Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          n7wQZto4ndqdsbpxNitgplh/Ud0z6/+3crkaeOjevvo=
Subject key identifier:   59:35:63:62:D3:7E:45:3F:EC:A9:1E:0B:EC:43:C5:DF:6F:2F:7D:89
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       50A12089919C97EEEFB76AD91D5F4ACD42C0E5C4
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:32 +0000
ROA not before:           Sun 30 Jul 2023 23:59:32 +0000
ROA not after:            Mon 29 Jul 2024 00:04:32 +0000
asID:                     4800
IP address blocks:        2400:8000:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 02:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a1:20:89:91:9c:97:ee:ef:b7:6a:d9:1d:5f:4a:cd:42:c0:e5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:32 2023 GMT
            Not After : Jul 29 00:04:32 2024 GMT
        Subject: CN=59356362D37E453FECA91E0BEC43C5DF6F2F7D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:71:63:3b:a4:2c:d1:e3:0f:60:8b:b7:fa:68:
                    e8:1e:f4:0e:47:3d:2b:fb:67:2b:38:f5:2b:ae:84:
                    79:d8:74:04:14:f8:fc:8f:70:77:8f:ca:8f:51:9f:
                    fc:ad:8f:5f:44:39:4e:75:83:22:b9:50:0e:9b:c2:
                    f7:25:95:bb:0f:33:86:97:9b:b1:fd:3b:b9:71:de:
                    71:b2:ac:2b:f4:c3:d0:0a:49:08:a8:cc:97:aa:e1:
                    d9:8e:80:bd:ef:ed:ed:8a:8f:25:50:53:a0:6f:92:
                    89:04:dd:a6:b1:6a:c9:a1:d4:43:3f:b2:46:f3:dc:
                    5a:26:a8:4e:51:4f:d7:c5:f2:19:dc:b7:c0:d2:62:
                    ad:21:d3:9d:ff:20:30:6e:28:a2:63:9e:bb:52:56:
                    bf:4d:e1:f7:0a:3d:5f:ed:bf:9f:e2:d8:7e:58:99:
                    4e:40:71:df:07:98:b7:76:35:48:2e:8e:72:a6:7e:
                    37:35:05:81:c1:94:50:30:6e:d3:0e:0d:3f:a6:cd:
                    44:34:de:63:25:61:dd:40:8d:08:84:69:31:6e:4f:
                    14:70:68:85:37:c9:da:92:f0:01:ee:6f:f8:27:69:
                    45:44:65:e7:92:ea:f2:9b:17:06:57:b4:44:a1:71:
                    eb:03:12:4d:77:e3:23:9d:57:c0:1d:47:4a:13:e0:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:35:63:62:D3:7E:45:3F:EC:A9:1E:0B:EC:43:C5:DF:6F:2F:7D:89
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:8d:a6:9e:86:78:a8:f8:d1:a6:ba:8a:46:93:3a:df:f6:
         53:04:7f:c5:0d:5d:93:6d:e3:21:fc:de:39:8b:ee:a4:18:73:
         da:50:2d:e3:51:d6:2b:2e:26:39:1c:d5:4e:db:68:10:e9:28:
         fe:ec:bb:25:f2:0c:46:f3:4e:0b:37:b6:57:a4:5a:01:87:ea:
         80:db:76:e3:24:11:45:2f:c8:9b:fd:d5:5f:8a:e8:7a:0f:7e:
         dd:83:88:32:ff:e6:78:b8:b2:c9:90:bb:ad:e6:73:8c:48:03:
         a1:ee:b9:0b:f9:c2:6d:ec:50:a6:93:92:6c:db:a9:bc:5e:a4:
         29:eb:ad:a5:37:8a:d8:ec:c3:77:39:a4:35:a1:26:53:b6:7b:
         cd:98:3a:24:3f:d2:14:4e:28:a0:29:a7:0c:dd:e0:9b:6d:a9:
         7a:ad:d9:8d:d0:fb:97:a1:d4:b4:84:ee:d4:a1:4f:c1:23:5f:
         fe:41:7e:20:a0:f9:6d:31:e4:46:c4:f1:64:7d:d2:db:02:7a:
         cb:dd:57:66:65:37:b4:7c:0b:65:7f:de:0a:4f:93:7d:80:fa:
         fc:84:1c:fb:0f:7a:6b:97:30:2c:7d:ef:8c:f2:52:ac:a2:21:
         9e:30:43:d5:2b:e0:93:2f:44:f0:96:14:a5:e8:4f:4e:90:f0:
         01:ae:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:58:00 2024 by rpki-client on console-ams.rpki-client.org