Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          ahSCW2g1IHb8jekOqxePAgM89k/iE+HT4sPSNATjDkI=
Subject key identifier:   61:08:58:0D:EE:FE:E9:92:F1:D5:24:A4:00:B7:C1:CD:5D:69:76:6B
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       1FE724262F1FAC5D5D1971402B8C1FBBD911B647
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa
Signing time:             Fri 08 Sep 2023 09:00:00 +0000
ROA not before:           Fri 08 Sep 2023 08:55:00 +0000
ROA not after:            Fri 06 Sep 2024 09:00:00 +0000
asID:                     4800
IP address blocks:        2400:8000:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Jun 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e7:24:26:2f:1f:ac:5d:5d:19:71:40:2b:8c:1f:bb:d9:11:b6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Sep  8 08:55:00 2023 GMT
            Not After : Sep  6 09:00:00 2024 GMT
        Subject: CN=6108580DEEFEE992F1D524A400B7C1CD5D69766B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:db:e0:6f:55:29:4a:5d:fe:5a:93:37:a0:
                    72:a9:8e:65:ab:c5:b1:ce:63:2c:40:e0:cd:91:b6:
                    33:1c:e2:ee:28:8d:41:a4:97:ff:ce:7d:0c:fb:7f:
                    6d:ca:cb:25:f3:f3:4e:de:40:0a:6b:7e:c0:01:70:
                    84:90:20:47:84:67:6d:ce:cb:3f:c0:ed:98:bc:f8:
                    c4:38:69:62:2d:57:eb:6a:65:d1:4a:61:c6:eb:df:
                    9f:5d:0b:ea:e8:63:38:2d:1e:f4:90:14:7c:32:37:
                    f6:e2:c2:47:23:c6:c6:07:55:f1:c6:14:a2:0c:5d:
                    0a:04:65:1c:67:f6:0d:1e:91:ad:2b:21:84:c4:b6:
                    3e:67:b8:40:1a:53:45:7b:33:65:0c:35:36:09:4d:
                    4e:13:b7:28:e7:6c:62:62:42:d6:ed:5c:b8:27:00:
                    ee:e8:7f:2b:de:f4:b9:0b:c4:ea:8b:5f:74:71:51:
                    74:e6:ca:f4:b7:81:7f:88:cf:d4:35:45:8f:20:85:
                    2b:5b:91:e6:d9:32:d3:f7:b7:ae:d9:5d:29:8c:82:
                    01:7d:61:90:df:79:e0:25:03:29:da:7d:68:79:11:
                    c6:67:fa:5f:40:e1:d2:fd:eb:ce:ff:71:52:78:69:
                    f8:e6:b0:c0:fa:53:0c:14:c7:76:51:ba:93:74:0e:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:08:58:0D:EE:FE:E9:92:F1:D5:24:A4:00:B7:C1:CD:5D:69:76:6B
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:a6:8f:b9:e9:3d:34:88:f0:f8:81:88:1c:bf:83:ef:c6:d6:
         eb:11:c2:6c:21:89:1e:09:3c:4e:83:c8:99:99:49:a2:14:7e:
         59:fc:b0:9f:0c:6c:ff:c4:e4:f1:a9:b3:e2:38:b7:50:23:ef:
         67:b5:17:b2:83:83:8e:5f:1c:ea:a7:9d:10:e6:78:94:a0:06:
         ea:ab:bd:59:f6:ee:61:9f:eb:4d:2e:14:ad:13:7f:f7:23:78:
         b6:18:95:25:76:c5:1d:ed:94:88:c3:c9:95:3b:cd:f6:27:b8:
         61:12:ef:5c:1a:52:e7:fc:c3:d1:6c:fd:6b:5f:e4:63:d1:af:
         44:71:63:92:36:f2:bf:dc:1e:9e:60:c7:cc:53:08:4a:22:47:
         fc:6f:57:2e:0a:08:e3:ea:9b:b9:54:63:c9:2d:ce:5a:26:7e:
         92:9c:b1:0e:11:98:d8:0c:9d:7c:08:25:86:87:48:3d:aa:1a:
         db:fe:b9:52:68:15:bd:6a:65:0c:bf:b4:79:be:6b:a4:3c:94:
         64:dc:f0:59:dd:b5:76:83:23:9f:25:0c:b1:8c:13:16:d5:12:
         f6:83:3b:43:3e:0c:e0:87:db:6e:d5:de:47:b0:d9:2f:55:f9:
         9f:01:cf:a3:d7:6a:44:28:af:b5:f2:97:13:2e:d1:3d:8c:74:
         b2:ca:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:12:40 2024 by rpki-client on console-fra.rpki-client.org