Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          ZflklvJsR9sR89wh52lOsrnBrPQAG8XOS9w4Q1Hpny8=
Subject key identifier:   E9:2F:AC:AB:79:2E:74:8B:4F:05:87:29:04:7F:50:B2:5D:37:04:01
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       01A90C9CBE48C85DCB831BADC1D7CC1A377C9475
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa
Signing time:             Mon 02 Jun 2025 01:03:20 +0000
ROA not before:           Mon 02 Jun 2025 00:58:20 +0000
ROA not after:            Mon 01 Jun 2026 01:03:20 +0000
asID:                     4800
IP address blocks:        2400:8000:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a9:0c:9c:be:48:c8:5d:cb:83:1b:ad:c1:d7:cc:1a:37:7c:94:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:20 2025 GMT
            Not After : Jun  1 01:03:20 2026 GMT
        Subject: CN=E92FACAB792E748B4F058729047F50B25D370401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:ca:3a:c2:48:e8:02:54:59:ad:87:67:ac:
                    08:db:2a:f7:c5:3b:56:ef:85:3f:e7:3d:67:f9:1e:
                    b0:e5:c3:f9:a0:b9:99:fe:2e:5a:80:a8:ee:84:7d:
                    7e:ad:9b:17:f6:92:42:14:d8:9b:bc:9d:07:fe:78:
                    80:a1:56:35:d5:7d:f6:6c:14:d2:22:0b:48:9e:36:
                    c1:ce:07:37:45:03:ee:b0:27:09:e3:82:56:e6:45:
                    6a:77:ba:6d:16:7f:41:1a:f7:47:b5:78:ca:73:88:
                    6c:af:3e:7a:63:17:e1:41:60:db:58:21:c6:58:ff:
                    5b:27:c7:5d:9c:ef:dc:ba:8b:5f:c9:4b:04:37:9c:
                    64:d1:8d:26:1f:9d:1e:bb:85:cf:72:27:d7:f3:81:
                    fb:78:0c:70:56:aa:ba:9b:b4:b5:8b:ce:85:86:68:
                    bc:93:56:2a:23:be:1a:99:50:77:90:73:af:3e:4c:
                    95:43:d9:ee:b5:06:00:b4:4f:22:72:e7:cd:d4:f5:
                    c8:d8:9a:8b:a8:6b:5e:ae:4b:af:d8:49:ea:76:90:
                    a4:51:8b:6f:03:eb:2f:5e:02:b5:c4:a6:4c:73:b0:
                    39:46:68:3a:16:05:de:b6:42:80:a0:63:4e:ba:e0:
                    68:b1:38:b8:9f:96:1a:8a:bf:13:6a:2b:9a:37:39:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:AC:AB:79:2E:74:8B:4F:05:87:29:04:7F:50:B2:5D:37:04:01
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:82:85:97:77:ed:24:c4:d3:ab:c1:75:00:12:5d:3b:8f:82:
         ad:e9:65:aa:80:3b:d2:d5:88:4a:7f:bf:38:6b:41:8a:7e:50:
         96:76:08:bb:57:c8:fa:ca:3f:c6:b1:21:1c:d4:89:2c:41:4c:
         40:bf:be:32:f7:52:23:a5:e2:24:94:52:21:3f:c9:70:35:7c:
         f6:89:0f:d0:c1:8f:10:f9:ea:8d:32:ac:ed:93:50:97:44:b0:
         9a:08:50:64:d3:d4:cc:66:53:35:ae:0f:a7:65:46:76:84:ba:
         d2:49:25:fc:94:a4:ed:de:51:1c:0b:6f:24:c1:c1:05:78:d3:
         95:a1:cc:a6:18:76:bc:86:36:64:c2:60:80:8b:fb:45:84:c7:
         20:77:cb:23:cf:c1:09:b7:69:7e:d6:bb:e3:6b:b0:43:51:2a:
         b2:d8:55:97:af:0b:17:5c:85:f7:e2:56:f6:00:67:e1:c5:1b:
         85:24:88:06:14:e5:bf:1d:c7:d1:84:5a:8b:03:0c:5f:7a:43:
         22:09:d6:bb:8f:64:f0:11:df:7f:0f:d4:d9:ea:ff:21:a0:1b:
         35:08:dd:cf:d6:78:c0:61:13:b4:22:75:a7:7b:c9:ee:d6:14:
         81:59:c3:1b:69:7d:aa:68:70:99:55:b1:44:3f:15:69:b3:30:
         bc:6a:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:12:32 2025 by rpki-client