Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3234203d3e2039393035.roa
File:                     3230322e3133372e302e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          RObjiefWOMpOlIRI+xeXb7viNV6hzXqKwV2LV4CDcUQ=
Subject key identifier:   59:FF:3D:41:69:4D:73:B2:24:C2:5E:52:F2:93:2F:72:27:68:9B:0B
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       5CE20C773D85A6198CD838ED661AEB45A7CEDB56
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3234203d3e2039393035.roa
Signing time:             Tue 14 May 2024 05:02:10 +0000
ROA not before:           Tue 14 May 2024 04:57:10 +0000
ROA not after:            Tue 13 May 2025 05:02:10 +0000
asID:                     9905
IP address blocks:        202.137.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e2:0c:77:3d:85:a6:19:8c:d8:38:ed:66:1a:eb:45:a7:ce:db:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: May 14 04:57:10 2024 GMT
            Not After : May 13 05:02:10 2025 GMT
        Subject: CN=59FF3D41694D73B224C25E52F2932F7227689B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:7f:d5:b4:01:f5:70:c1:05:f2:40:0f:85:
                    12:1f:94:31:0f:f4:a8:55:4a:5e:f0:9a:a2:45:90:
                    90:0a:8c:f8:31:1d:59:f2:8e:62:71:75:1b:ea:c1:
                    63:d5:b5:06:da:c1:cb:27:74:a0:ff:64:1e:22:9d:
                    ec:69:86:53:e5:c0:d9:52:85:4d:3e:d7:a5:b8:db:
                    a6:b0:0c:6e:95:28:27:c2:80:1f:4b:12:db:07:57:
                    a3:97:5b:11:16:57:2c:a5:18:fc:22:55:de:28:2b:
                    a7:60:97:df:f1:a2:cc:94:cf:fc:1f:66:b5:38:e8:
                    ce:51:3e:a5:d7:0c:b9:b9:4f:b7:e3:fc:8c:80:7c:
                    3d:11:1c:3c:20:fc:d1:2c:81:94:d2:95:3f:41:e1:
                    52:c6:a7:58:c2:b6:5c:58:54:a8:95:f0:22:66:ea:
                    b7:08:91:ea:50:17:84:e5:be:c6:46:fa:ae:b1:22:
                    c9:0b:2f:0a:53:9e:cd:40:43:a6:89:31:0f:83:e1:
                    78:b3:c6:21:70:e3:ed:62:8c:d7:96:bb:81:02:1f:
                    1f:1e:13:4d:06:3b:82:18:6b:81:21:2f:03:12:cd:
                    ce:34:00:6e:2a:80:9b:34:b2:ba:db:b8:d0:11:19:
                    d9:84:55:f1:44:8e:17:cf:1f:6e:39:37:37:42:f9:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FF:3D:41:69:4D:73:B2:24:C2:5E:52:F2:93:2F:72:27:68:9B:0B
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:cb:f1:ee:08:4c:d8:51:ed:e9:ec:3c:b2:ce:d6:16:81:
         c2:f6:b1:1f:ad:52:00:9d:fb:38:53:6d:ad:e3:7e:43:72:95:
         71:35:20:f1:73:ab:4e:2c:b1:de:fd:7f:f0:4e:f5:d5:01:02:
         01:02:d9:e3:a0:54:fa:f9:68:d2:d3:75:e9:86:f1:49:52:e2:
         62:2d:68:de:b6:db:c2:1e:c8:19:23:08:fe:3c:ef:4d:d7:0f:
         86:7f:d7:ac:9a:b8:ff:d5:2d:09:74:7a:d4:f2:1b:bb:35:cd:
         91:d3:f4:8d:f4:93:22:1f:d3:62:1d:89:8a:25:6f:7a:28:75:
         c3:46:f9:e9:80:e9:a0:92:84:30:7b:2a:aa:7c:53:23:e2:7f:
         25:67:98:20:2d:4e:61:11:61:c4:f3:5f:29:d9:08:d7:0e:c6:
         d5:d9:6f:b9:94:e9:45:c5:cd:dc:5a:69:cd:47:bb:f6:12:dd:
         31:d8:16:d5:1e:95:e2:42:61:d2:e3:75:2a:71:49:4c:f4:02:
         0d:55:3e:de:de:0b:26:f7:7b:dd:96:63:a9:f6:86:e5:8e:c2:
         4a:e8:69:36:5d:62:0b:91:06:cd:82:06:f8:3d:3b:74:70:fd:
         90:9f:a9:cc:3a:52:10:07:16:ef:10:3d:70:0f:e0:c9:cf:90:
         70:fb:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org