Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131322e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3131322e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          BSEkPkw7D5AmYPCpR4WhkLKc/8Wzu9sqx9YLzWrC4Gg=
Subject key identifier:   10:CE:AF:8A:FE:18:18:09:8F:2C:BF:E0:21:FE:C3:41:7B:24:2A:DA
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       7D8B6AF6634D5A4AB6D5F177A626C9A5217A2179
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131322e302f32322d3234203d3e2039393035.roa
Signing time:             Tue 15 Apr 2025 23:00:01 +0000
ROA not before:           Tue 15 Apr 2025 22:55:01 +0000
ROA not after:            Tue 14 Apr 2026 23:00:01 +0000
asID:                     9905
IP address blocks:        202.77.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8b:6a:f6:63:4d:5a:4a:b6:d5:f1:77:a6:26:c9:a5:21:7a:21:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Apr 15 22:55:01 2025 GMT
            Not After : Apr 14 23:00:01 2026 GMT
        Subject: CN=10CEAF8AFE1818098F2CBFE021FEC3417B242ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:46:3c:d3:83:fa:96:a2:6d:a7:2e:02:8d:
                    01:c3:53:20:4d:4b:3b:50:b1:91:16:ac:c8:ee:a5:
                    7a:c5:f2:ea:97:8a:90:ed:33:5b:ba:b1:f6:f7:16:
                    af:b3:47:3a:7c:8f:df:78:3d:83:53:3c:b3:67:30:
                    1f:d2:15:2d:37:70:d6:58:83:e1:35:ed:de:58:1f:
                    bb:28:7b:fb:89:e5:c9:a8:89:20:38:96:35:2c:67:
                    3c:3d:15:07:c3:48:77:b5:02:16:ac:33:ba:6b:b3:
                    18:d2:ad:c3:8d:7d:d4:4a:83:82:f3:2a:0b:ae:42:
                    a2:c8:97:05:4d:82:46:ab:53:24:cf:62:23:64:93:
                    d8:5f:21:e5:b9:a1:81:fb:80:4f:a3:6b:bc:3e:01:
                    d3:8a:e9:6e:d6:28:c1:ed:b4:6f:4c:a1:74:fe:95:
                    57:88:43:b9:e0:33:f3:1f:f9:ed:08:72:3f:c8:dd:
                    d4:86:f8:e0:a0:b9:54:1a:62:78:6a:91:f2:56:cc:
                    6e:d8:68:b8:67:48:83:2a:fd:6c:fe:11:25:6b:87:
                    26:b5:3f:a4:91:7d:64:99:13:35:6a:65:1b:11:d5:
                    70:49:ac:51:72:82:f9:83:9e:24:2c:c0:20:6f:7b:
                    e4:2f:e4:bf:dc:6b:7b:f1:de:5e:78:7e:61:8f:74:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CE:AF:8A:FE:18:18:09:8F:2C:BF:E0:21:FE:C3:41:7B:24:2A:DA
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131322e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:e4:b0:56:da:99:9a:3f:15:d5:76:c5:f7:d1:11:91:94:
         9f:87:a2:1c:ff:75:3b:2e:db:4a:39:df:7b:fb:3b:48:e5:82:
         4c:d8:19:f2:47:f2:df:b2:4e:78:d0:1b:d4:90:bf:64:94:8a:
         c1:04:7b:b4:f4:16:58:ba:ea:5f:30:8d:b1:98:67:20:6f:80:
         36:ee:0e:1a:ad:56:c2:65:72:22:46:1f:d3:5a:89:7c:db:76:
         73:71:4c:7b:82:79:93:b8:ef:f4:49:7a:1f:58:30:4b:f8:a0:
         76:63:3e:de:27:99:b5:d8:e9:cf:48:61:8f:5b:b0:24:9d:66:
         ee:b8:77:1d:68:07:34:4e:6b:ce:35:d1:fc:9c:c8:50:48:25:
         73:a0:54:0a:69:dc:11:cd:e1:ed:f9:4a:98:b0:40:e3:3c:9e:
         b5:18:bf:5d:9f:9d:01:e1:82:49:fc:8a:e0:f1:f5:bf:54:fe:
         63:df:55:45:00:82:94:53:ee:56:06:2f:46:3c:40:4c:af:a4:
         50:1a:f0:c1:8b:dd:2f:39:90:de:08:7f:b7:2f:af:a3:03:e0:
         d5:94:f3:00:2c:5b:e9:85:2c:63:90:a2:9e:6e:07:cf:a9:5a:
         17:2d:2a:46:43:57:ae:d0:e7:62:5b:cb:10:46:d3:48:ff:e3:
         9a:f9:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:14 2025 by rpki-client on console.sobornost.net