Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          cZSxrHKHQ0mFP+IFEAf9m6mL/62OHeNUjDIXmUy4Fi0=
Subject key identifier:   7F:90:25:F0:54:72:19:F8:FF:20:7D:4D:EB:A7:C3:FA:13:ED:78:11
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       4BDD3273F2D278E8EE3BC9F83951279AB46192F6
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:21 +0000
ROA not before:           Mon 01 Jul 2024 00:58:21 +0000
ROA not after:            Mon 30 Jun 2025 01:03:21 +0000
asID:                     4800
IP address blocks:        2400:8000:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dd:32:73:f2:d2:78:e8:ee:3b:c9:f8:39:51:27:9a:b4:61:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:21 2024 GMT
            Not After : Jun 30 01:03:21 2025 GMT
        Subject: CN=7F9025F0547219F8FF207D4DEBA7C3FA13ED7811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:79:87:0c:20:bd:05:43:3d:4a:55:6f:e8:
                    85:47:e6:f7:17:82:02:9c:c7:f7:de:02:09:08:09:
                    58:0a:f2:e9:bc:29:79:5c:bd:f0:60:cd:89:c4:a6:
                    56:83:b9:2e:87:8e:a1:ab:75:ab:e7:a6:22:ce:67:
                    bf:b3:c1:b4:63:87:bb:a9:3e:04:60:65:a7:6b:55:
                    0d:9d:2d:2e:0a:66:a0:08:02:62:8e:08:a0:4c:22:
                    76:91:c8:e2:5f:2a:fc:2a:3d:eb:3c:47:f1:a7:af:
                    40:2a:d8:de:2b:be:bf:a5:b7:cd:bd:2a:9a:37:6b:
                    ac:7c:1e:51:c9:15:17:d3:84:b6:ea:d1:d2:fa:76:
                    16:d4:e7:a5:2a:c7:3e:c1:dd:44:2a:a4:13:9c:6e:
                    48:33:29:ec:f7:1d:ae:2e:82:4b:28:71:f0:04:44:
                    52:55:a2:5b:3f:c6:75:0d:bb:4f:5a:0c:7d:80:9f:
                    e8:da:08:ea:21:92:9e:d1:0f:1e:bf:9f:52:fd:0c:
                    7c:98:bd:70:c6:ec:76:f9:f0:62:a6:ca:55:66:3d:
                    7c:fd:ec:41:6d:e1:1a:10:7c:0f:77:1d:52:ee:14:
                    07:82:9e:83:e0:59:7f:42:a8:26:0f:ab:ba:fe:33:
                    1f:e1:dc:ce:ca:8f:51:8b:db:05:af:ec:5f:ae:50:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:90:25:F0:54:72:19:F8:FF:20:7D:4D:EB:A7:C3:FA:13:ED:78:11
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:58:55:eb:c6:f5:86:e2:1e:9b:11:33:e1:c2:5c:d1:13:
         e8:c3:95:48:62:b5:f1:af:c6:c5:49:95:67:aa:59:3b:40:bc:
         d5:2b:4b:06:be:80:7f:22:43:c7:bc:49:61:d7:ab:54:cd:1c:
         a5:4d:c8:d6:09:e2:9a:99:77:05:cf:fb:8b:ef:ac:ce:ca:e4:
         b2:6e:08:bd:54:14:87:8b:df:9a:fc:b2:5d:55:33:7a:c2:e7:
         3b:76:b5:4b:c5:1f:a7:34:04:7c:32:23:ee:44:df:b6:0e:c9:
         df:aa:d1:60:e4:3d:99:1b:3c:eb:db:4c:d5:f1:7f:a7:e4:23:
         bb:b3:72:12:e6:61:4f:09:63:ae:55:ad:20:5b:e4:bd:62:d5:
         5b:74:45:04:b9:1e:2c:cb:e6:0e:c9:05:ed:3d:28:ad:b9:c8:
         18:0d:90:f0:9c:bd:b2:55:8e:4d:87:3d:b2:91:ae:12:88:72:
         8f:35:d8:b8:02:5e:ea:56:90:93:b9:75:df:a3:0e:83:96:b1:
         ef:cb:65:03:7d:05:39:10:02:dc:79:49:1d:2a:e3:32:18:dc:
         d9:18:52:ea:5d:86:a4:05:94:15:00:af:3b:28:4a:0d:cf:70:
         a3:c5:79:62:e1:d0:ba:ad:fd:d0:b3:81:37:61:6d:4c:fa:9b:
         db:60:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org