Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          uysSTX3xSWAXaBLpLNY5OQsC6wqTBIBszFsRd88ApaA=
Subject key identifier:   89:D1:85:5D:17:DB:86:F8:DB:3B:5E:38:02:28:1C:96:E5:72:C4:6F
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       7B4DD47EE567D94765D70D7C4A74A68579BCEBC4
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:18 +0000
ROA not before:           Mon 01 Jul 2024 00:58:18 +0000
ROA not after:            Mon 30 Jun 2025 01:03:18 +0000
asID:                     4800
IP address blocks:        2400:8000:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4d:d4:7e:e5:67:d9:47:65:d7:0d:7c:4a:74:a6:85:79:bc:eb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:18 2024 GMT
            Not After : Jun 30 01:03:18 2025 GMT
        Subject: CN=89D1855D17DB86F8DB3B5E3802281C96E572C46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:21:8c:2b:38:d7:a2:a5:70:97:ec:1e:23:
                    10:3a:8b:a4:c3:99:94:54:54:58:9a:a9:3d:6b:be:
                    e4:4c:fa:a0:18:a9:4b:d3:72:15:d8:22:47:49:ac:
                    d7:89:c2:bb:f6:85:6f:2b:8e:a2:0d:bd:9a:db:25:
                    c5:66:e1:71:13:c5:bb:3c:bd:5c:52:68:fd:ea:dd:
                    4a:c6:2b:60:99:32:30:d1:92:5f:3f:2d:00:1a:5d:
                    80:a3:64:81:34:af:16:b1:b3:12:dc:fb:e3:12:56:
                    25:9e:49:c4:7a:3d:30:4a:d2:fe:ca:d0:d4:01:b3:
                    fd:28:4d:22:2f:62:8e:ff:aa:a4:45:e9:e1:d8:63:
                    b6:bd:47:09:1a:8b:d0:fb:84:67:97:01:7c:4d:98:
                    e1:ff:96:af:28:a5:63:d1:11:fd:9d:1c:54:01:45:
                    e7:d7:ed:ef:0e:76:6b:a4:61:fb:6e:05:13:cd:47:
                    8d:40:7c:92:16:ce:cc:7e:16:af:80:11:ca:d1:4f:
                    11:06:60:0e:0f:e5:e3:7b:a7:03:68:fc:98:5b:f1:
                    16:54:b3:4b:69:cb:b7:f6:f8:a7:c9:b2:a0:71:36:
                    ad:89:3a:cd:2e:99:76:ac:2b:d7:a5:3c:73:93:45:
                    35:cb:ef:3a:31:26:c0:74:cd:ed:ff:12:18:94:2e:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D1:85:5D:17:DB:86:F8:DB:3B:5E:38:02:28:1C:96:E5:72:C4:6F
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:a9:ea:38:77:bf:a2:d2:fb:35:46:26:45:bd:fb:2a:e0:0c:
         bc:d4:6c:cd:5b:fa:9f:79:e0:e4:88:64:84:a3:3c:01:d2:f9:
         18:fd:d0:1e:55:fb:84:b5:1a:0a:72:73:3f:17:4c:92:33:b9:
         6e:d6:81:51:32:79:90:de:cc:c1:08:29:a6:c8:97:0d:26:8c:
         8c:db:b3:a4:94:6c:a5:45:ff:fb:d1:21:7a:ff:61:bf:d8:2e:
         f2:fb:c9:fa:be:8e:26:c9:a3:f2:50:76:9b:0c:1b:40:44:d8:
         c2:78:13:15:7a:83:64:98:f9:f4:5b:b7:64:9a:fb:c7:79:9f:
         2f:0d:66:f4:ec:70:06:24:c8:b7:85:0f:b0:2e:b1:9b:92:3a:
         bd:88:89:8d:6e:68:9b:de:ff:a8:5c:48:46:8a:e9:f3:b0:41:
         40:0b:ee:bd:69:e4:40:ba:a1:cd:57:8c:98:c4:18:cc:5c:7d:
         39:62:8c:7a:8d:8a:91:b6:2c:94:87:32:02:31:c6:ae:ce:f9:
         e4:d6:d0:3a:bc:91:a5:89:36:a3:c2:e3:7c:63:fc:b3:b6:f4:
         08:37:98:5e:b5:59:ed:73:fd:db:8a:72:96:fc:14:46:49:3c:
         62:02:dd:4a:ee:df:bb:10:47:ba:90:05:3b:4b:4d:15:85:0e:
         fd:16:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org