Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          f9xmy2mV8qaaUHH5PnNS1Uy0+DQnYdeGhSr7eMehTSg=
Subject key identifier:   0E:33:95:8A:91:C6:C6:33:9A:02:7E:37:27:22:8D:EE:91:56:02:BA
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       4358208DE989D55F61D522CE1393D69E479FFCFB
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:33 +0000
ROA not before:           Sun 30 Jul 2023 23:59:33 +0000
ROA not after:            Mon 29 Jul 2024 00:04:33 +0000
asID:                     4800
IP address blocks:        2400:8000:2420::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:58:20:8d:e9:89:d5:5f:61:d5:22:ce:13:93:d6:9e:47:9f:fc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:33 2023 GMT
            Not After : Jul 29 00:04:33 2024 GMT
        Subject: CN=0E33958A91C6C6339A027E3727228DEE915602BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a0:94:36:67:e4:92:82:6b:04:ad:81:5a:f2:
                    4a:e1:9b:95:c7:c8:dd:ba:2c:01:71:ce:85:24:f6:
                    6b:c0:84:50:01:c9:59:cd:2c:a6:2d:28:f7:57:98:
                    82:dc:ab:91:a2:99:dd:fb:f0:9b:1d:6c:06:cc:47:
                    af:6c:cd:04:38:7c:aa:d1:1f:b0:84:bc:92:b7:2b:
                    98:b8:49:7e:b7:82:6d:88:3d:25:58:9b:47:bf:69:
                    0c:cb:8e:e9:d6:a3:68:c1:b1:bc:49:d8:76:14:a3:
                    45:37:b6:c3:4d:23:4b:ff:8f:e1:6a:72:27:cf:05:
                    69:3d:be:c1:55:c5:75:d1:2a:55:e1:82:2e:7a:af:
                    98:20:fc:d0:b7:71:73:62:77:f9:f4:3c:e1:e7:0b:
                    58:aa:f8:7f:d0:62:43:da:25:60:ba:20:6c:fa:5f:
                    1e:d9:cb:3a:97:17:64:dd:89:2b:28:59:0b:9e:14:
                    ed:ea:11:ef:7f:ff:0c:71:3b:0e:ab:e8:81:4b:50:
                    0e:5b:de:a2:89:c0:07:66:ef:48:bd:4f:c7:c1:2b:
                    50:12:50:ef:31:77:ab:ba:e7:25:d7:d2:03:50:76:
                    71:a4:62:b2:27:85:44:cf:b6:55:12:22:38:fe:f5:
                    06:df:f4:43:52:44:44:17:c0:7e:90:82:fe:40:14:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:95:8A:91:C6:C6:33:9A:02:7E:37:27:22:8D:EE:91:56:02:BA
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:2420::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:81:53:17:9a:00:e2:db:1c:0d:e6:4c:90:86:35:95:02:da:
         4e:5f:06:d8:2a:55:c2:94:b0:8e:a5:f9:db:9a:b0:cf:c6:a2:
         ef:7d:62:28:7f:bf:c4:80:38:12:75:f6:34:0d:2d:4c:be:f2:
         8d:c4:15:95:d7:6c:d8:82:58:0e:b4:6a:10:c3:91:97:9c:c1:
         73:9b:78:7a:8c:c0:c1:01:02:6c:f1:15:5d:43:d9:8d:53:9a:
         74:24:63:67:6c:31:b8:74:25:0c:85:bf:98:4e:a3:59:83:62:
         cd:70:a5:56:e9:18:e1:5c:63:4f:52:5f:bc:74:d1:98:bf:3c:
         99:0d:c2:75:fe:ce:86:06:4d:fa:75:45:61:77:9f:48:2e:05:
         4d:a3:e0:0d:e7:6e:d2:5a:67:be:30:4d:19:0c:56:e2:7a:62:
         9d:35:44:5c:f3:0a:8a:64:e7:ba:e9:c7:ab:6d:ca:b1:f2:39:
         75:bf:03:4e:1b:60:1e:3d:b5:af:00:12:a9:3b:42:31:79:16:
         b4:1f:38:d7:1a:eb:a0:12:a7:a9:2e:98:bd:14:06:f0:f6:7b:
         80:44:5e:88:cc:61:e4:43:63:40:07:53:d2:70:03:71:0a:68:
         9d:94:8e:a2:2c:cd:e5:1d:88:2b:03:3d:7b:46:49:6f:29:a9:
         83:21:d7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:44:45 2024 by rpki-client on console-ams.rpki-client.org