Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          COeOA95FHMkgC0jU1T+uWEe/rdVn7xtHSPm1gXq8rFI=
Subject key identifier:   F9:90:E5:3F:66:D0:25:24:12:97:C6:46:D8:21:6A:5C:B0:31:23:6C
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       4EA273B46EE5A53F3183CCF8C6F20950BF908D30
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:31 +0000
ROA not before:           Sun 30 Jul 2023 23:59:31 +0000
ROA not after:            Mon 29 Jul 2024 00:04:31 +0000
asID:                     4800
IP address blocks:        2400:8000:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 13:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a2:73:b4:6e:e5:a5:3f:31:83:cc:f8:c6:f2:09:50:bf:90:8d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:31 2023 GMT
            Not After : Jul 29 00:04:31 2024 GMT
        Subject: CN=F990E53F66D025241297C646D8216A5CB031236C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:d1:20:9f:85:ea:6a:5a:92:01:c8:9b:95:
                    fe:22:24:97:bf:60:87:31:a2:e9:fd:12:51:f6:0d:
                    21:d4:bf:cf:ed:00:90:e0:5e:57:97:7c:a2:9f:68:
                    48:b2:66:04:e0:d5:cd:6f:fd:86:73:c0:9e:4e:fc:
                    79:d9:0d:98:f1:dd:03:ed:6e:0c:4d:4b:cb:96:00:
                    51:20:31:e8:34:7b:27:32:a9:80:7e:97:c5:11:a4:
                    9c:15:8c:c3:9d:48:64:91:3a:80:6a:16:f6:a5:9a:
                    bf:74:6c:d6:18:16:b7:1a:93:58:1c:7f:bc:63:f1:
                    8c:d6:99:47:0e:e4:85:80:5e:c2:a8:32:1f:0f:77:
                    54:37:64:db:08:cf:b6:83:bb:1f:a0:d0:0a:9a:ff:
                    5c:29:79:12:94:04:12:c4:63:b5:88:a2:7c:7b:f6:
                    aa:2c:b8:dc:b6:fd:8c:70:11:0f:9a:5d:d0:56:5f:
                    f6:e5:45:ae:63:e1:71:fc:75:70:cd:39:5d:b8:64:
                    02:2b:d9:81:ee:34:ae:76:50:ae:ee:23:ec:ba:98:
                    3d:a7:5c:8a:6d:06:09:75:e2:50:2d:00:73:7f:2d:
                    94:24:71:07:8e:84:35:aa:2d:b9:e6:11:d2:02:49:
                    44:65:8d:a5:cd:54:1e:80:af:15:a9:c1:76:db:b1:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:90:E5:3F:66:D0:25:24:12:97:C6:46:D8:21:6A:5C:B0:31:23:6C
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:75:90:40:45:62:c6:5c:9e:b0:42:c4:1c:2d:4d:57:ad:03:
         94:2c:0b:c4:a4:b0:8d:c2:e2:32:60:e1:01:f2:b3:c6:54:4f:
         db:e9:c0:ce:51:21:4a:c8:ec:12:1c:60:a5:b5:ee:61:38:46:
         1f:d9:31:2a:db:85:93:3c:46:fe:e9:23:9f:96:5a:63:89:0b:
         42:3b:e5:e1:7d:a1:16:c2:45:3a:9d:d9:a4:3a:e0:03:25:40:
         f4:d6:d4:47:f3:3d:e6:89:e6:3c:5a:6a:54:4a:6c:cc:ef:1a:
         0c:6d:1c:00:1c:e7:bf:5b:c5:1e:ee:8e:3a:25:a4:02:da:0a:
         af:73:38:e8:50:ea:e0:9a:a1:2c:11:f4:9c:10:30:5f:86:1d:
         c8:fa:3b:c3:f0:d1:53:52:c5:fd:ce:27:2b:7d:36:8c:38:43:
         95:4c:82:a4:8b:a2:2a:a7:22:c6:f0:7c:a4:37:a8:a7:9c:75:
         7e:d8:b4:0d:fe:62:c1:01:a5:b4:76:e5:4b:ef:ee:06:92:8c:
         3e:6f:e9:66:05:06:df:1e:6d:4e:e7:6b:a5:63:3f:eb:74:d8:
         31:21:8d:6c:2b:ce:23:fe:9e:37:23:b9:23:63:1d:bd:15:e2:
         e6:54:85:63:30:fc:19:09:a4:39:a4:ad:4d:b1:e6:b3:e1:0b:
         a6:56:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:15:07 2024 by rpki-client on console-ams.rpki-client.org