Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139382e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139382e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          zjTfSgYpDsIPb5P0S0nFyVurcbTq/0iC/mU7eg6Z2to=
Subject key identifier:   4A:50:49:24:9B:DE:9D:A9:71:26:71:96:22:65:7C:A9:63:F7:E6:49
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       1A0F83153130318DF6F509422D3D8BAD622D0E31
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139382e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:34 +0000
ROA not before:           Fri 25 Oct 2024 03:55:34 +0000
ROA not after:            Fri 24 Oct 2025 04:00:34 +0000
asID:                     18059
IP address blocks:        202.78.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0f:83:15:31:30:31:8d:f6:f5:09:42:2d:3d:8b:ad:62:2d:0e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:34 2024 GMT
            Not After : Oct 24 04:00:34 2025 GMT
        Subject: CN=4A5049249BDE9DA97126719622657CA963F7E649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:65:aa:c4:15:9c:39:d9:bc:7e:ac:0b:6d:60:
                    64:63:a3:05:ac:2b:73:4e:32:f1:2c:5e:db:58:e1:
                    8f:5d:48:c8:3a:b1:77:23:7d:be:99:e9:d0:a9:bf:
                    41:55:66:32:59:88:97:e6:bf:03:ac:c8:ee:02:08:
                    7f:46:6c:b5:46:7f:52:dc:83:b7:73:d8:45:64:a6:
                    88:86:63:17:19:c8:c2:1d:bc:c8:f4:ee:d6:17:9d:
                    d3:14:1d:33:6f:5a:a2:87:80:cd:8d:ed:56:79:97:
                    12:7c:12:fb:c2:8b:52:dd:70:ad:88:02:16:cb:de:
                    6d:f8:69:fa:22:28:7c:7d:e1:55:a4:84:65:fa:95:
                    cf:34:f7:1e:b6:90:f9:35:98:58:c9:ad:68:48:02:
                    c6:91:18:1c:c9:6c:a3:49:46:bc:fe:ed:7b:1b:53:
                    4c:7d:c7:84:81:ef:8f:7a:10:c7:65:60:c3:14:07:
                    22:e2:86:72:cf:d4:23:77:63:63:47:36:7b:4f:10:
                    55:bd:24:83:cc:b8:bb:b8:a0:0b:bf:e8:c8:fa:5c:
                    2a:ab:68:b8:9e:7e:15:da:92:f3:31:0a:aa:da:a5:
                    bb:58:33:93:4f:7b:ff:ae:bd:e4:51:af:68:f9:9f:
                    78:2e:c2:aa:ab:c3:03:86:ea:1e:f5:52:b2:f6:36:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:49:24:9B:DE:9D:A9:71:26:71:96:22:65:7C:A9:63:F7:E6:49
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139382e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:c4:cf:e0:72:b1:d4:10:b8:a4:bd:8d:89:68:05:ae:ad:
         68:cf:0d:0d:65:fa:75:74:dc:ef:a1:cc:78:76:fb:6a:d2:33:
         f1:c6:d7:1b:cf:4a:b5:6d:5f:75:bf:e7:63:1f:00:2a:ac:c4:
         21:78:44:ae:ab:7e:42:0b:5d:2f:5a:28:b8:24:d8:87:21:9a:
         15:9e:e7:a3:c6:3d:87:54:42:12:4e:e8:c0:1c:3f:6f:cf:08:
         5e:95:62:8e:76:b8:cf:53:eb:27:34:23:fc:8c:cc:04:49:d9:
         84:d9:17:55:6d:5f:d9:c3:e3:2c:f5:88:dc:f7:d4:06:28:dc:
         54:4e:f6:b1:32:bf:9d:2e:21:a4:82:d6:e8:df:61:68:4c:2e:
         71:1e:95:c9:f0:a3:a2:e3:cb:a4:f6:04:02:b6:eb:52:b7:8d:
         3f:a3:dd:bd:89:0c:f4:6e:d9:c0:1e:dd:c8:b5:cb:fc:af:ac:
         f2:8c:c9:89:7d:2c:5f:ea:e1:28:1a:ef:c0:3d:aa:f9:8b:4c:
         1b:9b:88:0f:64:c7:cc:a6:23:37:8a:07:41:37:69:24:24:66:
         ed:02:f8:08:89:6d:74:1f:35:22:26:31:11:d1:d7:8d:df:66:
         4d:8f:2c:02:56:08:b1:5d:1f:f4:38:b3:ed:0a:0c:ce:9d:5e:
         47:a1:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org