Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          m2kyXLcEZ38H/pCsWVNg2JrOD7sFDK1O4b+vLlcNYlI=
Subject key identifier:   01:1F:BE:F4:EE:04:3A:19:3A:79:38:AB:46:02:B0:07:37:7C:54:AC
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       5094CE4CFE053B6DC4D3512B2FB5E5F36E9668EE
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 02 Jun 2025 01:03:21 +0000
ROA not before:           Mon 02 Jun 2025 00:58:21 +0000
ROA not after:            Mon 01 Jun 2026 01:03:21 +0000
asID:                     4800
IP address blocks:        2400:8000:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:94:ce:4c:fe:05:3b:6d:c4:d3:51:2b:2f:b5:e5:f3:6e:96:68:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:21 2025 GMT
            Not After : Jun  1 01:03:21 2026 GMT
        Subject: CN=011FBEF4EE043A193A7938AB4602B007377C54AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:93:f2:4f:9d:c5:02:8f:b3:8f:05:fe:e1:
                    4a:31:43:e1:15:f6:52:0c:26:d2:68:88:0b:c3:ee:
                    76:ea:6a:ae:30:1e:02:5a:99:8a:84:d9:e0:3c:c2:
                    29:e7:f0:5d:88:85:99:da:df:92:97:63:1a:3b:2d:
                    4b:1a:43:34:e0:b2:95:af:a6:8d:ea:2e:2d:32:3d:
                    cd:49:4e:5e:73:4c:5a:40:4d:2d:72:11:7e:b3:0b:
                    90:26:36:37:70:3d:5b:e8:03:e3:84:5f:58:d9:21:
                    1c:a3:c3:42:79:92:fb:09:b2:bf:d8:3d:65:49:a2:
                    45:fb:90:25:7f:36:2c:46:13:27:4e:a8:04:83:9e:
                    49:10:a0:73:cb:92:cd:08:ef:79:3e:9f:91:7e:76:
                    ae:8f:5c:c3:be:88:02:b7:de:29:77:dc:da:6f:dd:
                    f9:22:80:e7:fb:8d:a4:6f:e3:94:d5:8f:4c:bf:13:
                    ef:28:33:a1:81:6f:51:1f:46:f3:18:9c:3b:5b:85:
                    14:8a:5a:de:a3:ba:6c:6c:9d:ed:99:f2:ce:fd:d5:
                    2c:01:e5:fa:09:bd:02:b6:e2:b5:30:89:fd:82:31:
                    fe:ba:8e:15:76:48:87:16:d0:0a:98:e3:a6:82:9f:
                    01:19:d8:c7:74:17:ae:cb:99:12:6d:59:ed:98:7e:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1F:BE:F4:EE:04:3A:19:3A:79:38:AB:46:02:B0:07:37:7C:54:AC
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:b8:85:48:82:3c:e3:15:43:41:ac:a4:f8:64:ef:f7:05:2f:
         ef:49:ad:50:ca:16:ac:26:3c:60:4f:9c:82:e6:91:36:75:08:
         bc:17:67:c5:ff:18:74:a1:13:2f:17:3e:99:d4:19:0b:fb:d4:
         8a:b5:50:a6:24:02:d0:25:f4:9b:be:d2:02:40:32:b1:ed:39:
         fb:52:a5:e6:02:85:37:d0:93:7a:ad:0d:39:f9:a0:97:52:ea:
         36:0d:7c:ed:c1:40:58:68:d1:fa:f5:e4:b2:92:76:c0:39:1a:
         33:28:d4:12:04:1c:3d:ee:48:7c:05:27:10:e4:74:24:8d:1d:
         b4:8e:e4:bd:be:61:6b:a4:1c:9f:eb:72:b9:2a:14:23:0c:cb:
         d1:a5:bc:2e:38:d8:61:9f:80:b1:28:09:e2:16:e0:52:e4:80:
         7d:70:8f:62:ed:ef:5e:90:af:cb:5d:0a:82:2d:7c:d1:f2:d1:
         ba:5b:56:de:d5:10:72:83:a2:42:41:fd:d5:66:ad:5a:be:ea:
         60:c4:c0:89:46:45:5e:ef:39:ae:ef:f5:9b:54:50:73:00:43:
         fe:d5:0c:3c:2d:7b:1b:ee:1a:38:dc:16:30:c1:2c:a2:fd:4e:
         68:7c:d6:be:75:bb:89:a7:27:14:2c:49:27:38:8d:b3:11:30:
         7c:39:c9:b0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUJTOTP4FO23E01ErL7Xl826WaO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yNTA2MDIwMDU4MjFaFw0yNjA2MDEwMTAzMjFaMDMxMTAvBgNV
BAMTKDAxMUZCRUY0RUUwNDNBMTkzQTc5MzhBQjQ2MDJCMDA3Mzc3QzU0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSpPyT53FAo+zjwX+4UoxQ+EV
9lIMJtJoiAvD7nbqaq4wHgJamYqE2eA8winn8F2IhZna35KXYxo7LUsaQzTgspWv
po3qLi0yPc1JTl5zTFpATS1yEX6zC5AmNjdwPVvoA+OEX1jZIRyjw0J5kvsJsr/Y
PWVJokX7kCV/NixGEydOqASDnkkQoHPLks0I73k+n5F+dq6PXMO+iAK33il33Npv
3fkigOf7jaRv45TVj0y/E+8oM6GBb1EfRvMYnDtbhRSKWt6jumxsne2Z8s791SwB
5foJvQK24rUwif2CMf66jhV2SIcW0AqY46aCnwEZ2Md0F67LmRJtWe2YfrgfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUAR++9O4EOhk6eTirRgKwBzd8VKwwHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMyMzQzMDMwM2EzODMwMzAzMDNhMzEzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQAgAAQ
ADANBgkqhkiG9w0BAQsFAAOCAQEApriFSII84xVDQayk+GTv9wUv70mtUMoWrCY8
YE+cguaRNnUIvBdnxf8YdKETLxc+mdQZC/vUirVQpiQC0CX0m77SAkAyse05+1Kl
5gKFN9CTeq0NOfmgl1LqNg187cFAWGjR+vXkspJ2wDkaMyjUEgQcPe5IfAUnEOR0
JI0dtI7kvb5ha6Qcn+tyuSoUIwzL0aW8LjjYYZ+AsSgJ4hbgUuSAfXCPYu3vXpCv
y10Kgi180fLRultW3tUQcoOiQkH91WatWr7qYMTAiUZFXu85ru/1m1RQcwBD/tUM
PC17G+4aONwWMMEsov1OaHzWvnW7iacnFCxJJziNsxEwfDnJsA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:15:54 2025 by rpki-client