Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          ZB+nanB1sl3hPbEN8Isj3/EGBs3/1Nxs3rVswzme7rg=
Subject key identifier:   24:A2:5A:DB:BD:B1:FF:20:C5:4A:BB:62:96:9D:DF:76:35:42:7A:5A
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       65354358EC5793AA0CEAD306407F8C617334845E
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 02 Jun 2025 01:03:21 +0000
ROA not before:           Mon 02 Jun 2025 00:58:21 +0000
ROA not after:            Mon 01 Jun 2026 01:03:21 +0000
asID:                     4800
IP address blocks:        2400:8000:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:35:43:58:ec:57:93:aa:0c:ea:d3:06:40:7f:8c:61:73:34:84:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:21 2025 GMT
            Not After : Jun  1 01:03:21 2026 GMT
        Subject: CN=24A25ADBBDB1FF20C54ABB62969DDF7635427A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:8b:81:ac:ef:ea:7a:df:5e:59:13:60:57:
                    56:dd:30:93:ec:32:6a:bb:f9:72:67:dd:63:58:7d:
                    ad:28:cd:86:7b:35:e8:9b:f9:16:aa:e4:37:99:43:
                    b0:fd:ac:aa:73:4b:9e:36:6d:e2:e8:ad:a7:1d:89:
                    5f:b2:5e:89:68:b3:3c:ac:50:9d:b0:09:2c:8d:4c:
                    fe:7b:ee:1c:17:f0:11:33:cf:49:f9:6b:50:8c:06:
                    c1:ed:58:98:b4:af:2b:a5:68:01:d6:f7:04:71:62:
                    c4:45:f7:52:b6:71:74:c1:f4:77:18:ef:c8:89:07:
                    e5:6c:da:96:2c:be:04:f7:cd:75:42:77:62:88:fc:
                    74:07:49:98:91:e1:21:84:26:03:02:cc:74:0f:50:
                    b7:91:8a:c1:93:80:0d:a0:30:cd:36:63:96:f2:90:
                    9f:98:80:06:cf:94:ba:73:88:b6:8a:c8:fd:dd:ed:
                    f2:85:58:67:40:b0:e8:4a:11:3c:99:d5:08:40:b8:
                    db:b2:3a:d4:7a:90:1a:4b:b0:d9:08:52:b6:cd:ce:
                    57:47:6f:0f:b9:62:57:16:a5:8b:24:d8:e7:f8:08:
                    d3:5b:6c:df:d4:8b:64:06:9d:11:d8:7d:c3:5e:5d:
                    96:14:52:cb:22:62:cf:51:c9:d7:6c:bd:61:64:7a:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A2:5A:DB:BD:B1:FF:20:C5:4A:BB:62:96:9D:DF:76:35:42:7A:5A
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:f9:af:a3:1b:fb:12:02:fe:58:12:ff:b0:7e:ad:68:65:56:
         89:43:6e:02:74:2e:a4:71:33:63:12:8d:10:f0:22:5c:27:d8:
         78:ac:b1:79:d6:af:5b:77:eb:3a:49:aa:0c:b8:8a:63:cb:4d:
         8a:60:f6:e0:a4:19:18:a9:dd:37:56:d2:7c:1b:8a:e3:08:d1:
         83:2d:f6:24:9c:6a:27:18:c1:01:75:9a:5d:fb:83:2f:bf:b9:
         85:7c:bd:40:77:cd:77:54:5d:8c:1d:e8:88:87:aa:c9:d4:6c:
         64:01:65:7d:fa:ed:7c:d7:ca:5e:76:5c:0c:ae:57:f9:5f:5f:
         06:ea:dc:8c:56:32:a0:28:a2:58:10:47:95:b9:87:af:be:3b:
         70:a7:5c:c0:34:62:95:d0:be:86:89:d0:bf:ed:62:92:c0:b5:
         42:1e:48:c3:0e:7f:d3:c0:7c:67:02:2a:ec:75:de:43:7f:88:
         83:0e:d2:43:1c:98:7c:8d:d2:b5:fa:65:d7:73:92:58:60:aa:
         e4:b1:f5:a5:25:65:7d:e5:33:c2:29:0a:bb:da:42:5d:1f:48:
         bd:45:25:13:26:91:db:00:82:20:25:de:b6:c5:62:a9:c3:e2:
         bb:7c:a1:a4:eb:d8:7f:ea:a9:b8:f0:6a:a4:78:89:95:83:6f:
         15:83:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:18:24 2025 by rpki-client