Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa
File:                     3230322e37372e3132302e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          19BWJ6wSGHxUXFMqejDAZvACXl2Drvnp0MxWYL8FlHQ=
Subject key identifier:   C8:9C:66:05:9B:DC:75:C2:9B:50:FD:17:75:79:A1:9D:D0:43:D5:14
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       7F30E37B74A5EA5DCD8F68A0896D43E63CB9AD56
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa
Signing time:             Tue 15 Apr 2025 23:00:01 +0000
ROA not before:           Tue 15 Apr 2025 22:55:01 +0000
ROA not after:            Tue 14 Apr 2026 23:00:01 +0000
asID:                     9905
IP address blocks:        202.77.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:30:e3:7b:74:a5:ea:5d:cd:8f:68:a0:89:6d:43:e6:3c:b9:ad:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Apr 15 22:55:01 2025 GMT
            Not After : Apr 14 23:00:01 2026 GMT
        Subject: CN=C89C66059BDC75C29B50FD177579A19DD043D514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6a:a7:88:90:b8:2c:d5:ce:76:0a:57:fd:b2:
                    c8:3c:26:40:05:c2:5c:00:4d:08:c1:ed:f0:e9:98:
                    5c:2b:4f:df:89:92:3a:4b:c1:a6:54:52:82:b3:74:
                    d4:57:7f:1c:05:26:65:9b:c2:71:93:c8:47:88:06:
                    00:19:ba:b0:27:eb:1c:8f:eb:9d:f9:df:93:c9:ac:
                    fd:9b:d9:77:30:a3:96:11:6b:c1:43:8f:16:30:6f:
                    31:dd:0b:4e:9f:70:61:d8:79:8b:8e:8a:de:99:d1:
                    11:e8:5d:5d:3e:89:cb:f7:bf:f3:90:1d:83:25:d7:
                    c1:83:f9:dc:52:bd:12:b8:db:3c:b4:eb:73:0a:f1:
                    6d:91:27:2b:7c:b9:f7:ed:a5:78:02:71:6b:95:ce:
                    63:95:9c:5d:3c:32:0e:10:7c:e0:a6:a4:d9:3a:54:
                    b5:53:2e:b5:44:d3:c9:0f:57:fe:58:c3:d4:6c:e6:
                    7d:42:96:a7:ed:23:16:40:1b:38:e0:5d:6c:67:71:
                    2d:2d:f6:4b:17:38:9d:e4:9f:6c:06:3c:8e:8c:79:
                    b0:f5:54:9f:01:08:62:b6:34:40:d3:9d:0f:8b:14:
                    76:d8:db:d2:e2:4f:86:02:1c:2d:09:41:82:d3:2d:
                    07:c1:78:e4:6b:26:bd:54:a2:77:00:f5:59:a8:12:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9C:66:05:9B:DC:75:C2:9B:50:FD:17:75:79:A1:9D:D0:43:D5:14
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:33:3a:22:ae:f0:9e:c6:3d:39:2f:17:ce:1e:2d:39:b5:
         c2:52:69:74:4e:6b:9a:70:8d:64:15:b2:f8:27:d7:d3:e2:ba:
         9a:c4:83:db:dc:55:0c:36:bf:25:bd:35:c2:f8:15:88:06:3b:
         34:a5:09:a6:ac:cd:1d:85:d0:54:43:15:4e:da:ee:5a:45:75:
         aa:fb:54:d0:8e:df:af:fc:95:8b:7d:38:70:38:da:68:4b:a8:
         1f:2f:77:3f:15:87:8a:49:db:15:fe:cd:0a:40:f4:ac:55:b0:
         4d:bd:df:ba:66:fa:da:3c:96:09:7a:a2:14:38:13:cd:d3:7f:
         1d:be:b3:4b:0a:12:00:bf:1c:9b:38:e8:79:8a:a2:15:61:84:
         e6:92:e3:0b:a8:47:96:d6:24:0e:50:e1:23:0c:de:ad:51:9e:
         7b:7e:97:40:ba:88:ae:1c:53:1c:18:89:07:5c:e2:01:e9:cb:
         ca:a3:8b:da:d7:83:a4:68:f5:97:4d:7b:f3:6a:0f:31:bb:7c:
         ff:9f:98:84:b9:e4:ef:6c:f9:45:9a:4a:55:c9:35:99:d8:9e:
         e2:7f:7f:4f:2d:37:50:d2:ad:2b:fb:36:a1:0b:42:b4:b3:0c:
         d8:cc:ec:a4:c4:e5:f7:c0:be:69:24:48:01:6a:17:7c:c8:e0:
         b7:22:a6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:14 2025 by rpki-client on console.sobornost.net