Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139362e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          aC7G1lvfqqeN+cqWC2ydbQtuCvx2TCanDpe909IdcGo=
Subject key identifier:   F5:86:74:3D:83:B7:F6:19:A8:5F:F2:4D:19:5F:A7:62:C1:46:15:AF
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       065CD0E5F8EDC8F30D5A3781E98E2E251A590E55
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:37 +0000
ROA not before:           Fri 25 Oct 2024 03:55:37 +0000
ROA not after:            Fri 24 Oct 2025 04:00:37 +0000
asID:                     18059
IP address blocks:        202.78.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5c:d0:e5:f8:ed:c8:f3:0d:5a:37:81:e9:8e:2e:25:1a:59:0e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:37 2024 GMT
            Not After : Oct 24 04:00:37 2025 GMT
        Subject: CN=F586743D83B7F619A85FF24D195FA762C14615AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:6d:e9:76:08:b2:44:50:17:1f:ed:59:8c:
                    9e:15:0e:50:63:8d:9b:32:7f:f6:ce:7b:2f:0a:9f:
                    c3:55:44:64:9d:f1:05:00:8d:a5:06:95:73:2e:66:
                    b4:54:a8:82:91:aa:c1:64:38:0f:c9:89:56:55:72:
                    88:9d:24:89:32:24:5a:51:b0:d1:40:29:9e:a1:7a:
                    97:08:58:c1:14:c9:ff:ff:b8:bb:1b:a1:31:1f:60:
                    3d:0d:72:a9:a6:24:c5:7c:e1:71:fa:d1:7d:01:f2:
                    9b:93:6e:d4:0a:59:39:8d:e7:f1:2d:65:cf:fa:02:
                    56:c0:19:86:5b:ac:67:53:b3:70:e8:c1:91:de:75:
                    a0:df:df:67:83:15:86:1c:a4:47:eb:34:bf:57:11:
                    41:39:de:ef:63:45:a6:be:f6:3f:a6:43:37:71:55:
                    01:d1:24:a8:68:43:45:e2:3b:7a:d8:4d:cb:11:1a:
                    36:ec:9e:83:b5:87:3b:f9:88:a3:d5:1f:60:ac:d0:
                    49:02:1b:5c:de:da:26:55:70:6c:98:b9:e4:91:52:
                    45:3d:3a:13:67:86:e4:df:11:05:12:87:cb:47:fa:
                    c8:61:ff:f5:c7:36:28:3d:2a:08:7b:88:98:d0:2f:
                    a6:2f:8d:53:1e:2a:b9:2c:7f:70:4e:62:36:3c:d4:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:86:74:3D:83:B7:F6:19:A8:5F:F2:4D:19:5F:A7:62:C1:46:15:AF
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ad:18:b8:c6:3c:2e:14:03:55:f9:49:b3:f8:91:8f:85:70:
         33:f5:0c:70:ed:7d:4d:14:d7:fc:61:a1:a3:ae:9e:7a:82:6c:
         7d:1a:a1:4c:13:8a:b1:93:df:f6:47:d2:44:b8:44:f3:36:73:
         fa:4f:27:4e:77:1d:44:b0:54:f3:ad:63:b6:c9:13:e6:92:ba:
         36:60:9e:7e:14:ff:5e:00:6a:89:73:61:b2:db:af:80:6a:1f:
         cd:14:5b:a6:85:7c:64:42:48:5a:47:15:9d:07:e5:e7:63:42:
         d1:d5:b6:66:96:cd:b6:32:62:29:e7:8b:03:15:e8:a8:b6:69:
         75:ad:1a:54:53:2f:74:1c:b6:ae:f2:ed:6e:48:9e:84:77:43:
         4f:d4:81:c6:cf:71:44:55:bc:05:4f:d0:4f:f8:24:29:22:10:
         d6:8d:9b:46:70:06:1c:2b:be:ab:b9:57:52:33:89:f0:39:2b:
         95:4e:af:c3:e2:33:0b:83:4c:c5:c3:da:ce:c2:4e:4f:ca:43:
         a7:e1:66:a9:aa:be:42:ae:62:ae:a0:f9:a0:13:b1:9a:05:8d:
         74:b3:1e:6c:36:79:51:a2:60:94:a0:7d:a8:1b:45:74:4c:fe:
         59:43:7d:94:55:1d:3f:45:30:28:e6:b2:34:1a:30:5a:e7:30:
         3d:35:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org