Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139362e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          MAtW2C+vikjnnCUt6WVXL+oYO0JHs1BSct0lTXlrKRg=
Subject key identifier:   1D:82:22:AF:A2:5F:72:61:4E:74:D9:24:68:89:99:A6:77:90:F4:24
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       76AAB90D70ADAC4EA5F6A8DBE60EF37D32BFFC56
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:52:33 +0000
ROA not before:           Fri 24 Nov 2023 03:47:33 +0000
ROA not after:            Fri 22 Nov 2024 03:52:33 +0000
asID:                     18059
IP address blocks:        202.78.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:aa:b9:0d:70:ad:ac:4e:a5:f6:a8:db:e6:0e:f3:7d:32:bf:fc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:47:33 2023 GMT
            Not After : Nov 22 03:52:33 2024 GMT
        Subject: CN=1D8222AFA25F72614E74D924688999A67790F424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:5a:02:12:62:73:0c:50:51:63:be:f9:37:
                    c6:52:58:c7:3d:1d:6a:d0:0d:36:a6:b1:03:1e:b5:
                    74:09:a4:07:04:ab:e0:78:40:31:73:49:55:a3:3f:
                    fb:f3:9a:fc:81:3d:3a:ed:a7:99:ed:fe:96:b5:20:
                    1b:e3:7d:04:b7:f0:6a:7d:11:3d:3f:1b:fe:70:31:
                    5a:7a:f7:05:60:a9:c3:03:38:e3:34:7e:7f:dc:ec:
                    12:f5:cb:a3:3e:94:98:84:8d:f4:9b:40:1b:4a:66:
                    a2:e2:91:b4:67:32:35:54:71:b7:dc:2f:ac:eb:88:
                    28:fb:e1:e4:0a:b0:0f:0a:61:13:22:e0:c8:f8:86:
                    ff:b7:15:5a:2e:cb:8d:f1:1e:df:52:8c:1f:fb:7a:
                    55:8f:50:f9:7d:2c:41:2c:12:4b:91:70:99:8c:78:
                    92:df:ff:87:91:f6:0b:13:1f:f3:f0:da:7a:ab:1c:
                    98:94:e1:f7:d1:eb:09:19:11:6d:d0:a6:b1:1a:26:
                    00:b8:ae:8c:62:42:6c:4a:0e:2d:da:32:da:8f:64:
                    a3:36:9c:de:50:63:9f:03:e6:e6:d9:70:e0:66:72:
                    46:42:91:8b:b7:ae:e9:13:89:8a:9a:5d:34:c2:d1:
                    a3:b9:2d:d5:86:57:0d:b2:b7:7a:12:e1:78:d3:57:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:82:22:AF:A2:5F:72:61:4E:74:D9:24:68:89:99:A6:77:90:F4:24
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:fc:40:ec:95:26:1b:20:45:7d:b2:b3:38:b2:e5:92:6f:
         49:4f:e1:57:41:16:e6:b4:96:07:30:12:fb:67:17:51:58:5f:
         0d:a8:1e:d0:7e:0f:26:48:ce:5f:89:65:5e:32:a1:19:a6:bf:
         4d:00:63:db:74:af:f1:07:b4:b6:d0:fb:fa:63:27:ce:1d:26:
         2e:39:23:ff:c6:da:19:cd:16:c2:c5:74:4b:d0:77:3e:23:4f:
         1d:e7:1e:ce:c1:f8:e2:a1:c1:60:3c:c9:af:d5:19:ae:f1:4f:
         29:aa:78:1a:b5:ef:63:48:78:24:31:25:67:f6:a9:35:03:60:
         d0:1b:e8:b1:79:07:2d:27:11:88:2d:d4:e0:af:9b:d4:ea:ea:
         92:65:4b:ba:1f:2f:ce:0c:e8:85:b9:c3:0a:e4:e2:79:7c:e0:
         d8:65:1b:c2:1f:ce:88:13:92:9e:b9:f6:25:90:99:90:93:39:
         7d:e4:f0:4a:82:d7:56:ed:30:cc:be:68:70:36:d6:42:97:1c:
         a5:5e:ec:d3:7c:f3:20:07:c3:7b:b3:64:72:96:7f:2d:74:6d:
         db:92:0d:48:8a:a6:81:ca:04:2e:51:38:d7:71:b1:5b:f9:44:
         16:0b:d3:de:22:6a:f3:44:89:f0:9e:2c:8a:60:13:a9:3c:ad:
         d1:33:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org