Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030313a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a383030313a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          eyzUGEloJn+HgB4CzCxE707pZ6ZAgKBfb9y2fZwK7YI=
Subject key identifier:   78:27:7D:5D:90:2C:FC:9F:E0:2D:1D:50:53:A9:1E:01:C7:73:89:E9
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       19519FA3D23739996F0F255B1DC9EBF7F62C54B8
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030313a3a2f34382d3438203d3e2034383030.roa
Signing time:             Fri 09 Aug 2024 10:00:00 +0000
ROA not before:           Fri 09 Aug 2024 09:55:00 +0000
ROA not after:            Fri 08 Aug 2025 10:00:00 +0000
asID:                     4800
IP address blocks:        2400:8000:8001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:51:9f:a3:d2:37:39:99:6f:0f:25:5b:1d:c9:eb:f7:f6:2c:54:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Aug  9 09:55:00 2024 GMT
            Not After : Aug  8 10:00:00 2025 GMT
        Subject: CN=78277D5D902CFC9FE02D1D5053A91E01C77389E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:c8:47:5d:20:22:c4:64:51:c3:a5:45:25:
                    23:cd:95:77:79:40:46:9d:d1:84:6b:fd:e2:60:38:
                    5c:a2:ae:37:d7:66:91:ed:7c:eb:93:c0:81:c9:f4:
                    35:da:20:b0:4a:96:6f:41:e5:90:d8:d3:f8:1d:4b:
                    cc:b0:42:13:37:cb:ef:6d:37:13:c6:7a:6d:c2:ab:
                    16:08:5c:86:d7:89:5a:ee:47:af:13:92:b7:fb:15:
                    b6:8b:22:92:c9:f2:88:f2:a5:10:63:7a:19:2d:b0:
                    61:1e:77:c3:9c:e0:d0:9f:eb:d2:81:a0:d5:cd:10:
                    a2:39:36:ac:bc:75:3b:d5:ed:3c:22:84:53:37:03:
                    c7:63:cb:45:cd:f2:57:b3:a1:1a:81:1d:45:40:67:
                    d6:e2:1e:cb:54:3f:9b:b5:5e:d0:da:23:21:6d:ca:
                    a8:6a:8a:85:0a:be:9d:f9:d6:1f:b9:4c:49:5f:17:
                    ec:09:61:0f:c6:99:67:04:7f:44:f3:92:14:2f:a2:
                    53:af:70:ad:da:bd:f8:ee:c5:78:22:ea:38:08:07:
                    89:89:7f:af:b0:29:d4:db:7f:31:11:4b:fa:38:03:
                    47:89:bd:52:74:c6:f9:46:55:b3:e6:30:57:37:b5:
                    2e:6b:a9:05:e3:65:ab:98:05:63:33:42:77:5d:0c:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:27:7D:5D:90:2C:FC:9F:E0:2D:1D:50:53:A9:1E:01:C7:73:89:E9
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030313a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:2c:24:91:bb:64:90:9c:14:5c:75:f9:e4:17:b3:b4:b7:c2:
         60:d3:82:a2:64:aa:d5:80:63:8a:9f:2d:40:34:e2:38:0e:7d:
         7f:7e:8a:ac:7b:d2:45:7f:da:b4:b2:bc:c5:23:46:6f:3c:b2:
         93:6e:88:13:bc:10:0b:8b:f8:2c:3c:88:16:0c:01:35:94:24:
         ce:68:cb:79:87:64:72:95:03:50:6e:f1:66:c1:45:38:c2:f3:
         ef:18:62:69:46:54:d6:1b:b3:2e:55:38:e6:48:be:b5:db:ee:
         ea:78:ec:20:32:4f:2c:3a:4d:bc:00:b8:7b:e1:fc:6e:70:5d:
         33:d3:08:6f:d9:94:62:df:6e:50:ec:e9:6b:0b:6c:70:ff:76:
         bb:63:1d:49:b9:a6:91:bc:03:59:9c:48:36:18:73:c0:f6:56:
         38:cd:4e:b9:62:ab:84:6b:10:d9:51:0f:ff:00:70:ff:a9:79:
         63:a6:00:9d:64:09:78:e7:55:b9:39:e9:82:e9:ce:99:19:c7:
         16:5e:4d:3b:ea:7a:b3:2b:bd:64:71:38:82:d6:d7:0a:01:a6:
         65:15:b9:d5:88:fe:47:11:be:c2:bc:77:aa:dc:33:2e:26:8b:
         4a:48:e6:36:76:89:a7:68:cd:05:fb:1d:38:ac:a2:b8:5e:64:
         80:92:b0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org