Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          g08xSrn8fU++rMTKLcX0v9vbU/isAw7Z3aQCcxjegho=
Subject key identifier:   D4:F7:3A:59:3C:70:96:E9:20:A5:6C:7E:EF:17:F0:11:75:C2:9F:7A
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       3A77645BEEB68A72733CC68C63138DA9F73E7875
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa
Signing time:             Fri 08 Sep 2023 09:00:00 +0000
ROA not before:           Fri 08 Sep 2023 08:55:00 +0000
ROA not after:            Fri 06 Sep 2024 09:00:00 +0000
asID:                     4800
IP address blocks:        2400:8000:8002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:64:5b:ee:b6:8a:72:73:3c:c6:8c:63:13:8d:a9:f7:3e:78:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Sep  8 08:55:00 2023 GMT
            Not After : Sep  6 09:00:00 2024 GMT
        Subject: CN=D4F73A593C7096E920A56C7EEF17F01175C29F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:69:ed:17:5c:48:16:34:4d:f8:72:4f:64:22:
                    c1:57:31:b3:ed:29:d4:a3:31:c1:5d:a5:dd:9a:7e:
                    c7:78:79:bb:b3:f9:51:f1:42:de:57:c9:29:1a:cc:
                    67:72:ce:65:f5:4c:4e:b7:05:04:e2:21:d2:02:61:
                    c1:84:33:15:6e:7c:5b:99:28:92:f0:29:26:c8:43:
                    69:ad:33:3a:3d:45:18:95:df:a0:ec:a6:d1:76:84:
                    ce:3c:53:f7:58:da:97:33:ff:57:c3:76:04:26:a9:
                    6f:41:d0:7f:1e:52:c4:ab:2e:a1:d7:00:a4:2e:e5:
                    c9:be:00:fc:99:04:32:62:d5:50:3e:f1:f1:61:5b:
                    2c:52:72:97:40:2a:dd:fc:d0:d2:e0:3c:02:fe:b5:
                    eb:cb:f6:d9:6d:c8:aa:9a:62:e1:78:21:1e:35:a3:
                    fb:f0:2e:a3:2b:4f:80:72:59:0f:09:ce:95:4f:3b:
                    ac:c5:98:36:7d:e1:81:ca:5a:5d:30:d7:37:45:d7:
                    2b:0e:5b:9b:e3:e3:30:8f:43:1a:23:29:85:14:1e:
                    5f:25:cf:1b:c2:0e:fb:61:fd:db:47:49:ba:6e:87:
                    d9:51:85:ea:b2:10:55:02:63:35:11:b8:7b:29:6f:
                    c3:81:b5:8b:e6:17:f9:61:90:74:3b:45:ae:26:63:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F7:3A:59:3C:70:96:E9:20:A5:6C:7E:EF:17:F0:11:75:C2:9F:7A
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:e3:a4:04:31:db:aa:56:fc:9d:41:61:9f:0a:c5:5e:e4:
         3f:d1:21:2d:80:1a:e1:f6:30:a1:b0:ec:b3:c6:a7:69:f1:32:
         79:4a:44:4a:f4:9f:a2:86:0b:b2:97:a9:12:ee:d8:9b:86:ef:
         7c:5e:28:09:7d:7f:a8:ef:3f:ba:cf:b5:a9:af:4e:d7:f2:8c:
         51:10:52:07:64:dc:e8:38:3f:3f:91:64:71:b9:f8:a3:94:56:
         30:6b:c7:f1:28:4d:ec:38:79:61:51:34:40:c1:75:97:4b:d8:
         fa:a4:a4:a2:4f:e9:63:a5:a8:30:cf:3b:78:06:81:2e:09:86:
         01:7a:b0:92:a7:bb:8f:3c:53:5f:1d:f4:45:ad:43:26:66:29:
         71:2b:bd:54:fc:93:fd:b1:b8:b9:13:10:ed:8d:dd:86:b3:ce:
         72:6d:58:d4:73:80:ba:90:8f:9b:bc:92:84:1e:ea:54:09:42:
         06:1a:be:f2:02:a6:d0:ad:4c:ea:cd:9d:91:b8:96:ad:e3:a1:
         24:f3:47:48:3c:0c:1f:f4:52:46:cc:db:7b:59:70:a7:23:62:
         49:27:cb:fc:1b:c9:86:50:bf:4d:df:8b:bf:da:a5:47:72:96:
         b3:03:8d:7c:1f:fb:81:0c:38:0b:86:03:da:29:5c:dd:9f:1a:
         6d:1c:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:20:38 2024 by rpki-client on console-fra.rpki-client.org