Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          lechtx+kDP0PTYhrPz5nX1x14AqPkfhY3HGdLB0u1u0=
Subject key identifier:   30:74:9F:B0:60:45:4E:9D:4C:98:94:5A:21:E8:46:27:62:01:4C:7E
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       406AEFEA1D94114D58752FD648F301921ECA6D96
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:55:58 +0000
ROA not before:           Fri 24 Nov 2023 03:50:58 +0000
ROA not after:            Fri 22 Nov 2024 03:55:58 +0000
asID:                     18059
IP address blocks:        202.78.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6a:ef:ea:1d:94:11:4d:58:75:2f:d6:48:f3:01:92:1e:ca:6d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:50:58 2023 GMT
            Not After : Nov 22 03:55:58 2024 GMT
        Subject: CN=30749FB060454E9D4C98945A21E8462762014C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:f6:e4:37:29:f1:51:a5:ae:99:c7:5c:52:
                    7c:3f:e7:d2:65:53:28:6d:18:b7:ed:bf:16:82:38:
                    ae:59:57:7f:35:7b:64:96:01:96:3f:20:1a:c3:6e:
                    96:6d:ac:08:f2:e3:77:27:55:fe:6c:4d:33:f8:d0:
                    01:a1:af:1a:2a:01:bd:46:f7:1d:e8:81:12:ca:a4:
                    37:04:b2:8b:d4:09:4b:bb:d2:75:8e:bb:ef:b3:9f:
                    25:fe:4e:4d:f9:fc:c7:fa:b7:45:16:0d:6f:2b:e1:
                    03:16:96:88:a2:1a:4c:5b:3a:17:7a:14:24:2c:70:
                    02:0e:ba:e3:ca:94:97:ed:82:b8:7a:70:ca:5d:4a:
                    62:48:f3:cc:cc:d4:45:69:af:06:4b:ad:34:37:91:
                    7e:10:94:5b:c0:56:64:8c:07:23:e7:c4:43:31:59:
                    ab:df:f9:db:3e:cc:75:90:e2:a9:6f:f3:73:fc:1e:
                    75:fe:7d:31:85:51:9a:ab:f0:f7:4d:16:80:5e:91:
                    74:44:54:d7:36:a5:f6:0f:fe:de:69:0f:d3:7b:3a:
                    1f:22:60:5f:78:1a:5c:00:77:3d:ee:94:74:88:2c:
                    6d:d9:8d:35:d7:cf:36:48:41:40:4d:c1:d5:bf:65:
                    c8:ca:14:e9:86:0b:f4:4b:92:59:73:43:40:56:a4:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:9F:B0:60:45:4E:9D:4C:98:94:5A:21:E8:46:27:62:01:4C:7E
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:72:bf:bc:98:9a:e0:10:fe:a2:2d:db:08:37:20:ba:6b:2d:
         2e:32:f3:fc:cf:f1:9b:1c:5a:e6:5e:6e:62:83:eb:3f:bd:7c:
         8f:b3:d0:7e:78:8d:a0:b8:ef:70:98:44:c3:85:3d:ae:c8:5f:
         bd:ae:a4:55:f9:6d:72:c3:18:01:bc:42:f8:12:1a:09:05:eb:
         64:84:27:17:0c:25:5d:91:5b:3c:3b:4f:6b:9c:a4:30:ad:65:
         a1:ae:c9:03:ee:5d:28:9c:5b:73:92:16:3a:91:b5:47:b6:5b:
         a4:26:37:ca:63:c6:39:02:c4:42:3c:7d:e6:5d:a2:67:d6:fb:
         6c:fa:54:2c:72:b9:57:06:1c:ec:ac:f2:a8:08:c0:f7:91:fb:
         ea:1f:5c:8b:fa:76:b5:66:70:b1:a3:2d:57:a5:62:a7:a2:97:
         84:18:49:a8:dc:64:92:69:b1:ca:c9:05:1a:a7:37:da:d7:09:
         91:16:58:17:d5:7e:ca:a7:68:d2:1f:41:9e:cf:ab:a5:71:b4:
         2a:cc:91:68:78:5e:7e:86:5c:42:f7:58:0d:35:07:0d:9a:bf:
         40:a0:bc:29:3f:a9:c5:ab:d2:4e:50:0b:3f:f6:08:d8:a7:0e:
         d0:59:cc:b6:e8:7b:56:1e:e5:56:57:ef:e4:8b:d6:78:65:2d:
         1b:7c:cc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:31:59 2024 by rpki-client on console-ams.rpki-client.org