Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230342e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          FW8d+RrLVVVZScUiskeBwL31I0+qFwGV5d748CudzMg=
Subject key identifier:   8C:58:9B:B0:05:77:92:01:8B:61:AD:D2:25:CB:CC:B2:31:9E:13:08
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       06A6FB0E0AD08447BF5042BB54A2837E261B7EFE
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:56:26 +0000
ROA not before:           Fri 24 Nov 2023 03:51:26 +0000
ROA not after:            Fri 22 Nov 2024 03:56:26 +0000
asID:                     18059
IP address blocks:        202.78.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a6:fb:0e:0a:d0:84:47:bf:50:42:bb:54:a2:83:7e:26:1b:7e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:51:26 2023 GMT
            Not After : Nov 22 03:56:26 2024 GMT
        Subject: CN=8C589BB0057792018B61ADD225CBCCB2319E1308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:b3:ed:34:47:9c:f6:a4:6e:bf:c3:bb:3a:
                    6b:2c:94:f8:c5:b0:00:61:2e:24:87:af:ac:8b:4d:
                    e9:6d:f0:fb:b4:cf:df:fb:ba:bf:01:b7:5d:c8:73:
                    5c:a2:95:37:7e:6e:39:26:b3:ce:27:99:e8:2f:a3:
                    35:c6:1a:61:48:99:d5:8e:75:78:f5:b8:52:3d:ef:
                    c0:5c:7d:8a:18:ab:70:cf:d3:b1:49:e6:22:8a:7e:
                    e6:e8:f6:4d:56:db:12:61:1c:ba:67:a4:95:36:0e:
                    04:ed:ad:71:85:02:07:cd:e5:7b:1d:46:34:0a:89:
                    64:a8:b2:4b:23:42:88:ce:3b:3b:54:b4:24:0a:37:
                    b9:dd:10:52:44:a6:e7:2b:7d:32:c9:b7:80:ae:6e:
                    67:0f:50:71:38:9f:5f:32:5d:ed:a1:44:64:33:4f:
                    57:6c:28:84:61:5e:33:9c:ca:31:45:7a:90:a8:9b:
                    78:5f:f9:94:c6:1d:1a:35:67:40:b3:6d:27:6c:2d:
                    b8:95:9b:f0:db:20:38:f5:cb:a3:77:30:2d:44:22:
                    eb:5f:ec:ef:3e:0e:ce:15:c9:1c:6c:f4:b8:31:b4:
                    52:25:4c:41:78:b2:cc:20:d3:57:87:4b:8a:cb:cc:
                    b3:2e:e8:a3:d5:2b:b2:d6:4e:4f:2c:8d:70:56:b0:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:58:9B:B0:05:77:92:01:8B:61:AD:D2:25:CB:CC:B2:31:9E:13:08
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:f3:2e:8f:c0:2a:42:d5:50:8f:46:59:25:f8:73:0b:12:94:
         4d:aa:6c:ac:c9:66:97:a2:38:d8:c4:f4:62:c0:59:db:a4:eb:
         32:b4:a9:b3:7e:c5:2b:69:f8:55:94:51:19:f1:c4:b6:0f:33:
         3d:9f:5e:be:aa:d6:14:18:d1:15:90:35:68:a8:ca:02:84:c9:
         98:61:f8:21:21:08:9a:a1:8d:5b:7f:da:de:93:9b:0b:2f:e1:
         3c:99:42:07:dd:2c:a5:1f:1d:98:c5:4e:85:52:de:64:4d:b1:
         04:e2:1d:ae:22:25:44:44:fd:d7:b0:d4:a6:cf:f6:b9:ad:44:
         24:bb:23:1c:9a:56:c4:57:51:23:f5:9a:33:9b:14:d0:7d:09:
         7b:3f:a1:71:4a:d6:d1:a3:06:1f:e4:db:66:a3:36:1e:3b:93:
         75:a4:b8:b0:62:62:1d:3b:a0:24:a7:26:42:3c:e5:c5:16:66:
         37:01:b7:f6:22:1a:62:10:a6:38:a4:fc:56:b0:f8:c0:57:c0:
         70:97:e9:0e:9e:e2:85:99:29:fd:04:08:f7:4a:98:9a:14:7a:
         84:10:eb:97:a2:90:37:d3:66:46:e6:01:5f:41:89:bf:18:76:
         1b:56:50:57:86:ad:71:fe:a0:35:de:05:53:8a:eb:71:17:08:
         c4:d0:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org