Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3131362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          VwPxSWZ5J5LpNfU6CWBoLSI3PUu0GhN43sbXPkDSibw=
Subject key identifier:   0B:63:3F:24:91:2C:02:A6:28:BB:2B:B6:F6:B9:10:5F:2F:D0:FD:2B
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       045A312ACE045AA15965703D6FF3117CFFEE73FF
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa
Signing time:             Tue 14 May 2024 23:00:01 +0000
ROA not before:           Tue 14 May 2024 22:55:01 +0000
ROA not after:            Tue 13 May 2025 23:00:01 +0000
asID:                     9905
IP address blocks:        202.77.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:31:2a:ce:04:5a:a1:59:65:70:3d:6f:f3:11:7c:ff:ee:73:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: May 14 22:55:01 2024 GMT
            Not After : May 13 23:00:01 2025 GMT
        Subject: CN=0B633F24912C02A628BB2BB6F6B9105F2FD0FD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:10:3b:89:fc:cb:ca:9e:9b:17:29:26:34:
                    8d:cd:3f:17:64:a0:a5:cf:46:95:b0:da:37:3d:75:
                    18:e7:9c:e8:a0:27:cc:cf:c1:6e:49:34:10:d8:da:
                    7b:c1:a9:09:06:bc:8a:39:a4:1f:10:24:eb:57:3c:
                    cd:64:71:57:fc:04:46:0a:a5:7d:af:77:ef:79:95:
                    98:b9:0b:00:e5:18:d3:f7:c2:6b:bd:c4:e2:a1:8b:
                    2e:e5:3b:61:26:41:2d:72:5b:a8:3b:91:d3:11:bf:
                    78:52:02:f5:5d:36:5b:0d:06:d4:b3:ee:f1:d2:19:
                    10:93:47:e6:ab:7a:bb:55:bd:0e:8f:94:69:45:2c:
                    95:30:08:42:93:e6:3b:a8:71:e2:a4:ae:d4:fe:f9:
                    43:7b:ed:be:03:ee:e4:42:9f:54:1e:f9:26:07:06:
                    ba:d6:7c:71:5b:a3:b7:fd:0f:a2:52:22:86:7b:c4:
                    0a:63:a3:2a:6a:3e:b9:55:25:d8:d4:2f:f6:a9:64:
                    40:73:e3:f1:f4:99:3a:df:a5:f7:d9:ea:53:87:ec:
                    23:fb:14:bd:75:8c:e8:8c:b9:7d:17:81:cf:56:ba:
                    0d:fd:9c:56:d8:2a:18:89:de:03:7b:94:aa:e6:f6:
                    2d:c9:18:ad:9d:f5:f6:7a:89:6a:f3:c8:14:e6:85:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:63:3F:24:91:2C:02:A6:28:BB:2B:B6:F6:B9:10:5F:2F:D0:FD:2B
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:fd:0b:57:06:75:af:53:49:48:ce:22:eb:64:dc:7f:08:
         e3:e8:dc:99:d0:e1:98:fe:4a:70:0c:f4:43:75:52:da:97:b4:
         81:45:db:ac:8a:d7:86:43:9e:af:ff:05:09:69:2a:67:59:63:
         d0:7f:06:9b:06:d3:49:c7:e6:4b:c7:dd:a7:e5:4f:71:57:0d:
         18:c8:b3:8b:86:01:e8:bf:a8:0b:4f:94:04:26:1c:6d:f4:71:
         2f:47:6b:0e:f6:75:05:f7:d7:a1:b0:69:00:88:a7:e2:3b:eb:
         17:49:14:7b:8d:25:a9:4e:87:8d:a3:cc:29:e3:dd:44:bd:50:
         83:3a:c1:69:93:81:03:14:4d:51:ef:93:15:94:8e:e4:6f:b1:
         a1:c8:2a:ae:dc:fc:31:a2:f2:a4:48:72:07:cc:15:e1:2b:c4:
         e9:74:47:1c:3c:a5:c2:e2:79:87:74:44:e3:90:74:79:90:fd:
         0b:fa:9f:c5:47:ef:32:cb:39:3b:d1:e9:e8:d3:82:9f:75:89:
         4c:f8:ab:02:56:10:7e:f2:15:32:f7:0b:8b:9f:74:e0:69:ac:
         35:16:e5:2a:9c:b1:7d:68:50:d3:da:a8:bb:de:0c:d7:75:b2:
         43:66:f1:25:ac:31:51:88:c9:28:6f:59:69:0d:11:8b:10:43:
         e5:24:4f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org