Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          zlaZySTqe/qZHtr80DTpiy6Ee7YC0yDdt3zYXr/Ev7w=
Subject key identifier:   BA:40:9C:E3:D5:3F:4C:45:A4:C7:1D:98:E7:FD:0B:1C:16:59:21:E6
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       17F6CE8102D696259574273EFDB7A6E621F7E42E
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:34 +0000
ROA not before:           Fri 25 Oct 2024 03:55:34 +0000
ROA not after:            Fri 24 Oct 2025 04:00:34 +0000
asID:                     18059
IP address blocks:        202.78.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f6:ce:81:02:d6:96:25:95:74:27:3e:fd:b7:a6:e6:21:f7:e4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:34 2024 GMT
            Not After : Oct 24 04:00:34 2025 GMT
        Subject: CN=BA409CE3D53F4C45A4C71D98E7FD0B1C165921E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:32:74:95:1e:7c:7c:c4:bb:7d:3c:ac:7e:
                    d3:5f:d4:eb:0d:aa:ad:b5:a2:9f:53:50:18:6b:50:
                    0c:ae:d3:b0:3c:59:b1:1c:f5:04:08:49:d3:99:b1:
                    fe:34:ce:6d:c2:0e:ba:a8:49:59:d3:79:ef:4e:f1:
                    88:41:e5:df:16:0d:b8:5a:44:9e:2c:a6:17:b4:90:
                    1c:ef:fc:8d:42:3a:4e:79:9b:1c:9c:91:14:42:32:
                    72:b4:d3:7d:4f:af:df:42:69:a6:f0:40:50:28:42:
                    0c:ab:75:51:f2:b8:51:d8:fb:7c:1a:46:a8:7d:bc:
                    38:44:d7:b2:ae:95:39:61:14:d3:28:52:bb:ea:79:
                    53:46:df:e8:95:04:a3:c9:91:03:fd:73:0e:6a:8c:
                    77:ff:2e:6f:88:06:83:ad:59:80:a1:b7:33:b7:87:
                    c3:ef:f8:7d:7f:06:fb:46:4e:de:ec:cd:85:04:20:
                    47:dc:16:4f:bb:e8:98:1f:ea:93:22:71:d3:33:64:
                    1e:2d:09:2e:97:73:8d:7d:3b:37:2d:aa:cb:04:94:
                    26:7b:bf:25:0a:72:5d:01:9a:fc:09:f6:db:5c:90:
                    fc:35:3a:b1:c9:92:28:3b:9b:3f:bb:73:8e:be:50:
                    ea:11:b0:97:16:41:28:61:4a:3e:c6:8e:ec:26:83:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:40:9C:E3:D5:3F:4C:45:A4:C7:1D:98:E7:FD:0B:1C:16:59:21:E6
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:2a:bf:1b:e0:13:92:a0:dd:cc:25:a0:98:7d:a5:5d:47:
         61:e6:f0:4d:fe:c7:ca:fa:ab:b6:db:7a:e6:af:01:06:71:77:
         7f:7e:ff:88:6b:c2:67:71:e6:8f:23:27:0d:c0:6c:aa:f6:9e:
         3a:d8:fa:6d:89:32:22:a8:c5:f1:86:79:07:18:17:1e:5f:95:
         76:a8:e3:23:12:33:7c:26:56:b8:62:63:f8:7a:5f:a1:bd:a8:
         75:c9:4c:03:ea:28:17:60:ff:60:3b:5a:81:48:6f:4f:23:3b:
         2c:89:e3:39:49:24:11:9b:09:33:0e:aa:1c:ca:44:85:54:af:
         6c:ef:b5:57:a9:47:72:59:c2:37:d9:55:a5:3d:fd:16:b1:61:
         db:29:15:bd:6f:db:74:79:19:bd:d6:9a:c4:9f:bb:52:3d:13:
         3e:16:0f:80:24:02:66:dc:59:87:bd:4e:b8:95:96:ca:b5:a8:
         9d:cb:82:07:ba:93:f7:af:0f:2b:20:12:bf:30:d1:34:bf:ea:
         86:a8:c8:b0:8c:cc:fd:24:25:43:90:f6:3b:eb:2d:e9:31:8f:
         68:a3:be:e9:e7:b9:36:b1:1e:2b:da:90:60:2f:93:48:d3:41:
         92:85:ee:fa:17:c4:d6:4a:2f:a6:47:ce:04:28:29:cb:4d:d3:
         c5:0b:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org