Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          HVzwJ/aH5Jq6EmkWxafP3Yoqwn5g/HKYplrMWSPChYs=
Subject key identifier:   26:5D:9B:2F:21:73:75:A3:00:67:60:D6:F0:B4:9F:22:B4:F4:22:96
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       4ADC59A4D466942D12A7BA18752055965A8D27C7
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:34 +0000
ROA not before:           Fri 25 Oct 2024 03:55:34 +0000
ROA not after:            Fri 24 Oct 2025 04:00:34 +0000
asID:                     18059
IP address blocks:        202.78.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dc:59:a4:d4:66:94:2d:12:a7:ba:18:75:20:55:96:5a:8d:27:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:34 2024 GMT
            Not After : Oct 24 04:00:34 2025 GMT
        Subject: CN=265D9B2F217375A3006760D6F0B49F22B4F42296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:5a:1e:9c:69:23:a2:1f:41:45:da:ed:fa:
                    86:64:50:e7:34:a3:28:6b:7f:15:37:70:56:2e:03:
                    0f:56:92:f2:f8:d2:e1:b0:53:9e:c1:dd:f9:3a:50:
                    bc:8e:44:45:89:ce:5f:01:df:04:7e:ff:ee:24:6e:
                    32:75:b4:0a:00:54:c5:70:f5:5e:31:2f:c0:e3:1e:
                    92:8e:e4:76:6c:4e:37:b9:69:63:14:45:8e:c2:dd:
                    38:14:39:89:5f:5d:61:4d:66:29:ef:11:95:85:9d:
                    67:11:9c:6e:a7:3b:9e:a0:ad:01:b6:f4:aa:18:bf:
                    d5:1b:aa:62:88:3c:f1:d9:b4:e2:bb:01:61:d5:46:
                    fb:a5:cb:1e:cc:b5:f3:46:59:df:7a:2a:31:6a:35:
                    c6:62:5d:e2:ce:eb:9b:5a:62:6b:57:65:f0:ab:ca:
                    ab:a9:ae:7b:95:d4:e0:11:ed:c0:de:81:08:c0:67:
                    a8:95:6e:3b:73:bb:e4:19:0d:ed:bd:1f:2a:1c:52:
                    ff:af:e6:63:16:a8:13:6d:27:f2:a1:99:fd:99:bd:
                    fa:f3:ca:a5:f6:09:52:a6:a7:ef:5a:6a:06:b7:d0:
                    d0:a9:e5:55:e3:d0:21:53:63:51:2a:f8:ba:3c:dc:
                    49:55:26:4e:00:8d:4e:96:1c:7c:76:a3:e4:35:b2:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5D:9B:2F:21:73:75:A3:00:67:60:D6:F0:B4:9F:22:B4:F4:22:96
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:5a:83:70:0c:11:d8:ae:6b:99:b6:8d:ec:d7:77:72:aa:64:
         3d:98:d8:38:43:38:ff:f7:81:43:3b:64:68:1d:f3:2b:37:ee:
         9c:6a:7b:32:9b:48:f6:8e:e3:2e:4e:e0:8f:4d:ed:b0:15:22:
         b1:12:3f:7f:59:b8:ae:4c:28:19:bb:d1:a4:39:a3:8b:9d:e6:
         cc:0a:12:60:c3:77:d3:34:ec:af:db:54:95:45:f2:b4:83:e2:
         75:27:ad:c4:d5:0c:7d:54:70:ff:75:c3:d8:a9:7e:4d:7d:9d:
         c5:08:25:fc:f5:33:51:95:97:63:2a:67:d6:f9:f1:8a:f1:a6:
         82:38:e6:bc:2d:53:47:1b:16:c4:8f:2e:4a:a8:00:67:9b:b9:
         a0:24:b4:55:d5:3e:4f:66:da:e4:ea:53:80:24:0f:1b:d4:53:
         8b:5d:75:c5:73:47:1c:5c:6b:bb:f9:90:bc:1b:83:cd:f4:6f:
         84:83:bd:99:2d:2b:98:44:0c:6c:1c:8a:19:fb:bc:b6:89:f3:
         4f:a1:6a:86:1e:bd:12:92:4f:b9:21:da:1c:56:d1:22:0e:e7:
         f6:b5:0d:35:b6:c0:14:e6:ed:af:5d:c1:93:59:48:92:6b:6a:
         24:ed:99:cc:70:01:bd:ca:be:b4:38:79:c8:c7:4e:b6:e2:1e:
         71:34:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org