:ec:dc:a9:f6:cc:00:17:61:c6:
                    0a:29:b5:96:cc:c7:b3:0c:46:13:99:28:8a:1c:ce:
                    c1:fd:5e:d2:11:83:12:11:92:4c:90:1b:9a:39:00:
                    af:26:18:c8:2d:49:e0:09:70:e9:5c:a7:27:c9:0d:
                    2f:9a:c9:25:6f:26:4d:bf:3b:2d:fe:35:11:e1:77:
                    da:d1:e4:7d:31:b8:7c:13:47:d0:24:c0:0b:23:75:
                    64:e6:79:7e:f8:4b:b7:9c:fc:5e:28:dd:40:34:38:
                    d0:f6:ef:17:fa:6b:68:a1:08:5c:0b:76:d2:7b:2c:
                    37:4e:8c:59:f8:15:2d:66:92:05:3c:58:c6:5c:c0:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AD:C8:45:E7:7F:BD:DB:B7:AE:B5:44:F1:A9:26:F3:4A:3F:B5:E9
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:8e:ac:8c:b3:85:db:6c:3d:3c:18:1f:4d:47:7d:b2:16:
         98:87:71:40:b8:6c:b3:4f:82:e3:3f:1b:fd:dc:76:fe:82:89:
         df:23:72:1f:d8:c1:13:5e:91:ee:80:25:b2:a4:88:6b:24:12:
         85:d6:b6:7e:33:e8:94:9b:cc:7a:b4:6d:d7:a3:01:0b:7a:bf:
         d8:e3:59:ff:54:88:ed:76:9a:b2:6b:0f:0b:3a:00:2d:d9:a7:
         2f:89:3e:f2:51:7e:55:4c:aa:bb:ad:49:1b:ab:c9:7f:5a:03:
         b7:42:24:66:5d:e0:f6:22:3f:cd:aa:fa:be:fc:1e:93:f4:c8:
         c2:82:f1:b7:9c:2f:4c:b4:c1:29:c8:0a:e3:69:6f:8a:09:6b:
         d2:74:19:81:ae:ae:cb:15:25:1a:f2:ff:42:1a:7d:55:2a:9f:
         b4:58:23:3c:e4:dd:59:b8:35:d9:d7:a1:1b:45:7f:99:55:48:
         0e:3c:12:33:eb:bd:72:cb:b9:f5:7b:47:99:f9:b7:0f:07:7c:
         33:1d:14:cc:d8:7f:f3:e6:bc:8e:13:94:be:13:31:97:cf:6b:
         84:6a:91:82:66:b0:42:5b:e7:ad:a7:92:10:1c:2a:c5:ba:67:
         44:58:b2:18:ab:b7:05:61:75:cf:a4:72:7b:10:fa:03:84:f4:
         89:c7:d8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:44:29 2024 by rpki-client on console-fra.rpki-client.org