Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3130302e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          lpozjz/tjvPvf37l39Chv2tWQEhZIqm9QLiAYetyPio=
Subject key identifier:   29:08:7E:78:40:86:A3:23:FC:14:F8:48:EA:1C:A2:63:BB:C3:1E:01
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       49626A6E7C9969CF9BD6C953C545FE31E07E1D51
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa
Signing time:             Wed 16 Apr 2025 00:00:01 +0000
ROA not before:           Tue 15 Apr 2025 23:55:01 +0000
ROA not after:            Wed 15 Apr 2026 00:00:01 +0000
asID:                     9905
IP address blocks:        202.77.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:62:6a:6e:7c:99:69:cf:9b:d6:c9:53:c5:45:fe:31:e0:7e:1d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Apr 15 23:55:01 2025 GMT
            Not After : Apr 15 00:00:01 2026 GMT
        Subject: CN=29087E784086A323FC14F848EA1CA263BBC31E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:e5:04:eb:2e:ec:80:a5:8b:40:ad:57:b3:
                    1d:a4:99:f8:7f:82:b7:52:ed:cb:ec:ba:84:bc:1a:
                    b3:99:ec:c8:02:fa:b7:1b:d4:22:54:7a:50:b0:5d:
                    47:6b:80:ea:48:8a:e8:99:eb:34:7f:ce:ab:6b:2c:
                    07:db:d3:33:e1:86:f2:6c:e3:f5:fb:da:c7:8a:f1:
                    ea:54:56:c0:e2:8a:e5:15:2c:22:6b:8c:31:6d:77:
                    52:37:43:2c:4f:ee:95:4b:dc:51:c1:31:8b:2f:fd:
                    a0:72:c4:8e:6e:8d:28:15:ee:fe:59:95:cb:b2:04:
                    f6:fa:25:5f:e9:0f:b6:af:c9:58:51:35:23:da:91:
                    d9:17:ab:bf:2d:89:97:fb:22:16:22:59:30:b4:89:
                    af:40:4f:76:f1:e6:79:49:35:21:88:a3:7c:75:d7:
                    92:0c:35:87:d5:a9:33:42:58:92:63:cf:fc:20:a2:
                    e9:a7:c9:24:ad:e8:7f:ca:80:b3:5b:05:c2:0f:d7:
                    aa:fa:c6:ee:30:ca:22:a3:01:18:a9:59:a3:ab:08:
                    3d:5f:25:a7:9e:21:c5:63:9e:7d:c5:8e:8a:42:f6:
                    58:cc:26:57:16:a0:4a:88:41:9a:f7:d4:9f:68:28:
                    46:8c:23:44:02:d1:8c:e6:ea:10:c8:ed:e3:e6:d1:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:08:7E:78:40:86:A3:23:FC:14:F8:48:EA:1C:A2:63:BB:C3:1E:01
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:0c:bc:66:03:8d:8c:f1:f1:42:11:94:3c:3d:2e:55:3a:
         10:ae:ca:84:5d:3e:07:37:03:aa:6b:e7:16:0b:80:0c:53:a6:
         14:08:b7:a5:71:4f:83:ee:74:e6:81:1f:fb:c9:d8:6e:71:73:
         79:04:3b:48:de:5f:ef:60:18:e7:53:c9:a2:a0:96:e3:21:08:
         e1:39:dc:0b:93:f6:cd:bb:b5:aa:05:c1:49:d2:55:b3:3f:de:
         ba:35:b9:24:af:38:e1:0c:c5:9d:b7:f5:4f:c0:17:ef:ca:92:
         90:af:96:98:be:50:e5:36:30:c0:0d:f2:13:1d:1a:3c:be:ad:
         ce:0d:73:42:6d:85:04:6b:af:44:b7:38:0f:53:88:cf:d0:ef:
         81:57:61:d2:13:2c:93:70:50:63:44:f6:9c:f9:5f:30:5a:b5:
         5f:07:c1:8d:ee:2f:06:ec:75:4c:b2:fa:17:15:0b:d4:5c:f6:
         f6:e9:86:65:5e:e3:d6:f8:1d:7b:28:b5:69:1b:2c:46:e2:02:
         9f:c9:71:8a:a7:68:c2:79:fe:b0:25:ef:c1:3a:b9:01:b9:bb:
         29:df:87:68:58:49:37:3a:fb:31:f6:c5:1f:41:b1:93:04:68:
         f3:48:bc:b5:e6:0f:33:81:a5:d3:76:4f:8c:87:dc:24:42:4e:
         a0:6d:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:13 2025 by rpki-client on console.sobornost.net