Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230362e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230362e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          7TFAGm4k4Nzi4E1ZwMWOKF9mX3uUJccBFIt0YU6YNDU=
Subject key identifier:   02:15:C4:18:FF:88:2F:8E:48:7C:53:87:71:E9:3A:53:3B:CE:FF:D9
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       7D7DB97A2266D12DD90C51EEE3F33BEC8C425BEE
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230362e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:56:58 +0000
ROA not before:           Fri 24 Nov 2023 03:51:58 +0000
ROA not after:            Fri 22 Nov 2024 03:56:58 +0000
asID:                     18059
IP address blocks:        202.78.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7d:b9:7a:22:66:d1:2d:d9:0c:51:ee:e3:f3:3b:ec:8c:42:5b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:51:58 2023 GMT
            Not After : Nov 22 03:56:58 2024 GMT
        Subject: CN=0215C418FF882F8E487C538771E93A533BCEFFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:5d:3f:2a:16:49:d5:b2:d9:69:db:52:76:
                    dc:54:69:bc:eb:11:34:cd:ef:64:6c:de:98:fc:64:
                    1b:66:f5:02:f9:09:94:66:26:28:cc:28:d0:ae:08:
                    23:ce:c6:9c:51:9d:28:1d:dc:6e:9d:40:f7:45:91:
                    6a:f2:b3:77:77:0c:ab:0d:18:37:a9:0d:e2:63:b7:
                    57:bf:ce:15:6f:74:d8:5e:eb:17:1b:19:d8:11:c6:
                    76:b6:9b:70:b2:fd:30:97:de:9b:f1:e6:7d:97:1e:
                    12:fb:3e:e0:68:03:8a:61:a0:a6:84:ad:f0:28:f6:
                    31:46:48:bd:6e:a6:a4:6d:a5:cb:cb:59:34:aa:9d:
                    dd:e7:ed:9c:12:22:3c:5a:1b:3d:20:4e:52:c1:a0:
                    c3:02:8d:19:df:a2:f1:0c:cf:f9:a8:fd:a8:28:54:
                    89:04:f4:c4:af:cb:f7:5f:a3:d0:cd:f0:8b:f6:b4:
                    9d:1f:a5:ce:0f:8b:52:f3:31:ba:68:36:ec:24:d8:
                    16:f4:d6:46:ae:3c:a6:33:43:43:50:d3:78:55:7f:
                    e5:1e:6e:58:e3:30:97:18:40:3e:86:3a:25:85:9e:
                    88:b5:e7:94:75:cc:6e:50:db:45:64:1d:d5:57:7f:
                    2c:9b:57:d9:a3:4c:2b:99:56:fb:01:92:f0:a1:a1:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:15:C4:18:FF:88:2F:8E:48:7C:53:87:71:E9:3A:53:3B:CE:FF:D9
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230362e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:cc:cb:c7:9d:35:0f:9c:de:4a:d3:4f:1c:a3:da:ce:31:ae:
         c3:19:9b:93:90:29:5d:fc:9f:96:6c:d6:9a:5d:eb:4c:32:41:
         ef:7a:5c:0f:99:f0:fe:82:e4:a8:05:5f:e2:73:70:8a:f2:9b:
         94:42:cc:41:32:3e:16:37:13:e4:ab:b2:2d:ba:12:63:e5:3d:
         38:d5:78:0e:bb:ff:69:d3:4c:eb:e0:85:67:0d:4d:29:10:74:
         8b:56:a2:78:48:93:43:55:ba:eb:a2:50:49:84:23:f0:2b:4e:
         74:0d:0f:c7:7e:f7:a3:61:6d:fd:eb:1b:6d:fe:7e:c1:55:88:
         ca:a2:9f:ad:0e:7d:79:b2:76:e0:eb:39:c8:43:64:5f:b1:f2:
         7b:67:91:15:f3:b9:64:47:4f:a4:0f:ab:30:e2:72:33:cb:46:
         b5:00:90:26:56:4e:b6:42:cd:98:19:af:6c:6b:79:47:89:96:
         23:b0:0a:68:bf:bc:1a:0d:8c:10:f0:e8:e7:c5:da:0a:42:98:
         9b:c8:b6:53:8f:8f:6f:9d:30:46:e9:d3:be:b3:1a:20:53:36:
         1c:a9:de:95:35:12:f1:a2:f0:a6:fe:57:0d:ce:94:f9:82:9d:
         e3:ee:b4:60:33:60:21:e5:b6:57:b3:47:64:dc:c1:09:71:59:
         c6:b0:5f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org