Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          s2vTx07IcAM+CUHsr+mm045wdquGh5KmkrrvHjt3ZLE=
Subject key identifier:   48:E4:CF:27:18:07:E5:76:F9:60:87:25:CF:08:D5:6D:0E:90:D7:12
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       07999DBBB1612E4A8BA04B4FB0629180250F39AF
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:55:48 +0000
ROA not before:           Fri 24 Nov 2023 03:50:48 +0000
ROA not after:            Fri 22 Nov 2024 03:55:48 +0000
asID:                     18059
IP address blocks:        202.78.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:99:9d:bb:b1:61:2e:4a:8b:a0:4b:4f:b0:62:91:80:25:0f:39:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:50:48 2023 GMT
            Not After : Nov 22 03:55:48 2024 GMT
        Subject: CN=48E4CF271807E576F9608725CF08D56D0E90D712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:97:0a:86:b8:78:95:df:ef:32:8d:e2:d2:
                    c3:7e:3e:9f:64:7b:2e:3d:ae:e4:50:ba:59:64:56:
                    08:8c:05:52:49:8b:05:2d:7b:ac:2a:ea:fd:15:51:
                    9f:c7:e4:f8:b0:f0:9e:21:81:2a:20:4a:02:4d:bf:
                    0c:a6:5e:3a:99:93:1c:37:7e:13:5c:4d:95:95:2b:
                    dc:e1:00:1f:f2:56:9f:05:7d:a3:30:08:64:9e:13:
                    5b:a0:2d:a1:9e:41:f4:53:22:68:a7:62:61:8d:b6:
                    ca:d8:30:eb:04:5f:3f:e3:e0:7e:7a:39:54:03:62:
                    51:11:9d:19:79:d4:80:b6:58:84:59:3f:bb:78:72:
                    36:e2:45:41:e8:3d:7f:0d:e5:73:a4:fd:e8:53:8c:
                    aa:e6:32:3b:32:9a:10:38:26:9a:f3:e6:5d:06:0b:
                    3b:53:1b:c8:7f:17:21:b9:a4:20:65:11:f2:85:89:
                    4d:80:ca:e1:93:1a:f4:5a:03:62:86:32:0e:81:13:
                    a4:bb:a0:e4:8c:fc:d3:08:c9:56:2f:45:02:e2:dd:
                    15:a6:9b:1e:02:37:bf:a4:18:a1:94:3c:35:19:5a:
                    9f:d7:06:16:b8:6f:71:9e:51:f4:5c:44:f0:f1:0a:
                    b1:36:ea:da:66:28:e5:61:de:63:cb:c2:72:32:d2:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:CF:27:18:07:E5:76:F9:60:87:25:CF:08:D5:6D:0E:90:D7:12
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:7a:cc:2d:6d:e1:1c:47:d7:e2:aa:00:04:f6:85:bd:5b:
         96:c9:a1:c5:89:db:cd:60:39:73:62:4f:f3:ac:03:17:4d:e3:
         18:c0:2c:5d:84:9b:3a:ec:08:b7:de:6a:86:3f:02:50:b1:b1:
         11:f6:e0:e6:81:4e:a4:17:b0:4d:ff:d7:e9:66:f4:b3:f8:6f:
         88:02:01:1f:31:93:88:11:cd:8e:5f:85:5c:f2:57:b3:15:87:
         c5:7f:bc:52:52:a9:0e:76:db:d3:f9:76:ed:bf:13:56:b9:ca:
         b6:30:ee:a0:88:d3:98:dd:2b:21:d7:b0:44:11:3b:a3:8d:da:
         53:73:6b:50:03:73:06:4a:74:27:7e:8f:4f:be:95:70:43:33:
         be:fa:81:12:14:74:80:f3:96:3b:2c:18:a8:07:01:a2:30:af:
         18:22:34:ca:d5:e1:75:30:61:e0:fd:43:25:7e:5d:25:ab:dc:
         77:c0:29:9c:e5:52:8f:e3:f5:ee:2f:9d:b5:ea:6b:f3:15:2a:
         68:2c:df:9a:1f:3c:1d:0d:d1:dd:23:f9:cb:66:88:e8:ff:d9:
         42:69:b2:64:6f:f4:67:e2:cc:5b:a6:13:ea:cf:2b:28:4a:6c:
         7c:0d:49:94:e5:43:20:6e:ff:f3:a4:89:97:c9:8a:e7:06:fc:
         e4:dd:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org