Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa
File:                     3230322e3133372e31322e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          4nVe3bU0VD0ORPiUH8u1/U8Sw1WDt9MvL5gmX5i5N4A=
Subject key identifier:   46:CF:1C:2F:E7:34:31:A2:16:FB:4E:8D:8B:3D:C7:1C:F5:23:53:01
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       149AD7E627BA3C881DDB4231DF31D0D95ED398EB
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa
Signing time:             Tue 15 Apr 2025 10:01:43 +0000
ROA not before:           Tue 15 Apr 2025 09:56:43 +0000
ROA not after:            Tue 14 Apr 2026 10:01:43 +0000
asID:                     9905
IP address blocks:        202.137.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9a:d7:e6:27:ba:3c:88:1d:db:42:31:df:31:d0:d9:5e:d3:98:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Apr 15 09:56:43 2025 GMT
            Not After : Apr 14 10:01:43 2026 GMT
        Subject: CN=46CF1C2FE73431A216FB4E8D8B3DC71CF5235301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:ca:e0:00:0d:4d:4a:ba:fb:4c:9c:0e:5f:
                    f0:fd:5b:1d:3b:c0:a9:2e:90:58:98:2d:0b:d1:2e:
                    8a:dd:da:72:09:da:99:3f:f8:38:cb:cc:f1:ab:01:
                    0e:c3:82:e8:13:ab:58:03:90:d9:4f:cc:af:a4:07:
                    ae:5e:37:78:66:99:3a:04:c3:ec:09:7b:97:02:f7:
                    fb:ca:6f:7d:f7:1c:6f:44:2f:78:a4:d0:fa:26:b6:
                    44:e8:91:66:7a:13:ae:77:d0:6b:b7:52:33:0e:92:
                    21:02:82:f1:64:93:dd:e3:f9:67:6d:3e:6b:51:28:
                    3a:7a:44:88:9d:ec:e0:54:9d:e9:2a:4b:59:9b:f6:
                    17:11:30:f8:46:bd:86:01:0f:82:44:50:3d:8e:11:
                    9d:5a:90:26:d0:1e:8a:cb:c0:db:0c:81:2e:dd:b8:
                    2f:2e:cf:c7:a3:7a:89:0d:10:3a:e3:9c:05:c1:c0:
                    b5:a8:54:03:45:75:66:d7:8b:84:d3:fc:72:f2:82:
                    52:e8:32:5b:f8:15:e3:c3:57:fc:34:28:63:f8:6a:
                    cf:cb:a5:ba:9f:d1:85:6f:f2:da:c3:a0:74:ef:21:
                    05:cd:17:5c:d2:80:d3:d1:0f:5a:f4:70:e5:4b:dd:
                    73:e1:47:30:04:e6:44:da:da:97:50:3e:b2:24:a0:
                    ee:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CF:1C:2F:E7:34:31:A2:16:FB:4E:8D:8B:3D:C7:1C:F5:23:53:01
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ad:59:ff:9a:1a:53:af:7e:be:12:fa:19:c3:57:02:c8:5a:
         ca:4d:bf:e8:f9:fc:2c:58:6b:74:ee:c8:09:6f:8b:c3:74:07:
         8e:5b:f4:5e:a8:d2:4a:16:ac:25:4f:c4:d5:a4:e9:9c:1d:89:
         3c:4e:94:27:8b:8c:f1:7c:6c:70:48:8a:4a:61:dd:40:17:c6:
         e3:c2:1e:6f:b1:aa:79:c4:75:25:b4:92:22:07:31:7a:71:14:
         ec:35:54:87:7c:b5:33:b8:de:d4:9b:f2:1d:00:9e:b0:d1:6b:
         6a:57:a5:e9:aa:3b:bf:56:0e:ff:2c:9b:61:fb:c7:b5:83:a9:
         62:28:27:f1:6d:bf:b8:6a:11:97:f2:05:3c:ee:51:20:36:c5:
         f9:2e:ca:37:b2:31:f9:8d:0f:d9:06:52:15:26:a3:b1:f7:6e:
         c7:26:ab:6d:af:23:8e:16:92:3c:1e:a4:36:10:3b:ea:fd:17:
         c8:e5:a7:75:8b:db:db:d3:6e:69:bb:d4:02:2e:1a:df:db:e1:
         40:5c:f7:c8:35:87:b5:a2:6f:58:39:3d:79:9d:8e:0c:2c:f3:
         fb:4d:81:79:51:58:d7:c7:35:9c:be:09:1d:b8:49:10:93:13:
         f2:bb:8f:ac:e8:05:86:b0:79:85:b9:f7:cf:b3:0e:76:d4:0d:
         a1:a3:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:13 2025 by rpki-client on console.sobornost.net