Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130382e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3130382e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          IHDMu5j1+NPPhOzeigZb0PDf359Uqpyx9zZtIFr3EIs=
Subject key identifier:   8A:BB:53:C3:4A:24:EA:75:DA:C5:98:34:59:96:22:31:27:5C:FC:A0
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       172E14B7C3974958AE7E99F007FF4692C2CF02B9
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130382e302f32322d3234203d3e2039393035.roa
Signing time:             Tue 15 Apr 2025 23:00:01 +0000
ROA not before:           Tue 15 Apr 2025 22:55:01 +0000
ROA not after:            Tue 14 Apr 2026 23:00:01 +0000
asID:                     9905
IP address blocks:        202.77.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2e:14:b7:c3:97:49:58:ae:7e:99:f0:07:ff:46:92:c2:cf:02:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Apr 15 22:55:01 2025 GMT
            Not After : Apr 14 23:00:01 2026 GMT
        Subject: CN=8ABB53C34A24EA75DAC5983459962231275CFCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:50:b1:15:c7:44:f9:76:af:88:00:72:07:
                    1d:a0:50:a6:b4:52:4f:a2:e0:ea:97:c9:ac:45:32:
                    36:fd:dc:c9:66:db:ab:41:e1:f2:d0:1d:1c:f9:78:
                    0c:5b:a4:1f:18:83:c2:1d:7c:18:64:9e:0d:ec:e3:
                    a3:06:84:52:b8:f9:9e:58:59:7b:f3:04:12:19:ac:
                    cd:b9:ed:f4:f8:68:25:d3:a0:ee:19:48:5c:b2:1d:
                    06:ec:f8:2c:08:66:ab:4d:ca:34:a8:71:ff:45:cf:
                    b0:f6:3e:4f:fa:26:f0:c6:b8:35:da:c7:cc:59:d1:
                    8e:6b:f1:ee:d4:2b:2b:1b:3c:55:8d:c6:33:2a:57:
                    b8:d8:6d:a1:2f:35:76:08:dc:f7:b4:18:e4:66:38:
                    af:23:1b:86:f6:19:7d:b1:2b:78:f7:6c:10:2b:99:
                    79:d3:1a:39:d4:50:3f:ac:74:ee:bb:da:d2:60:a5:
                    13:22:8e:be:d4:07:e9:a4:cf:96:99:11:ac:28:7c:
                    59:ff:95:4f:cf:e9:70:7a:a5:63:c5:61:c0:32:57:
                    78:34:b1:8f:5b:e3:36:a4:94:78:2e:27:96:d2:27:
                    87:2a:ef:4a:d0:98:42:0d:16:d5:26:95:aa:59:f0:
                    6a:90:af:ef:d7:dc:44:1c:d0:28:3c:ea:c5:4b:94:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BB:53:C3:4A:24:EA:75:DA:C5:98:34:59:96:22:31:27:5C:FC:A0
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130382e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:cb:e2:05:09:33:fa:9a:60:d2:9a:0e:c5:a8:26:f4:a3:ac:
         1f:47:7b:30:ad:c8:8e:4e:02:86:52:17:5e:c6:38:11:f7:6b:
         e2:bc:97:b2:c1:04:f6:e3:2a:d6:71:4f:fc:3d:96:b1:13:dc:
         5d:54:ed:3f:5a:68:9b:84:41:b4:11:79:24:2b:04:9c:da:e3:
         6f:57:ff:31:18:42:d7:c4:a6:8a:70:9a:55:54:c2:af:8d:89:
         a0:36:04:c8:b0:f5:d3:c2:a2:04:ca:d7:51:d9:5b:be:c8:da:
         13:60:b1:68:79:c1:5d:df:ba:14:ef:a2:8f:48:6b:e5:a6:64:
         1b:a6:c3:44:96:1c:a7:34:eb:68:8e:29:52:d7:fc:d9:78:8e:
         2d:30:21:e8:f0:95:a1:4b:c3:07:df:15:f5:21:d1:31:c4:48:
         1f:f9:62:e9:2a:f5:dc:6e:ed:1c:13:ef:bb:6c:50:ac:d4:4e:
         8a:a1:31:96:83:cb:e5:2d:ce:36:b2:5b:05:9b:25:78:ac:4f:
         c4:10:53:86:31:0d:ca:c6:4e:73:13:3e:04:3d:df:80:71:55:
         d6:b3:bd:c4:4b:b4:a9:85:85:08:8a:70:66:9f:1c:cd:21:c4:
         c6:87:31:3e:44:36:77:71:21:7c:90:bb:2c:0f:c7:ae:9e:ce:
         6d:ab:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:13 2025 by rpki-client on console.sobornost.net