Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          gD+4sywohhnQRWKfMILA/QuA/xspLLITtghQhj04Jf8=
Subject key identifier:   1E:17:6B:9F:9B:6A:FF:D3:55:FA:37:49:53:DA:A9:E3:69:05:04:7D
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       78E6DF72810317C5C3C475424691C367CE491297
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 02 Jun 2025 01:03:20 +0000
ROA not before:           Mon 02 Jun 2025 00:58:20 +0000
ROA not after:            Mon 01 Jun 2026 01:03:20 +0000
asID:                     4800
IP address blocks:        2400:8000:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e6:df:72:81:03:17:c5:c3:c4:75:42:46:91:c3:67:ce:49:12:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:20 2025 GMT
            Not After : Jun  1 01:03:20 2026 GMT
        Subject: CN=1E176B9F9B6AFFD355FA374953DAA9E36905047D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:c9:90:e1:80:93:32:d5:c7:5f:b0:f4:2e:
                    f0:8d:aa:76:b0:f8:d9:77:c3:01:75:a4:c2:e1:60:
                    30:56:05:8b:45:53:28:6c:6f:ec:f6:67:31:c5:8a:
                    5f:0c:ec:3f:91:33:7b:61:81:4c:87:ab:96:27:39:
                    fb:93:42:2f:3a:33:11:78:97:da:86:68:d0:51:df:
                    6b:3d:b9:bd:6c:19:1c:fc:1a:bc:e0:08:33:5a:15:
                    84:28:ec:68:0f:20:38:f7:bb:29:2c:33:ac:7f:f8:
                    b8:bb:06:4d:de:81:1a:f8:02:07:35:32:21:2f:ce:
                    1c:9d:ab:d6:26:a5:a1:a5:eb:e0:e1:83:4f:db:16:
                    67:e7:c9:09:ed:7f:47:dc:ea:5c:7d:95:1f:55:18:
                    d6:93:4d:ce:7b:10:c9:bc:4f:21:b9:b7:d6:a4:29:
                    ec:8c:22:ea:19:5b:43:85:1c:49:2a:7a:bd:5b:5f:
                    4b:71:b4:16:97:63:b2:af:8e:ea:ab:2f:5f:95:91:
                    64:55:0d:11:ae:c8:44:65:3f:fa:fd:a2:01:72:6d:
                    2c:d4:f2:92:71:8e:c3:55:09:17:f3:10:04:c5:50:
                    01:6d:d7:70:0b:9d:c0:91:95:fa:a2:e1:cf:ba:32:
                    bf:6c:df:59:50:e6:bb:08:0a:4f:15:38:20:32:0a:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:17:6B:9F:9B:6A:FF:D3:55:FA:37:49:53:DA:A9:E3:69:05:04:7D
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:d8:8e:fa:07:e6:f3:1e:f2:25:8f:10:58:3c:c9:5d:eb:
         28:f5:6a:a8:3a:51:31:1f:85:4c:9d:72:19:a3:a6:e5:4c:82:
         fa:90:65:75:6e:52:15:3d:c5:e5:30:20:7d:8d:5b:8d:6d:6a:
         fa:90:50:cf:48:b6:38:f7:6d:39:aa:4c:ca:bf:e7:ee:76:de:
         13:9c:ff:e2:21:ca:11:90:a0:a3:15:16:72:82:08:60:d9:16:
         17:ea:23:0b:71:79:d8:81:02:f6:de:c8:3d:50:bd:3c:14:69:
         d4:c3:47:40:81:60:c2:eb:c7:3a:ea:e3:55:73:25:74:b1:7d:
         4d:0e:1e:1f:24:2b:c4:d8:ba:0c:5e:79:31:81:55:b6:e1:4d:
         54:3f:09:72:e8:40:d6:4d:92:76:4a:1c:43:c6:76:1f:17:de:
         67:fb:52:35:6e:cb:6d:ec:f8:8b:4d:f5:80:96:97:63:53:f1:
         7e:4a:db:4d:d8:a9:8b:f3:16:f6:c2:99:43:a1:fb:08:85:cd:
         d9:36:49:91:6e:94:88:73:32:ee:d3:c2:a3:1c:87:6a:8e:d4:
         d0:c3:7e:0c:73:5c:3c:02:c0:d4:2d:e4:61:8d:cd:53:0d:b4:
         d4:2e:aa:c0:23:0e:f5:48:48:4c:de:db:f9:04:71:5f:7b:8c:
         50:da:cf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:23 2025 by rpki-client