Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          OlclSfaoZARP+iKZgpFGwEMWSMTfql7zc3Pz5hvxNms=
Subject key identifier:   AF:5D:7A:61:83:C3:E3:33:F4:81:A8:03:F9:BC:D0:D7:37:36:3D:D7
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       5CABBF98AAE899AACDB42F1F78B03C8726B57459
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:32 +0000
ROA not before:           Sun 30 Jul 2023 23:59:32 +0000
ROA not after:            Mon 29 Jul 2024 00:04:32 +0000
asID:                     4800
IP address blocks:        2400:8000:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Jun 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ab:bf:98:aa:e8:99:aa:cd:b4:2f:1f:78:b0:3c:87:26:b5:74:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:32 2023 GMT
            Not After : Jul 29 00:04:32 2024 GMT
        Subject: CN=AF5D7A6183C3E333F481A803F9BCD0D737363DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:94:4d:3f:86:fc:6a:cd:29:d9:47:b2:99:
                    b9:d0:ea:79:a4:9b:74:4b:5e:e8:ff:83:54:09:88:
                    93:64:52:de:07:38:8d:b0:f0:7f:2e:79:e7:91:b4:
                    38:26:9d:ed:bc:60:c2:9b:7c:5f:5b:64:04:db:65:
                    9f:67:23:79:7b:2c:92:0f:60:ad:1d:45:9b:5d:5c:
                    1c:dd:21:1d:55:31:78:78:33:3e:14:a5:61:fe:9a:
                    62:f3:2d:d6:5d:e1:a7:6c:8e:1e:1e:93:f3:b3:03:
                    5e:b7:d6:a7:71:6f:98:ed:13:b9:8a:6b:95:e3:60:
                    92:16:27:2d:40:7d:de:42:4a:d5:28:7c:2c:f0:80:
                    0a:1c:88:cf:69:ea:fa:7e:a5:9c:2c:ba:c3:23:da:
                    a7:ff:0b:9f:cb:2b:8b:e5:20:e0:f6:bd:70:7a:62:
                    20:0c:ec:b9:00:79:67:bf:8f:51:a3:e2:88:02:c4:
                    9d:84:31:2a:be:d7:6c:6d:39:cb:25:a1:5d:2c:50:
                    7f:22:3a:1d:4b:ef:b3:b0:82:49:43:03:58:d2:1e:
                    61:59:ef:0d:48:b4:a8:3c:bc:e5:e9:f5:9d:ec:b6:
                    25:d9:23:6c:3b:a3:b7:34:ea:48:6a:e7:60:c3:8b:
                    ef:5c:06:b4:c2:1f:08:ce:f3:35:9a:27:95:15:2c:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5D:7A:61:83:C3:E3:33:F4:81:A8:03:F9:BC:D0:D7:37:36:3D:D7
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:f7:88:ec:88:d4:d7:ef:c1:45:6c:3b:a8:e5:e7:bb:c8:90:
         4d:ca:e6:99:83:7b:7d:50:63:67:66:80:cc:58:1f:fc:66:bc:
         e3:c7:58:19:93:96:c5:e7:75:ed:cb:58:83:f0:76:4d:e9:d0:
         2c:d5:b3:34:e1:43:89:04:c1:a7:95:e5:50:9f:f5:d2:1b:38:
         8e:41:69:a6:e4:0c:32:06:ce:7a:f5:a0:a5:51:bf:3a:c5:0c:
         38:6d:a1:26:0d:b4:87:c7:b7:e2:7e:09:df:78:da:e2:9c:54:
         41:1a:c7:44:a1:ae:c8:df:9b:ab:82:af:69:93:0f:21:55:8a:
         aa:bb:13:96:53:0b:c1:08:a3:47:f7:c3:60:62:ef:4b:b3:81:
         fd:99:ae:bd:e5:d1:7c:86:c6:ef:ec:b0:83:c2:fa:d0:2b:15:
         a8:22:49:00:f6:5b:0b:7f:41:76:69:99:9a:f0:15:d9:3c:82:
         5d:a3:c0:10:7e:0f:41:ee:74:8e:43:72:ef:f4:d4:da:33:3f:
         cc:55:73:ae:f9:db:d9:1e:2c:73:08:d3:5c:e7:e4:1d:81:c9:
         12:80:13:11:3e:d9:ca:b3:7c:b4:64:ab:c8:6c:9d:c4:c2:f7:
         c5:9d:b2:21:ca:93:1b:97:77:1d:fb:4e:40:59:c3:af:40:7a:
         77:1d:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:36:27 2024 by rpki-client on console-ams.rpki-client.org