Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          n0gdWoH9uBFd98HHDPPoaOciCacTTcJata85dnzr+NM=
Subject key identifier:   DA:9D:A3:52:FF:2C:6C:C7:E3:97:1F:12:E6:FD:D9:55:AE:EE:CB:79
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       5B1C9CACAB0860FEDAABBD5656F81097846F72B6
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:31 +0000
ROA not before:           Sun 30 Jul 2023 23:59:31 +0000
ROA not after:            Mon 29 Jul 2024 00:04:31 +0000
asID:                     4800
IP address blocks:        2400:8000:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1c:9c:ac:ab:08:60:fe:da:ab:bd:56:56:f8:10:97:84:6f:72:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:31 2023 GMT
            Not After : Jul 29 00:04:31 2024 GMT
        Subject: CN=DA9DA352FF2C6CC7E3971F12E6FDD955AEEECB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:a8:b0:15:dc:dc:13:a3:13:e9:b1:41:69:
                    99:af:c8:15:63:45:3f:fa:a6:11:51:bb:b5:cd:94:
                    27:34:c4:0d:08:34:9b:d7:fe:91:27:dc:9b:d8:d0:
                    03:13:de:4f:66:c5:73:5d:c9:78:cb:4b:a2:33:f4:
                    95:e5:3f:63:65:77:b8:99:a0:3f:7a:0b:d4:c0:84:
                    9b:33:03:b7:47:37:a2:ff:d2:dd:6f:a6:4d:49:0c:
                    04:99:78:ed:c8:47:0a:1b:91:b8:f2:a3:6a:1c:76:
                    f9:1e:5d:d8:ac:51:39:6d:a7:43:35:5e:c4:c2:23:
                    2e:1c:d8:03:a9:c9:22:48:b9:45:a5:28:c5:06:2b:
                    31:50:77:96:a1:a5:16:b8:90:21:5e:aa:d0:41:5f:
                    8e:b7:39:bf:25:29:78:fb:9e:9b:8a:b8:d9:da:ed:
                    2e:71:37:fa:41:3f:1b:7b:32:7e:cd:57:e6:56:d8:
                    0c:5d:84:35:ae:f4:70:3c:dd:90:ac:88:92:de:79:
                    ce:df:38:2a:7e:6e:74:50:9b:9d:62:92:94:26:f5:
                    6c:a7:11:15:2f:25:77:9d:c9:c2:24:31:d5:88:75:
                    fd:8c:1c:b7:f6:3b:f4:03:ba:e8:3a:44:d4:0c:f9:
                    f2:03:7d:01:2f:cf:66:3a:30:dd:c3:b1:f2:20:cd:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9D:A3:52:FF:2C:6C:C7:E3:97:1F:12:E6:FD:D9:55:AE:EE:CB:79
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:26:d4:ea:dc:f7:b6:1f:47:c3:d4:e2:f4:4d:4f:f9:83:39:
         8f:ea:2b:9d:cf:ea:39:a2:43:cb:5c:14:18:13:e3:63:2b:98:
         64:2c:2b:8b:99:eb:a6:72:0d:62:51:f5:db:08:99:cd:30:f7:
         d8:ae:7b:e5:48:cf:f4:c0:47:c9:2c:1d:d8:5f:ce:96:e7:9f:
         9e:cc:db:6e:02:9a:bd:81:37:a4:6c:32:bc:31:69:01:9c:bd:
         cf:86:07:04:fa:66:c4:e0:12:61:56:e0:70:37:b1:8b:eb:e2:
         22:05:dd:5f:7a:c8:b4:90:83:27:1a:9b:da:ef:15:61:33:bd:
         86:07:73:1e:ac:ca:49:79:fc:30:aa:66:e7:17:99:5a:9a:66:
         b7:cc:c9:ad:79:04:c5:56:e1:0a:f1:a6:85:0a:12:ff:fd:aa:
         1f:53:33:65:a3:bd:34:a1:5c:94:12:30:8b:96:62:a7:c3:6c:
         ee:25:6d:c3:f1:40:d5:e3:50:04:1c:02:a7:d5:09:b5:47:6c:
         29:2b:9c:0f:ad:72:c2:f5:3f:af:4f:ec:18:9e:3b:24:3d:f0:
         1c:25:37:f3:40:f0:f8:55:0e:9f:bd:8b:2b:70:89:9b:22:a5:
         7b:bf:e0:fa:dc:3c:84:16:06:fd:50:16:98:22:12:5e:93:b1:
         88:ed:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:44:45 2024 by rpki-client on console-ams.rpki-client.org