Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3131362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          L1CKmZA02mt/8e09fdZVo365Z3HeNz/Mlt4a7BFp/LI=
Subject key identifier:   84:3C:FA:FB:1D:99:83:3C:FC:61:E6:0D:A3:9E:13:BE:F2:75:20:AE
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       44F5A606CEEA946E637AAA4B4417E99C34228D05
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa
Signing time:             Tue 15 Apr 2025 23:00:02 +0000
ROA not before:           Tue 15 Apr 2025 22:55:02 +0000
ROA not after:            Tue 14 Apr 2026 23:00:02 +0000
asID:                     9905
IP address blocks:        202.77.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f5:a6:06:ce:ea:94:6e:63:7a:aa:4b:44:17:e9:9c:34:22:8d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Apr 15 22:55:02 2025 GMT
            Not After : Apr 14 23:00:02 2026 GMT
        Subject: CN=843CFAFB1D99833CFC61E60DA39E13BEF27520AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:e0:36:31:50:b4:93:74:df:ae:dc:c8:4a:
                    00:3e:28:c6:76:4c:c4:9a:d3:39:39:84:d1:b8:80:
                    43:9b:af:db:4c:5c:5c:0b:55:3c:4c:43:18:75:57:
                    7e:ad:cb:e2:9c:32:df:3b:da:6a:7b:9a:7d:6e:14:
                    98:29:ed:ac:a8:55:ad:56:e5:75:ac:ce:0d:1c:22:
                    24:49:b0:84:87:3d:a8:72:b3:d6:e9:44:ac:eb:a5:
                    c2:53:9d:51:02:3f:2f:64:17:eb:da:47:0d:48:d5:
                    19:d8:09:33:dc:47:02:cc:58:8e:78:7a:c9:88:0d:
                    b7:24:ed:24:9e:86:bf:d7:47:6b:a3:1d:07:07:8e:
                    20:6e:d2:eb:33:2f:2d:72:01:b1:96:54:86:71:77:
                    c0:ef:de:7c:43:d2:37:5d:89:0c:23:e0:ad:ba:63:
                    f8:0e:4d:88:23:64:7d:54:24:70:97:b6:d7:e8:8f:
                    b0:0d:64:cb:bc:09:05:6b:07:2e:8a:3e:bb:25:a1:
                    83:fe:0e:09:58:01:08:e7:e9:87:87:05:42:60:9b:
                    f2:79:0c:c6:3a:58:cd:a1:20:f4:d6:bd:de:5c:7c:
                    02:30:54:ef:5c:f5:c2:5c:ab:bf:64:9b:4b:c0:d2:
                    5e:80:3c:6c:07:4f:34:6b:be:55:40:f7:40:83:4e:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3C:FA:FB:1D:99:83:3C:FC:61:E6:0D:A3:9E:13:BE:F2:75:20:AE
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131362e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:e4:8a:56:c9:bf:11:34:f4:26:3c:41:69:7f:31:bd:8e:
         a8:54:04:10:05:5d:ce:ca:9e:b1:0a:bc:fd:ff:08:90:d6:c7:
         f6:b8:ef:82:e9:cf:e5:ba:21:21:08:39:04:26:9f:a7:13:3f:
         f4:b6:cb:c8:ce:da:c6:93:7d:a7:d7:b7:40:ca:ef:d5:76:e1:
         31:94:b1:fe:e2:5c:99:0e:b8:d0:cf:c7:44:33:90:91:4a:13:
         07:eb:07:a1:b4:a2:ad:39:5d:1e:27:90:ca:fa:3a:42:33:ed:
         1a:97:80:cd:71:c5:28:81:4b:b4:76:3c:a3:00:b1:97:bc:1f:
         3b:ed:b9:61:aa:b3:83:40:b3:4c:1a:23:fe:e9:f6:8d:af:6f:
         08:52:ed:a4:c8:09:df:1f:74:2e:8a:95:e2:d9:94:9d:53:a6:
         e3:74:8e:29:22:b4:b2:83:01:d9:76:e5:e7:4e:4e:03:c5:8e:
         41:eb:4c:63:ca:d8:fd:09:c0:dc:95:74:f8:98:90:00:de:a4:
         9e:65:6b:b6:4a:c4:5c:f5:5f:bd:b0:8a:17:da:7f:f5:95:56:
         7d:cb:c6:07:b3:58:a3:3e:6a:93:e8:1c:04:5c:69:cd:d5:c8:
         00:45:38:75:5e:4e:9a:76:62:bf:7a:5f:c1:72:1a:fb:16:07:
         cf:aa:cb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:14 2025 by rpki-client on console.sobornost.net