Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230302e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          eCsMbmItRmZHhgCJe2lVq/qyoTone1RCh3EML2cZqb0=
Subject key identifier:   8E:34:8C:CD:66:7B:79:F5:CF:2A:EC:D2:7B:9B:50:B3:C3:46:25:90
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       6BA25617DB2C43954DD9D092A3BD146A484A6863
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230302e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:54:47 +0000
ROA not before:           Fri 24 Nov 2023 03:49:47 +0000
ROA not after:            Fri 22 Nov 2024 03:54:47 +0000
asID:                     18059
IP address blocks:        202.78.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a2:56:17:db:2c:43:95:4d:d9:d0:92:a3:bd:14:6a:48:4a:68:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:49:47 2023 GMT
            Not After : Nov 22 03:54:47 2024 GMT
        Subject: CN=8E348CCD667B79F5CF2AECD27B9B50B3C3462590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dc:8e:66:03:b3:a2:e9:72:15:a2:ed:2c:8d:
                    44:50:1b:4a:27:f4:06:81:80:06:33:2e:20:ab:07:
                    6c:94:19:0b:4b:28:8b:23:65:2a:17:8d:90:0d:8f:
                    61:af:94:a2:78:59:9c:9e:a2:31:97:99:15:7c:1f:
                    bd:ce:5b:c2:ab:1b:4f:a2:a9:c6:7c:4f:3e:44:c2:
                    33:41:03:4f:50:02:5d:8d:ab:2a:06:50:27:61:59:
                    e6:85:67:9e:88:47:f4:4c:bf:3c:90:d5:57:c6:ab:
                    11:d4:ac:6c:f9:85:1b:0a:59:6a:13:52:2c:3b:4c:
                    cc:1b:8d:1c:da:6c:3f:ed:fa:69:0d:38:e0:93:4f:
                    9e:50:bb:22:1e:03:fe:9a:52:65:63:80:d5:06:52:
                    46:f6:79:c2:b4:93:7a:c1:25:da:62:13:c1:e5:a0:
                    72:8e:6b:95:a3:80:b5:e8:82:91:de:84:02:f5:1e:
                    d7:32:a4:70:75:3d:f0:ec:2b:f3:9b:a2:c2:64:4b:
                    96:2a:b9:db:55:34:23:8b:61:84:d6:be:dd:a9:0c:
                    6d:3f:9d:61:9d:06:a9:77:82:95:fa:11:35:ed:93:
                    03:64:9d:1f:0f:81:ed:5b:13:c5:9d:7f:74:47:13:
                    81:49:d1:50:c7:07:b7:df:49:42:69:14:14:04:d9:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:34:8C:CD:66:7B:79:F5:CF:2A:EC:D2:7B:9B:50:B3:C3:46:25:90
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:3e:48:ac:9f:05:32:16:f6:08:3b:bd:56:9b:6a:1d:9b:9a:
         a2:8b:00:4b:d0:b8:cc:a4:c5:e8:e1:c7:9c:2d:dd:56:57:8a:
         29:58:ec:d5:9a:66:3d:d2:60:53:13:0a:87:e7:70:c3:39:57:
         e9:8f:b6:aa:c2:a4:8a:b8:b5:f8:ff:67:8d:b2:9c:e4:4d:8d:
         90:c7:8a:d8:e7:fc:c8:36:fa:41:74:24:5a:83:43:9a:b2:a2:
         0d:ce:c6:55:48:ae:e8:97:b4:d6:47:c7:c7:13:a2:78:28:45:
         88:18:25:f7:8c:fd:1a:a1:4a:d0:eb:81:7f:2b:7e:f4:37:7c:
         c0:b5:b1:be:18:33:d9:52:25:64:1e:a1:0f:25:96:fb:ba:20:
         fc:68:f0:15:9d:58:53:88:7a:f3:31:c5:7d:a0:ff:da:f0:6f:
         d1:5c:69:27:3e:2e:f6:96:b3:49:8c:c5:2f:1c:18:6c:08:c6:
         9d:2c:6b:bd:0b:93:ba:a9:74:c5:a1:53:f7:d0:5d:08:21:c4:
         70:9a:b5:89:a1:b6:d3:93:8a:cc:b4:70:ab:b6:60:9d:5b:29:
         58:91:53:e5:db:4b:48:68:0d:f3:17:8f:91:60:19:04:1c:73:
         12:b1:8e:79:eb:6f:a5:6b:61:22:4d:9b:58:6c:e8:aa:ff:b2:
         85:ab:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org