Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139322e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          vW1fwIRtuc0srciwa9O2jcgD/yQwGnxOIpAYd3T2MSs=
Subject key identifier:   D7:F7:C6:AC:3A:10:E8:27:D0:8E:2C:66:21:20:BE:31:94:08:91:19
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       3DAB8E0C01EF135F7E805FF608121B16CB35D395
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139322e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:34 +0000
ROA not before:           Fri 25 Oct 2024 03:55:34 +0000
ROA not after:            Fri 24 Oct 2025 04:00:34 +0000
asID:                     18059
IP address blocks:        202.78.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ab:8e:0c:01:ef:13:5f:7e:80:5f:f6:08:12:1b:16:cb:35:d3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:34 2024 GMT
            Not After : Oct 24 04:00:34 2025 GMT
        Subject: CN=D7F7C6AC3A10E827D08E2C662120BE3194089119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:93:99:c6:2e:1d:17:b0:71:c3:bc:e4:3f:67:
                    7c:90:b6:c3:99:05:ce:7e:42:be:1f:d4:71:4b:7e:
                    01:bb:e7:aa:7b:83:55:2b:c0:9c:d4:bc:ab:e7:fc:
                    6d:83:e2:fd:9e:ad:cd:43:f2:c5:64:fa:05:23:89:
                    2e:cf:db:94:e6:bd:b3:a3:28:0c:a8:f3:a4:24:d1:
                    15:83:b1:a7:00:71:7e:06:93:15:86:8e:b3:3b:6f:
                    5a:44:69:8e:b1:74:67:96:17:e6:af:49:7a:42:61:
                    e1:cd:80:b6:13:3d:42:20:65:7d:69:ab:7a:bf:d2:
                    0a:1a:72:b1:e3:c0:9a:5d:44:ef:b5:70:d9:73:d1:
                    d2:86:48:d7:23:81:ca:d2:71:2c:54:2e:39:ec:a1:
                    0b:c0:19:71:9b:64:50:58:99:7a:5e:10:03:fa:6c:
                    3a:64:9d:db:68:e1:7f:36:3e:4a:c9:95:7f:70:c7:
                    6d:b1:83:10:5c:ac:1d:9e:0f:cf:84:ae:93:06:95:
                    d3:32:9b:be:c8:b3:83:24:86:d3:48:e4:ae:56:a0:
                    f1:de:ab:07:08:ac:e7:de:ed:c9:97:00:24:ef:4c:
                    8c:89:71:8f:d4:83:d3:dc:3f:5c:16:df:f5:41:92:
                    94:eb:16:1d:7d:d2:c3:81:8b:81:2f:13:0c:4f:11:
                    df:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F7:C6:AC:3A:10:E8:27:D0:8E:2C:66:21:20:BE:31:94:08:91:19
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139322e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:75:1f:0f:85:83:cc:57:b3:fb:1f:ad:9a:77:17:20:10:d6:
         a9:6f:44:14:76:90:11:ec:93:8d:b5:bf:3f:ee:88:bc:3a:9f:
         fd:79:d1:af:ba:0a:a6:13:e6:a1:09:3a:d6:1e:71:3f:10:c2:
         1f:79:04:e5:dc:9b:67:dd:67:fd:1f:c7:a1:06:cc:d8:dc:ba:
         d5:de:11:22:c2:83:dd:c7:a2:0f:ed:74:f8:c9:05:b9:25:0a:
         ed:db:2b:a9:62:83:f1:7b:fc:b8:db:2a:f1:1f:39:44:85:7b:
         ec:c5:a7:91:c3:69:e1:e5:f3:eb:84:1a:13:37:b4:b8:6e:3b:
         9e:e1:83:61:9c:ba:8c:b6:d2:0d:e7:fb:e3:d9:b4:15:81:6c:
         25:54:4a:04:c9:60:bc:31:f8:be:a6:df:65:e9:c8:e7:47:3a:
         78:f7:74:6d:f5:07:38:37:be:f8:4e:31:28:be:3b:fd:97:22:
         80:1f:05:c9:90:f9:78:37:22:05:55:31:a6:8e:8d:79:57:44:
         51:2c:07:de:31:77:3f:98:38:c7:e7:83:b0:d4:d9:76:fc:ee:
         37:07:77:75:b2:3c:cc:0f:0b:23:56:5b:4f:6a:52:97:87:48:
         14:2b:6e:b5:b9:bd:39:cd:56:c2:67:fa:7f:70:d7:cf:68:81:
         84:fa:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org