Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139332e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139332e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          eWxyZ3Lc2iDLgRaJ+cRRPIv4H77uTYI0cadHXF7YzeM=
Subject key identifier:   D7:14:99:D7:A6:0C:F4:38:11:B3:AD:52:2E:92:15:10:02:AE:44:C6
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       3F3045C98926D82F5443579AA7E04B17EC472E3B
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139332e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:30 +0000
ROA not before:           Fri 25 Oct 2024 03:55:30 +0000
ROA not after:            Fri 24 Oct 2025 04:00:30 +0000
asID:                     18059
IP address blocks:        202.78.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:30:45:c9:89:26:d8:2f:54:43:57:9a:a7:e0:4b:17:ec:47:2e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:30 2024 GMT
            Not After : Oct 24 04:00:30 2025 GMT
        Subject: CN=D71499D7A60CF43811B3AD522E92151002AE44C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:92:e7:e5:e1:22:77:50:41:e2:4b:24:00:a8:
                    7d:86:b0:06:20:41:94:f6:18:0b:1a:98:8b:f5:e6:
                    b0:03:28:0a:4f:2f:3d:7b:24:b7:54:f9:2b:59:0a:
                    b0:5b:dd:ab:e8:a7:b6:3f:22:a8:c2:c5:eb:8c:cb:
                    bb:ca:d8:d3:30:90:71:6b:c8:c1:49:25:51:8d:fc:
                    ef:34:63:90:95:f2:e7:45:b8:f5:a0:df:75:42:af:
                    13:d3:a4:ab:fb:74:8a:20:49:85:08:49:61:d6:f9:
                    a3:e8:0d:07:2b:e0:b7:9d:d8:4e:fa:65:ad:d7:51:
                    69:5d:c6:3e:87:bf:56:06:d8:5e:e2:33:b9:ed:88:
                    d0:29:93:80:10:ad:6a:1f:e9:0b:e6:00:8d:36:58:
                    bb:f7:d9:06:a4:95:72:01:41:d9:ca:99:54:ae:72:
                    af:c4:53:f9:e1:da:a2:9e:60:28:2e:8e:fb:18:d1:
                    f9:a0:f0:14:58:d5:80:86:a4:d9:6b:12:18:6f:7f:
                    ac:79:41:3d:d1:7a:7a:15:15:0d:e4:a4:46:45:2b:
                    16:d4:28:f8:31:cf:fb:75:44:14:29:51:ea:13:24:
                    5f:c4:38:18:fa:f9:fa:18:57:26:3b:cb:b4:00:0e:
                    6e:01:aa:b7:c1:61:50:07:0b:26:68:18:fe:dc:bd:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:14:99:D7:A6:0C:F4:38:11:B3:AD:52:2E:92:15:10:02:AE:44:C6
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139332e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:42:90:11:4c:51:47:ee:67:6f:2b:29:10:5e:ef:b3:fb:9f:
         e9:2e:70:63:d2:60:13:6c:68:c1:62:57:99:95:d3:5c:92:26:
         8b:9e:04:17:0c:57:2d:81:05:a5:c5:d2:74:21:00:af:27:af:
         3c:01:24:58:8b:c6:e6:f4:f1:ca:9a:63:98:24:e3:83:77:77:
         54:e5:ab:12:4b:c7:2b:3a:11:e1:2e:3d:ff:db:a2:f0:5f:c9:
         73:b7:28:20:2c:ee:de:e9:f4:70:e1:8e:50:0a:03:85:56:fa:
         c5:4c:6d:7d:98:c6:a9:3f:af:42:5e:45:16:ea:cf:a6:49:f1:
         7c:62:95:d8:e1:5c:ca:dd:0e:76:4d:3c:1a:6b:90:4b:9f:54:
         b4:5a:6f:16:1c:68:99:d8:bc:81:03:eb:5f:80:34:02:5a:8e:
         ef:fb:d2:51:53:66:69:44:85:3e:d8:13:8e:16:d9:b0:93:d9:
         57:f4:3a:51:5f:ab:c9:34:0f:31:63:b6:ca:20:db:e3:35:96:
         a2:91:97:a2:8e:45:60:4a:62:ac:a1:40:f0:1e:98:86:fb:05:
         5e:ee:8d:11:62:98:52:99:db:7e:ad:65:81:97:6b:34:fc:a5:
         4a:0a:38:45:2f:a1:50:0f:5a:da:14:34:05:4e:ac:ab:74:3e:
         98:1c:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org