Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230372e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230372e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          EmyslzSskIouHXEAsZUQpX8yDxI6XlQTa/4QVrnSOQw=
Subject key identifier:   E3:39:4C:E9:C2:0C:46:43:D9:0A:0B:87:F4:E6:56:72:87:02:77:46
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       2644BBA1CE1C83C8ACAC40C7009B56F708B8B63E
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230372e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:57:10 +0000
ROA not before:           Fri 24 Nov 2023 03:52:10 +0000
ROA not after:            Fri 22 Nov 2024 03:57:10 +0000
asID:                     18059
IP address blocks:        202.78.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:44:bb:a1:ce:1c:83:c8:ac:ac:40:c7:00:9b:56:f7:08:b8:b6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:52:10 2023 GMT
            Not After : Nov 22 03:57:10 2024 GMT
        Subject: CN=E3394CE9C20C4643D90A0B87F4E6567287027746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:0b:c0:cf:d2:c2:c6:5f:05:89:fd:e9:d2:
                    a2:41:c0:34:cf:d4:62:b3:2e:6d:6f:9e:79:96:35:
                    5c:08:c8:56:c5:3a:ee:ac:e2:8d:d0:7d:3e:b2:2b:
                    26:95:78:be:d2:51:40:dc:8f:4f:14:84:57:58:11:
                    67:64:2a:21:e8:84:fe:13:b1:33:46:0d:b3:ac:d7:
                    b7:48:68:48:55:d2:28:ee:53:f1:c6:07:44:a4:3a:
                    bc:16:f5:5b:06:b0:d7:37:b1:19:86:c5:db:19:d6:
                    b0:a5:bd:9b:cf:c1:28:85:a5:15:56:03:c4:6e:4f:
                    6d:1c:3c:86:b1:d1:9c:93:52:42:09:08:fc:80:4c:
                    2c:30:e6:55:d5:75:b3:ff:cf:9a:8e:25:cd:15:5e:
                    6a:18:73:e8:59:3d:b0:bd:07:0d:d5:f8:1f:7b:21:
                    06:cf:ea:12:36:bd:ea:dd:de:83:00:c8:36:e0:79:
                    67:58:49:64:23:12:08:71:43:d1:85:a0:3c:5f:83:
                    7b:ba:e4:a6:f4:a3:27:cf:a6:b1:3f:6d:70:61:29:
                    32:5f:eb:05:9b:9b:dd:12:80:5d:09:e1:0d:08:20:
                    1e:f8:61:53:96:4d:fa:ef:61:5c:e4:a9:b1:ea:47:
                    be:1e:35:3c:48:21:90:a7:9b:de:42:d6:f0:6f:1f:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:39:4C:E9:C2:0C:46:43:D9:0A:0B:87:F4:E6:56:72:87:02:77:46
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230372e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:03:ba:a8:01:69:36:bf:50:13:f9:42:8d:77:83:53:9f:cc:
         06:99:1b:eb:99:c3:7f:4e:a4:dc:9e:13:c9:4c:a6:1c:c5:b4:
         b3:1d:19:f3:ab:c2:43:fb:84:12:8f:28:99:17:2b:f9:ea:2b:
         3f:e2:f7:a6:4e:9a:a8:8d:17:6e:9c:23:70:f4:82:b5:c4:ba:
         c4:e0:84:96:ed:8f:89:1e:91:5e:6d:cd:a2:60:b9:df:b9:12:
         b2:6f:71:b4:87:01:d3:e8:77:12:a5:77:25:f5:e5:d4:1f:2c:
         06:4f:17:93:52:1c:d4:6a:a2:e6:b8:de:b2:16:d1:c7:d9:68:
         b0:1a:8e:4c:0d:3e:fa:b7:85:bd:2d:2c:23:fe:7c:61:c6:a5:
         b5:77:60:fc:b5:f2:d4:13:d6:60:19:54:be:85:d8:4f:78:eb:
         c4:6e:84:8b:80:69:fe:ed:7b:62:1c:77:02:6d:63:7b:a4:d2:
         53:03:4b:cd:3a:ed:dd:48:b8:88:9f:67:e4:3c:db:43:23:ce:
         5f:e8:67:fd:1d:d6:6e:66:68:20:0b:df:43:79:22:45:72:fc:
         b0:a6:b9:31:b9:34:52:f3:6a:f5:a3:ab:1a:0d:fc:75:55:c5:
         8f:49:bb:56:f3:ea:09:4c:eb:04:53:51:df:aa:21:6a:19:c1:
         91:b2:fc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org