Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230362e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230362e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          eaBfbOpDVixRv0+TKIRyVU3oEZao+klh5lQIrUteWh8=
Subject key identifier:   7A:0B:72:46:EA:5D:D1:17:EB:D8:E4:3B:E2:FA:65:63:6C:56:DD:43
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       4DCABE6C76CFDA1F98AC41E658C4B00080817AA5
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230362e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:33 +0000
ROA not before:           Fri 25 Oct 2024 03:55:33 +0000
ROA not after:            Fri 24 Oct 2025 04:00:33 +0000
asID:                     18059
IP address blocks:        202.78.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ca:be:6c:76:cf:da:1f:98:ac:41:e6:58:c4:b0:00:80:81:7a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:33 2024 GMT
            Not After : Oct 24 04:00:33 2025 GMT
        Subject: CN=7A0B7246EA5DD117EBD8E43BE2FA65636C56DD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a7:41:4b:e2:92:f5:ab:43:67:99:88:40:d4:
                    da:c9:a6:99:c7:41:65:3c:c3:5f:c5:21:6c:8c:48:
                    db:cb:48:2e:0a:b3:5d:0e:55:27:ef:18:80:b6:94:
                    63:db:a9:19:12:0b:7c:74:00:0e:11:1a:ce:0c:dd:
                    f8:bd:54:77:ab:86:00:db:f9:8c:97:3a:45:ad:0a:
                    d8:7d:89:0e:d5:9e:4d:24:5a:3c:7c:13:98:f6:50:
                    7c:36:9d:8e:73:a9:cf:47:f7:b4:e8:d4:71:05:79:
                    09:6e:60:cc:ab:8b:f9:5d:82:24:e4:30:44:38:90:
                    df:61:ac:9e:93:19:d2:37:f7:7d:b8:44:0f:3c:53:
                    1b:4c:20:e2:59:98:d1:7c:ba:5b:09:2a:5e:ed:5e:
                    3b:2a:37:fa:4f:7c:fc:b7:6d:5d:fa:30:8f:e6:fd:
                    ab:5b:f1:52:01:d4:3d:fa:52:0d:7a:85:1f:c3:ee:
                    99:42:69:09:3e:d8:81:53:0d:75:da:4d:14:03:a3:
                    9c:1a:c7:c0:79:14:0e:e9:8c:67:7a:90:0c:e6:f7:
                    6b:c9:0d:ba:fd:dc:55:4f:7a:5a:ac:8d:7d:ed:d9:
                    12:b8:80:2e:c8:8f:20:83:c3:5f:ab:60:94:a7:dd:
                    2b:33:1e:8b:5c:cc:c3:cf:24:37:94:49:01:12:b4:
                    cf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0B:72:46:EA:5D:D1:17:EB:D8:E4:3B:E2:FA:65:63:6C:56:DD:43
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230362e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:0f:75:21:3f:c1:19:2a:3e:12:e8:97:a6:47:8b:89:81:
         9b:57:b7:65:49:a0:e6:3a:db:f9:a6:04:30:20:4f:e0:c0:f9:
         28:58:87:93:f1:62:22:13:6f:05:ce:a3:91:80:9a:22:77:f9:
         0f:f5:f9:95:ac:00:41:16:51:39:a2:6d:18:54:66:3c:c3:d0:
         a4:f3:d1:60:85:88:03:e3:08:29:17:73:59:1a:02:a6:e2:cd:
         dc:55:11:07:61:f4:7d:a7:ba:6d:7f:82:c7:e5:c9:c3:d5:34:
         bb:ee:f8:89:94:56:dc:70:47:6d:e2:f3:64:2c:47:29:2e:c8:
         47:a3:f6:09:c2:9a:6d:65:85:c2:67:93:08:c8:c4:49:9e:94:
         49:52:2a:9c:8f:49:3d:ec:ec:25:d7:03:3e:08:a6:4b:ec:60:
         f4:c1:23:a2:e6:58:28:05:6c:00:f7:44:01:b0:9c:b8:98:4f:
         92:9a:e2:1a:75:dd:39:62:bb:80:bc:58:53:84:aa:ba:d0:65:
         9f:68:90:ce:0e:49:c3:51:bd:56:d8:76:a1:74:46:97:03:2a:
         a2:3e:0b:68:09:cb:f3:28:d2:4c:db:54:66:2f:9d:fe:90:92:
         60:b0:2e:c2:14:8f:a7:a1:63:f9:83:cb:1d:28:22:57:b5:fd:
         41:2a:b1:fc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTcq+bHbP2h+YrEHmWMSwAICBeqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yNDEwMjUwMzU1MzNaFw0yNTEwMjQwNDAwMzNaMDMxMTAvBgNV
BAMTKDdBMEI3MjQ2RUE1REQxMTdFQkQ4RTQzQkUyRkE2NTYzNkM1NkRENDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgp0FL4pL1q0NnmYhA1NrJppnH
QWU8w1/FIWyMSNvLSC4Ks10OVSfvGIC2lGPbqRkSC3x0AA4RGs4M3fi9VHerhgDb
+YyXOkWtCth9iQ7Vnk0kWjx8E5j2UHw2nY5zqc9H97To1HEFeQluYMyri/ldgiTk
MEQ4kN9hrJ6TGdI39324RA88UxtMIOJZmNF8ulsJKl7tXjsqN/pPfPy3bV36MI/m
/atb8VIB1D36Ug16hR/D7plCaQk+2IFTDXXaTRQDo5wax8B5FA7pjGd6kAzm92vJ
Dbr93FVPelqsjX3t2RK4gC7IjyCDw1+rYJSn3SszHotczMPPJDeUSQEStM/DAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUegtyRupd0Rfr2OQ74vplY2xW3UMwHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzczODJlMzIzMDM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpOzjANBgkqhkiG
9w0BAQsFAAOCAQEAWckPdSE/wRkqPhLol6ZHi4mBm1e3ZUmg5jrb+aYEMCBP4MD5
KFiHk/FiIhNvBc6jkYCaInf5D/X5lawAQRZROaJtGFRmPMPQpPPRYIWIA+MIKRdz
WRoCpuLN3FURB2H0fae6bX+Cx+XJw9U0u+74iZRW3HBHbeLzZCxHKS7IR6P2CcKa
bWWFwmeTCMjESZ6USVIqnI9JPezsJdcDPgimS+xg9MEjouZYKAVsAPdEAbCcuJhP
kpriGnXdOWK7gLxYU4SqutBln2iQzg5Jw1G9Vth2oXRGlwMqoj4LaAnL8yjSTNtU
Zi+d/pCSYLAuwhSPp6Fj+YPLHSgiV7X9QSqx/A==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org