Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139372e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139372e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          yYJ8LNGCzXGLoIzdighbPdMJi4B43+S1oP5Jo/YNY3s=
Subject key identifier:   C5:44:86:5A:ED:96:E6:CF:C8:DB:67:46:9B:5A:82:DA:0A:80:1C:95
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       7A34AA7C20BE60FCCA569710671D3AD101400771
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139372e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:30 +0000
ROA not before:           Fri 25 Oct 2024 03:55:30 +0000
ROA not after:            Fri 24 Oct 2025 04:00:30 +0000
asID:                     18059
IP address blocks:        202.78.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:34:aa:7c:20:be:60:fc:ca:56:97:10:67:1d:3a:d1:01:40:07:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:30 2024 GMT
            Not After : Oct 24 04:00:30 2025 GMT
        Subject: CN=C544865AED96E6CFC8DB67469B5A82DA0A801C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:3f:97:a1:07:d2:72:51:24:b1:4d:21:ee:
                    07:c4:4e:6c:53:52:fd:c1:38:03:40:97:f8:82:90:
                    0f:1d:dd:77:05:4b:23:67:0e:a4:89:b6:31:42:c5:
                    de:b3:57:7b:6b:e3:d6:69:75:1d:c0:4f:ed:2b:28:
                    da:1f:8f:0b:30:f9:ea:b0:9a:93:53:9d:05:5e:f1:
                    66:e1:eb:a8:fa:6f:13:40:1a:9b:5d:52:4b:32:f9:
                    04:08:76:ed:53:da:48:ba:cc:c8:57:07:b6:9a:a0:
                    e9:c9:93:e9:07:7d:bc:a6:f6:d9:11:e1:1e:88:36:
                    a9:b1:86:08:e4:75:ba:52:02:1d:58:c4:fd:d8:1d:
                    45:27:63:2a:2b:32:94:1a:f7:98:11:1d:94:b2:7f:
                    f3:dc:fd:e8:93:15:6d:39:5b:99:e8:57:a1:ef:b0:
                    46:19:f3:aa:c2:36:9a:f9:45:fd:f8:67:d8:8a:9f:
                    9d:f0:16:fb:45:9c:5f:e6:23:63:2d:3b:76:af:79:
                    f4:6a:43:3d:39:8c:04:07:3f:ac:ca:d0:83:2e:52:
                    d8:f8:52:b5:a2:4f:a1:17:89:1a:4b:43:c0:26:7b:
                    81:ef:e7:3a:f0:fd:d6:ca:d0:fd:90:f3:e4:ea:11:
                    39:0a:65:93:65:e3:87:f7:e2:f3:c8:7f:1f:b6:fe:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:44:86:5A:ED:96:E6:CF:C8:DB:67:46:9B:5A:82:DA:0A:80:1C:95
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139372e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:04:f5:8b:c6:10:7c:e4:0d:1f:5e:5b:c2:ce:f3:1e:e9:4e:
         03:b3:8b:8e:68:f9:98:e9:d4:11:c6:2d:92:db:72:40:3d:2f:
         e5:83:2d:71:56:28:70:a6:a4:68:87:28:3d:e9:1d:eb:7f:8a:
         aa:c1:ee:54:a6:22:09:6c:1f:5e:92:78:3e:35:43:98:87:c3:
         83:9e:73:21:16:45:c7:e2:7b:3a:b9:b2:07:dc:d1:74:6c:b8:
         9c:fc:49:65:55:3f:a8:db:2a:08:8a:6b:93:6f:60:b3:2d:dc:
         f2:93:53:24:fd:ca:18:58:80:7e:e8:fe:e0:78:bc:3a:90:d7:
         58:92:56:5d:db:f7:ab:df:df:c4:8d:cd:3c:e9:16:59:29:2e:
         bd:c6:00:99:a4:71:db:b0:8d:a7:b7:76:ab:47:d1:1e:08:0d:
         be:55:a5:e3:76:fc:f0:33:d1:bd:1d:cf:a5:b5:3a:8f:63:c1:
         fd:2f:32:c8:8b:ad:95:b8:32:14:44:d4:86:31:ac:2f:dc:3c:
         67:e9:24:ca:bf:52:f2:6c:e3:48:f7:b7:13:53:55:1f:22:84:
         46:f1:11:2f:ac:ff:23:21:3a:90:6d:87:33:32:c7:6e:80:19:
         39:7c:21:a0:bb:fa:21:60:89:99:bc:af:75:f7:42:28:88:ca:
         74:ed:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org