Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          veU3o/msX0KXRTL3dT394OG/zZr3g+tFseSdnkMMA+A=
Subject key identifier:   46:2B:61:F1:CA:AD:6D:9C:79:49:DE:0E:4A:15:63:68:80:0B:30:E2
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       2C955D835D5EA426F831923DCCF330D0A64D7FA9
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:18 +0000
ROA not before:           Mon 01 Jul 2024 00:58:18 +0000
ROA not after:            Mon 30 Jun 2025 01:03:18 +0000
asID:                     4800
IP address blocks:        2400:8000:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:5d:83:5d:5e:a4:26:f8:31:92:3d:cc:f3:30:d0:a6:4d:7f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:18 2024 GMT
            Not After : Jun 30 01:03:18 2025 GMT
        Subject: CN=462B61F1CAAD6D9C7949DE0E4A156368800B30E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:8f:c7:4e:c2:3d:30:82:10:2a:21:80:06:
                    25:b8:6e:49:69:15:a8:56:84:7d:ae:4f:6a:42:8b:
                    53:f2:74:e0:61:14:4c:fc:78:0c:3f:ff:e9:91:71:
                    69:93:9b:b3:9f:8d:46:ea:32:b4:e9:94:6e:be:dd:
                    6c:e6:a4:92:93:ef:1b:24:67:19:0b:72:8c:66:d7:
                    77:5f:d6:ef:b8:d0:85:28:40:05:cb:1d:a5:3c:b3:
                    c5:07:ae:89:31:9f:2e:f3:9f:44:2d:89:3f:c3:01:
                    2b:89:57:a6:8f:87:2e:7e:ce:28:55:dc:12:11:4f:
                    f4:a0:02:eb:93:7a:24:b3:82:03:45:f7:96:2b:15:
                    5c:2c:7e:92:84:4d:bc:32:6a:b9:fa:fb:44:56:f3:
                    6a:c1:e3:08:06:69:1d:dc:ea:75:0f:3d:26:b6:9e:
                    cb:5c:01:a3:b2:0c:04:b5:05:54:8f:80:e5:6c:70:
                    05:6b:5b:7b:dd:62:62:03:7f:00:3d:9b:7b:8a:aa:
                    cb:3e:d6:1e:12:e6:ed:de:d1:93:9f:44:93:8d:ad:
                    c2:13:43:9b:b4:ba:dd:1e:e3:7b:cf:0f:1d:a1:a1:
                    ee:d8:a6:b4:90:39:f8:0d:e6:8e:dc:62:48:cd:d1:
                    bd:62:89:0f:6c:ea:f0:55:5d:dd:95:56:c3:7a:fd:
                    f3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2B:61:F1:CA:AD:6D:9C:79:49:DE:0E:4A:15:63:68:80:0B:30:E2
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:83:78:32:22:7f:38:23:a5:ec:9c:95:41:9e:21:bc:ea:
         56:90:28:0e:72:b3:63:6c:04:48:63:16:de:39:9a:75:8d:4c:
         b8:5a:8f:48:4c:02:7c:7c:67:d2:c5:9f:1e:36:59:68:06:36:
         bb:93:10:f7:21:1b:16:ab:78:5d:57:1c:a7:a6:07:f7:5b:3a:
         96:cc:ac:58:50:a7:06:02:3c:69:a7:eb:5b:c4:4b:0a:61:59:
         a3:cf:87:00:8e:c6:03:ec:d7:30:0b:42:71:5d:4b:77:53:69:
         be:9e:0c:94:cb:db:96:65:73:66:46:ea:e0:09:47:61:50:29:
         27:9a:5b:7e:e2:37:f7:57:3e:b6:f7:12:6c:49:36:78:f7:65:
         95:93:33:c4:03:a0:35:fc:d8:d2:07:af:1a:7e:61:32:8f:be:
         62:72:d5:4d:7b:95:46:30:39:5c:ac:5c:3d:fe:6c:54:23:ab:
         92:04:5f:42:fb:87:75:91:37:6d:86:bd:9f:c0:28:85:d4:f5:
         8d:47:53:ff:32:90:04:58:45:bf:6a:d9:3a:c7:fc:fa:05:d8:
         3d:56:df:b6:db:9f:e2:5a:da:fc:5e:15:eb:0a:7f:b0:68:ac:
         c4:08:1a:34:08:9d:52:43:8b:e1:c5:d0:ea:8f:c2:05:0d:15:
         dc:5a:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org