Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          4I/lqxTNwvFgDycP2MLcaleI/BpHDBKf59O0KSKmRIA=
Subject key identifier:   6F:41:36:A0:DA:65:E7:47:D5:C6:25:E9:24:8A:BF:A6:2E:8C:AF:66
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       501804BAA09B3CB869F65DA3D7340F13B4F31CAD
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa
Signing time:             Fri 09 Aug 2024 09:00:00 +0000
ROA not before:           Fri 09 Aug 2024 08:55:00 +0000
ROA not after:            Fri 08 Aug 2025 09:00:00 +0000
asID:                     4800
IP address blocks:        2400:8000:8002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:04:ba:a0:9b:3c:b8:69:f6:5d:a3:d7:34:0f:13:b4:f3:1c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Aug  9 08:55:00 2024 GMT
            Not After : Aug  8 09:00:00 2025 GMT
        Subject: CN=6F4136A0DA65E747D5C625E9248ABFA62E8CAF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:35:8e:a7:2b:c9:68:ec:91:bd:ae:3d:bc:
                    61:ad:37:72:35:56:79:14:bb:30:d6:e0:e3:97:3e:
                    c6:ec:e6:c1:27:6a:05:31:20:10:3e:59:f7:70:c0:
                    d1:74:de:6f:60:db:0c:35:30:4e:6f:ae:2a:35:99:
                    af:b6:96:98:f9:87:69:9d:c1:b4:47:80:4c:62:11:
                    c0:f7:3b:e7:52:f8:b3:fd:e7:d0:7e:98:bd:72:5e:
                    bf:c1:60:a0:c2:08:e3:1a:1e:69:db:3e:12:1a:f4:
                    b4:67:b3:b3:20:85:f0:71:be:f8:97:2d:b5:f3:20:
                    cc:cc:7d:80:01:e4:f7:88:8d:ac:c9:18:c8:c2:43:
                    61:be:20:6e:5a:e2:11:eb:d2:3f:5b:71:0b:4c:60:
                    ab:f1:64:17:16:8f:28:86:a1:ea:6b:e2:1b:78:8d:
                    71:67:a2:f9:62:1c:e1:41:35:f9:39:bf:4f:9e:96:
                    a9:ab:6e:25:d9:34:d6:9a:02:83:da:f0:61:a6:7d:
                    86:9d:ba:38:b9:59:de:8d:f2:95:64:f5:81:9a:9e:
                    14:db:bb:cb:bb:b9:43:f5:dd:8a:5f:9f:98:7b:de:
                    19:76:73:64:fc:26:94:55:77:a0:cf:49:b8:bf:04:
                    7d:1b:42:a6:75:b0:94:20:37:b1:4d:6f:64:7b:74:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:41:36:A0:DA:65:E7:47:D5:C6:25:E9:24:8A:BF:A6:2E:8C:AF:66
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:2c:b6:a8:3e:0c:02:1c:07:d2:37:2b:b8:e7:de:98:a7:65:
         7a:85:91:2f:4f:e2:0c:07:9a:3b:f9:37:ae:cd:67:7c:47:98:
         df:f2:a6:c2:21:58:42:53:8b:39:db:6a:eb:63:a1:42:c7:41:
         f2:0a:c7:46:37:b8:89:d1:17:bf:fb:6f:4d:21:0e:03:ea:35:
         57:71:25:70:e4:27:b1:9a:f0:55:6d:00:f2:ce:9a:78:67:33:
         fc:af:72:1e:fc:3f:2e:40:a8:63:20:43:71:e4:91:bf:ef:de:
         19:7d:27:35:4d:2a:5d:57:49:be:a4:1e:73:25:5f:a6:ce:24:
         3d:bc:21:b2:d1:84:1f:c6:ce:1c:e1:38:fa:14:3c:86:19:82:
         6e:4a:fe:d5:4d:e3:c0:ba:65:09:f7:00:53:cb:c8:e9:6c:e2:
         67:e2:83:18:25:05:4c:e8:50:fb:b6:07:4a:6c:a0:89:5f:e9:
         a1:66:db:de:6b:07:b9:5b:79:fd:45:11:96:89:ad:f6:53:66:
         27:62:22:35:21:d1:d0:8c:37:b3:a2:10:80:53:60:b7:0b:79:
         87:34:65:4e:54:86:57:b0:2d:2c:59:41:83:86:40:a4:63:35:
         a2:4a:e1:25:05:0c:37:b1:fd:9e:68:6e:b3:c3:79:17:7b:dd:
         11:24:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org