Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230372e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230372e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          r4zqhp2IFxW9kc02IBiC80+Q+zeofnhKlFGgF3igK8w=
Subject key identifier:   E7:78:5E:13:24:47:47:AB:7E:E3:94:8A:70:9C:7E:1F:AE:21:8E:65
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       182C5B580CEBAD7932AECF0510675070F7592F39
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230372e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:30 +0000
ROA not before:           Fri 25 Oct 2024 03:55:30 +0000
ROA not after:            Fri 24 Oct 2025 04:00:30 +0000
asID:                     18059
IP address blocks:        202.78.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2c:5b:58:0c:eb:ad:79:32:ae:cf:05:10:67:50:70:f7:59:2f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:30 2024 GMT
            Not After : Oct 24 04:00:30 2025 GMT
        Subject: CN=E7785E13244747AB7EE3948A709C7E1FAE218E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:2b:02:24:42:8b:78:ec:08:d8:83:97:ac:
                    db:59:01:2e:72:0f:3a:ff:ff:4a:df:ad:1a:cc:bb:
                    cb:f0:0a:ee:7c:0b:cd:cb:e6:a0:07:71:0b:78:e6:
                    1d:11:60:69:a1:e5:66:5c:5b:3e:e0:36:c4:4f:68:
                    5e:6c:46:56:73:14:55:7f:92:be:aa:f1:a0:6d:68:
                    53:86:5e:36:78:e4:29:14:2b:0b:3a:93:55:3c:fd:
                    f0:61:95:fb:c2:89:81:ea:f1:1c:fe:f7:f7:25:f4:
                    97:f4:bf:96:05:56:4a:d7:6d:e1:f3:1a:38:90:ed:
                    4d:27:53:20:e1:da:02:44:04:38:42:09:0e:ce:d5:
                    ae:15:ba:ea:2f:8f:5d:c7:a9:c1:58:8d:f3:b6:ca:
                    61:0b:94:b0:7a:21:9a:ef:a4:41:31:ab:50:18:17:
                    ba:0d:ee:5b:91:14:3c:c1:18:ad:c9:d5:74:7a:31:
                    5e:1f:8a:1e:f1:2b:3e:f9:e8:8e:e9:b9:ce:24:37:
                    d4:6a:7c:a1:e0:ce:9d:d1:de:3a:e7:fe:27:1a:f1:
                    2b:31:77:bc:ee:1f:d1:84:47:4b:ec:cc:dc:f6:d7:
                    f2:8d:e0:e8:59:e2:99:94:f8:df:25:c1:93:43:d6:
                    2d:30:32:74:2f:ab:fd:4c:01:59:58:a9:88:c3:ab:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:5E:13:24:47:47:AB:7E:E3:94:8A:70:9C:7E:1F:AE:21:8E:65
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230372e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:a9:32:a8:81:89:be:41:7c:07:5d:d2:59:30:72:2d:f3:
         e1:9d:47:05:2a:d9:aa:81:3a:1b:36:ae:85:2e:50:eb:0b:93:
         03:ca:a0:7b:b1:8e:25:6d:4d:5d:66:67:6f:28:9c:90:f6:e0:
         57:4a:b1:d6:86:16:73:57:e2:29:4b:d1:6a:9c:f9:e7:af:61:
         d7:49:92:16:58:e2:f8:5f:4c:bf:6b:2e:80:7e:9d:e1:f7:a1:
         73:12:c7:01:d4:45:4f:32:ee:60:c6:75:b3:d3:4c:c1:b6:78:
         b1:be:e6:51:82:e3:55:92:7d:87:eb:e1:79:8d:7d:c0:48:d1:
         90:1a:d4:ed:52:80:ba:50:b0:f7:7d:95:7d:3a:00:05:c7:5b:
         0d:01:99:c1:64:7b:e0:7b:5c:fd:67:bd:65:a7:dc:c8:b9:54:
         97:98:02:24:fa:66:65:5f:e1:0b:2b:01:32:95:3d:68:3c:f2:
         1b:95:65:15:10:cf:a4:b7:23:9f:68:70:47:80:9e:c5:0f:4d:
         a4:d4:5d:41:e4:19:01:2b:78:26:4f:82:43:15:ff:14:86:16:
         75:2d:c5:01:0d:e0:5b:4c:c5:a5:10:90:92:ec:4a:7e:f6:65:
         55:ee:b6:d1:b1:0d:f4:b6:16:d5:db:0b:9a:f0:df:70:e6:c6:
         fe:e1:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org