Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          3SONSiD0rbr5XJkNc/fOoeL42Mo0lV8SZn9xTZSUOCQ=
Subject key identifier:   6B:46:22:70:4E:B3:29:9A:35:4A:EB:43:85:DE:24:A0:3A:CB:DC:97
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       4182FBBB42ABB0440808B5F5862AC76B2D535086
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:53:34 +0000
ROA not before:           Fri 24 Nov 2023 03:48:34 +0000
ROA not after:            Fri 22 Nov 2024 03:53:34 +0000
asID:                     18059
IP address blocks:        202.78.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:82:fb:bb:42:ab:b0:44:08:08:b5:f5:86:2a:c7:6b:2d:53:50:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:48:34 2023 GMT
            Not After : Nov 22 03:53:34 2024 GMT
        Subject: CN=6B4622704EB3299A354AEB4385DE24A03ACBDC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:99:91:3f:95:74:a8:2c:b9:2c:99:c9:e6:
                    5a:ff:18:49:c1:70:8f:2f:48:ba:db:14:27:46:38:
                    85:1e:f9:f9:1c:c8:c0:c2:28:22:c6:55:d3:9c:40:
                    c6:38:f6:85:ab:c2:f4:0f:28:46:19:ba:81:d0:b9:
                    ab:73:6d:f5:54:39:5c:eb:5f:12:d3:54:27:5f:5e:
                    c1:8d:e0:7d:46:35:e2:11:90:8d:63:8b:8b:5f:5c:
                    c9:4b:c5:c4:75:4b:0b:d3:38:05:e6:1a:e9:15:82:
                    fa:a2:82:db:c4:21:f5:b9:03:59:8d:04:1d:ff:4b:
                    f3:11:71:86:45:1a:e7:f8:52:f7:91:f0:b3:40:4f:
                    4d:cb:e2:0e:dd:2b:32:c1:d3:28:5b:d4:b5:2d:3e:
                    24:dd:fc:7d:2e:51:bf:54:08:6d:da:7f:80:5d:ef:
                    9a:73:30:78:6e:15:f0:69:0e:fb:ae:e9:7b:72:32:
                    fe:e5:f3:56:30:c1:1e:7f:c8:b7:39:14:60:81:c7:
                    2c:21:82:ce:a9:be:9c:0a:d4:00:00:eb:b0:3f:f9:
                    25:b3:ec:8c:61:bb:46:ae:20:1e:91:aa:c9:17:4e:
                    c1:e3:f9:37:e7:3e:0b:d5:e6:7a:24:6e:1c:ed:69:
                    23:55:e0:00:89:ac:de:f8:fa:a2:e8:6a:17:73:41:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:46:22:70:4E:B3:29:9A:35:4A:EB:43:85:DE:24:A0:3A:CB:DC:97
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:10:df:be:f5:4a:65:16:67:2f:99:ad:aa:ff:c9:5a:c3:4e:
         39:6a:70:bb:b6:b8:54:e9:68:89:cb:e1:88:99:3c:b6:78:08:
         7f:7f:76:19:41:a2:b5:68:cc:fb:75:8c:03:f2:55:44:03:b2:
         b5:5f:1b:48:18:0b:8c:02:96:ef:3d:6e:fb:d4:f5:e2:89:8f:
         69:25:8c:d0:a7:e9:9a:9c:3e:e7:05:c5:4a:57:fa:69:05:08:
         f8:1e:c3:11:f8:21:5b:55:27:d9:af:e5:a6:2c:42:d1:cc:97:
         1c:1a:50:a6:6b:55:a1:b8:5d:f8:c5:02:fd:94:26:f6:03:c3:
         b1:69:ac:ad:ca:a7:c1:c7:c4:52:c0:49:35:c2:52:d2:8d:fc:
         fd:ca:03:5b:dd:88:22:04:b4:68:f8:3d:bb:ea:06:b7:44:08:
         c8:12:85:26:6c:a1:bb:06:32:28:45:ed:ea:a9:48:bc:40:6a:
         f0:fd:69:9b:c6:ce:34:cd:66:42:9c:eb:35:d0:03:c0:51:bb:
         fc:6b:d2:9b:29:8d:8d:1e:25:a6:be:f1:a0:2e:9f:1d:9d:97:
         4a:6c:b5:c1:ed:19:53:b2:8f:91:24:32:ca:84:39:be:6f:c6:
         76:c6:8d:ae:26:db:32:60:2c:5c:d2:e6:a4:c4:4e:46:70:72:
         4e:86:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org