Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          0eZAMf3EKrCLigCe6EHagbJpZLAkSXQ7/pBfxZiqK1w=
Subject key identifier:   D3:79:E3:F3:87:96:BC:D1:13:97:FD:01:1F:DD:E5:AB:13:07:AB:AD
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       47123CF504744FE9E65AEAC6A3A2DE1A50A8321B
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:21 +0000
ROA not before:           Mon 01 Jul 2024 00:58:21 +0000
ROA not after:            Mon 30 Jun 2025 01:03:21 +0000
asID:                     4800
IP address blocks:        2400:8000:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:12:3c:f5:04:74:4f:e9:e6:5a:ea:c6:a3:a2:de:1a:50:a8:32:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:21 2024 GMT
            Not After : Jun 30 01:03:21 2025 GMT
        Subject: CN=D379E3F38796BCD11397FD011FDDE5AB1307ABAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:89:15:4f:e6:ee:08:7b:54:c9:f6:17:51:
                    fe:b5:53:cd:e7:a7:d8:59:ac:b6:fb:9a:29:15:40:
                    1a:11:a7:e8:c9:c7:9f:d0:e4:a9:3a:3e:ad:02:2f:
                    3c:70:35:65:98:b2:c9:d3:eb:f0:7e:e1:8f:7c:7b:
                    48:06:1a:85:8d:80:99:82:a1:be:e9:b7:3c:b3:5a:
                    07:4b:30:f8:85:5e:96:90:8a:64:76:7c:03:15:98:
                    80:39:de:d7:4e:91:f1:5b:3a:a9:46:58:dc:48:d8:
                    52:dd:ee:2e:e3:f0:30:f2:d3:e2:93:1d:dc:dc:d7:
                    7b:b4:d6:8a:d7:0f:a4:61:28:72:30:ba:43:c6:1f:
                    e5:3c:d5:bc:21:df:02:aa:32:f7:91:cd:da:ff:38:
                    f9:9e:30:33:10:d0:3d:da:18:cf:80:ed:df:0d:1d:
                    19:61:77:00:bd:56:93:ab:e0:27:26:0c:d1:0b:5f:
                    c1:64:8d:1c:b1:66:67:5e:0c:41:ae:f6:ce:85:bb:
                    6a:ea:26:5e:c3:81:ee:09:cf:a0:9f:1f:de:30:f9:
                    e2:1a:49:90:cc:bc:1c:11:f7:65:50:e7:ef:df:ec:
                    5a:4d:dc:55:c5:5b:8f:91:73:9c:e6:74:27:f9:49:
                    ce:6c:63:f1:75:e9:c5:23:fc:23:38:9b:de:4f:50:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:79:E3:F3:87:96:BC:D1:13:97:FD:01:1F:DD:E5:AB:13:07:AB:AD
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:34:6c:a1:78:fa:0f:3d:90:34:13:5f:42:0e:31:29:18:
         86:88:71:1c:31:53:bc:24:a3:ea:95:36:b2:fa:c4:57:95:4d:
         97:08:29:28:dc:c9:3b:32:23:37:c4:cb:1d:a8:52:eb:e2:50:
         95:da:f8:5f:78:26:0d:54:87:28:a9:b8:9e:b0:3f:a6:d9:09:
         44:0c:b7:58:10:98:26:6e:32:28:69:2b:3c:96:b7:ee:5d:2a:
         cd:b6:47:02:c4:9d:d6:9b:10:39:93:c7:a7:39:43:e5:7a:88:
         35:07:64:5a:79:3a:4c:cb:9f:dc:38:af:d4:16:b4:f0:de:d4:
         7b:f3:52:48:73:92:ab:2e:d4:f7:52:a7:5d:f3:19:d6:84:ed:
         01:eb:70:1f:3c:cb:09:ea:a3:8b:f0:06:6d:7f:42:2f:21:b9:
         57:4d:01:d8:51:ef:04:c5:28:85:24:65:50:82:91:15:48:e5:
         f5:69:d9:1d:30:14:0a:97:e2:06:05:af:bf:0c:93:83:cd:c5:
         75:a9:bb:57:32:f3:ec:06:eb:27:28:24:27:14:da:4b:e2:59:
         7a:06:7b:72:8e:1d:01:d2:94:d2:fb:a4:bd:85:2e:d0:76:2e:
         ce:1c:65:d3:d9:7a:11:3c:c3:50:2e:86:65:48:80:6e:34:db:
         19:39:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org