Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          JTNDxTD2XnQLlmNlSFbrAmmiJTcNpA4ylwtbfxuwgoY=
Subject key identifier:   B9:B0:2E:AD:A2:B1:4E:92:DC:85:C3:5D:BF:CB:0E:B8:B5:19:97:E0
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       7E665AD892E831C4E8F5B8C6693767B0ECCDB9F6
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:31 +0000
ROA not before:           Sun 30 Jul 2023 23:59:31 +0000
ROA not after:            Mon 29 Jul 2024 00:04:31 +0000
asID:                     4800
IP address blocks:        2400:8000:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 13:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:5a:d8:92:e8:31:c4:e8:f5:b8:c6:69:37:67:b0:ec:cd:b9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:31 2023 GMT
            Not After : Jul 29 00:04:31 2024 GMT
        Subject: CN=B9B02EADA2B14E92DC85C35DBFCB0EB8B51997E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:24:d8:16:81:d8:99:a5:96:e8:fd:eb:42:
                    9a:29:fb:e1:b7:02:8a:de:06:01:37:6c:97:5a:69:
                    e7:db:b0:2c:93:e6:4d:d7:47:9d:97:f3:fe:58:5d:
                    fc:bd:ed:15:c4:ef:3c:52:e2:80:61:a9:a8:f0:19:
                    6b:72:85:c6:84:d6:6a:b2:cb:5b:cd:6b:f2:01:65:
                    2b:a2:23:d7:04:56:a7:0c:1e:11:00:bb:e9:0c:38:
                    10:b3:a2:f8:f6:55:94:1d:c8:17:14:da:05:39:f2:
                    41:79:43:39:e3:9c:92:73:f2:75:93:0e:3b:73:e9:
                    43:ae:4d:55:2f:3d:79:08:50:3b:21:f4:01:71:9a:
                    26:35:82:a1:02:12:d0:4a:f6:c7:7e:43:c7:e5:86:
                    39:6c:3e:eb:86:d4:95:eb:b6:3d:f6:dd:8e:1c:4e:
                    db:9f:c2:a5:be:9b:99:16:e0:c5:ae:2c:a3:ea:0f:
                    57:d4:7a:fa:71:30:94:af:88:4c:86:75:89:13:28:
                    19:0a:8c:d8:c2:12:dc:5b:2b:a1:f2:3c:1c:b9:a1:
                    7c:7a:5c:c1:23:57:81:9d:b8:28:41:b3:4d:96:9b:
                    fa:37:ac:39:3c:ca:93:9e:dc:b8:34:9a:b0:ec:fd:
                    d9:0c:6e:f6:1f:52:91:c4:27:73:3b:c4:eb:7c:a0:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B0:2E:AD:A2:B1:4E:92:DC:85:C3:5D:BF:CB:0E:B8:B5:19:97:E0
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:df:f5:c2:ea:cc:03:80:97:eb:a0:6e:6b:89:8b:13:5e:7e:
         e8:22:aa:1c:c7:f5:c5:ba:26:cd:4f:3d:1e:0b:b3:13:ac:bf:
         70:39:23:5a:dd:97:5a:8e:e3:30:4e:12:1e:0b:a8:a1:f4:18:
         22:d1:eb:94:14:3a:63:fc:61:79:80:e0:0b:66:4b:ea:89:75:
         e5:bb:2c:0f:de:61:5b:41:79:cf:49:dc:20:a3:fb:c1:68:90:
         cd:c2:93:8f:ee:ee:b4:f9:e1:a0:20:38:d3:3e:7c:bb:d3:bc:
         31:f4:61:87:20:2b:31:82:97:90:6a:0b:16:86:5f:d6:46:2a:
         98:08:12:1b:c6:ee:6f:08:f2:ce:6c:ac:b3:02:20:e9:b6:d4:
         7e:46:1c:53:c2:d7:61:8d:57:fb:56:21:67:81:6b:b3:45:b1:
         0f:58:f3:7c:32:be:33:d0:78:f0:ac:17:d7:33:9b:75:1c:13:
         3f:0d:9a:58:34:d5:b9:7a:66:cf:5c:09:a8:ec:ce:8c:7f:ee:
         f9:0f:6b:12:85:7f:12:75:53:d8:59:34:8c:b8:07:cb:39:d4:
         2b:56:8b:9b:de:c9:1f:84:a9:51:26:e7:0f:1e:29:f6:58:63:
         ee:19:6a:94:64:2a:20:20:60:e2:66:15:5d:8a:0f:cf:e0:79:
         3e:ac:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:15:07 2024 by rpki-client on console-ams.rpki-client.org