Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa
File:                     3230322e3133372e31362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          IdFjC1/h2qUAscM4vJxdhvcMx+3nsqFAdyMHIbfPxn4=
Subject key identifier:   A4:F2:3A:6A:57:15:9E:FC:64:08:8E:5D:31:15:70:66:0C:A4:40:61
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       78CD1EDF22FED00F5E9A8535F61CE323F8C92AC6
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa
Signing time:             Tue 14 May 2024 16:00:01 +0000
ROA not before:           Tue 14 May 2024 15:55:01 +0000
ROA not after:            Tue 13 May 2025 16:00:01 +0000
asID:                     9905
IP address blocks:        202.137.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cd:1e:df:22:fe:d0:0f:5e:9a:85:35:f6:1c:e3:23:f8:c9:2a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: May 14 15:55:01 2024 GMT
            Not After : May 13 16:00:01 2025 GMT
        Subject: CN=A4F23A6A57159EFC64088E5D311570660CA44061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:fb:56:e5:01:84:98:32:73:b1:02:d1:81:
                    31:d4:29:dd:5f:21:26:8d:7b:98:7a:94:22:82:e2:
                    0e:f9:89:95:0a:f0:eb:c8:a6:5e:cb:7b:f3:44:cf:
                    ee:79:1c:b6:33:12:83:5e:2a:3e:1c:3b:38:66:81:
                    47:5a:de:e9:04:43:a4:a0:21:e0:65:d3:ef:38:da:
                    7c:a0:f5:7f:aa:db:e0:da:5b:d0:79:44:97:17:22:
                    d7:ce:4c:77:51:97:17:2e:e0:c1:d7:a8:9b:1a:8a:
                    ca:96:db:07:b0:7d:3f:29:3b:85:94:0c:46:77:9c:
                    a9:40:b3:ab:47:8e:ad:d9:53:14:65:32:c9:83:7e:
                    8f:54:2e:3c:fd:33:b0:1a:0b:b2:4d:af:39:fc:5e:
                    b4:04:b7:08:5e:a7:9b:23:2b:a6:62:62:1a:59:02:
                    86:1a:44:0b:d0:7b:7f:f7:66:c0:6f:3f:4f:71:f5:
                    d7:4e:5f:c0:71:e7:36:14:33:d8:f0:84:ed:e7:f7:
                    5d:fb:e0:b5:8a:ac:93:0c:25:7d:47:6c:6c:86:88:
                    c3:6b:57:eb:66:53:a1:99:59:43:d9:34:d6:64:3f:
                    4f:43:06:33:eb:9e:7f:cf:6f:22:ac:38:fc:a6:65:
                    03:e7:d4:6d:55:49:14:53:68:24:46:f8:73:1d:82:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:3A:6A:57:15:9E:FC:64:08:8E:5D:31:15:70:66:0C:A4:40:61
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:0c:c9:72:8e:ba:96:27:cf:28:34:22:6f:55:90:97:06:
         d3:0b:b7:bc:bf:38:47:5e:f2:a0:1a:41:d6:e0:b5:09:7b:88:
         d0:b5:06:e7:bf:35:af:5b:ad:a1:5d:ef:c1:4c:55:dd:e0:8d:
         04:7c:70:50:9b:2e:be:2e:86:cd:44:1b:b2:92:5c:05:ee:8a:
         b2:60:18:a8:c7:37:0a:ec:a6:77:80:51:24:b4:b5:68:73:ea:
         72:78:3e:e3:db:4b:4c:a9:a4:ab:c2:69:bf:f7:39:05:ba:21:
         a8:cf:3f:6a:6d:25:50:a5:e6:e5:93:34:01:bf:00:71:be:97:
         bd:7b:ba:67:93:05:7a:87:04:cd:43:7b:3a:54:90:8c:b5:7e:
         37:d0:86:94:69:da:14:c6:0a:9c:0b:40:31:ec:9f:ab:38:2e:
         93:fa:7d:6d:3b:9f:0c:02:7d:58:7f:6f:0b:61:2d:b5:87:3e:
         a4:a9:2e:05:73:e9:b2:d7:7f:fa:3f:b1:63:52:54:a2:5c:bc:
         3c:ad:7a:04:92:b2:78:4f:a7:02:77:06:fc:c1:d2:48:29:f0:
         cc:07:54:3b:39:bf:f8:4d:93:e1:bf:62:8a:76:14:fb:87:9d:
         a5:90:75:b5:09:41:eb:38:ce:c7:34:83:a2:bb:4c:73:b5:2c:
         6d:eb:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org