Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
File:                     3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (raw, json)
Hash identifier:          o9EKVmFR1SvOj9uTbB2OlxRWlCxTxBe1nFco2QLJ8gE=
Subject key identifier:   39:73:37:C3:C2:5A:22:F7:A3:4A:5D:1D:93:EA:C2:4E:EE:18:44:13
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       4BF7D9B4566C3D2D8AE34FB8DC8D1120F9C15929
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:29 +0000
ROA not before:           Sun 03 May 2026 02:45:29 +0000
ROA not after:            Sun 02 May 2027 02:50:29 +0000
asID:                     46030
IP address blocks:        182.48.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f7:d9:b4:56:6c:3d:2d:8a:e3:4f:b8:dc:8d:11:20:f9:c1:59:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:29 2026 GMT
            Not After : May  2 02:50:29 2027 GMT
        Subject: CN=397337C3C25A22F7A34A5D1D93EAC24EEE184413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:1d:b9:bb:d1:e9:a4:b7:d2:e0:0b:33:dc:
                    a7:05:04:06:12:e1:38:da:86:6a:b3:f1:3c:2e:b6:
                    10:47:7e:7b:94:9e:ed:95:92:61:c9:2a:aa:c2:33:
                    21:81:5a:28:91:35:28:13:b9:c6:b3:35:35:13:aa:
                    4d:54:3f:c4:21:09:52:f9:b6:71:fe:2b:3e:0b:7f:
                    18:1e:2e:00:88:ee:e0:d9:9e:5b:0d:13:ce:67:67:
                    44:7b:4d:f8:16:3e:3e:3f:6b:3e:09:6d:43:73:cb:
                    34:5d:50:86:dd:80:4b:47:ab:54:da:53:13:aa:82:
                    c0:e0:1f:d5:bb:a1:f5:7e:72:14:3e:80:f9:7f:d1:
                    ae:04:16:d5:df:28:39:87:34:35:f7:e9:22:01:ac:
                    72:fd:a3:cc:8b:f6:09:70:a3:3e:69:28:f0:5f:59:
                    64:df:48:f5:ef:3b:e0:d4:f5:95:e0:96:74:5e:95:
                    94:5e:df:d5:83:f0:fd:60:a7:02:12:ad:cb:f7:0e:
                    d3:e1:2b:da:c3:c9:e8:71:c2:eb:4a:04:9b:71:f9:
                    ec:1a:5b:cf:cb:7b:80:97:d1:34:a2:15:56:11:7f:
                    25:d2:c4:5f:51:70:63:b9:1c:18:1f:08:4c:57:87:
                    41:7d:2f:ba:6a:27:2b:61:e6:8f:12:4e:be:5a:9f:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:37:C3:C2:5A:22:F7:A3:4A:5D:1D:93:EA:C2:4E:EE:18:44:13
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d9:b2:19:60:c0:71:c1:6b:a1:69:fb:ab:6c:9e:77:27:24:dc:
         0a:fb:76:9f:5a:b1:49:ae:56:94:dc:e9:2f:29:8f:a2:f0:35:
         7d:32:ae:07:96:a5:ea:e4:37:a6:a7:46:83:c4:62:25:37:2c:
         b0:c0:c2:3c:f8:aa:fc:f9:6e:42:0e:3e:36:65:41:76:0c:33:
         85:06:cd:b8:0e:ee:4a:4d:d0:1e:39:e7:25:b5:04:c2:d3:5c:
         64:2a:de:ea:42:bb:fc:95:de:c7:88:db:e1:45:9a:27:2a:f5:
         94:b0:76:70:7a:73:a8:ba:42:18:04:d0:a2:2d:23:a1:ab:27:
         c2:43:00:a2:b2:72:54:49:8a:b3:c1:1a:7f:67:1a:23:85:31:
         f5:ee:aa:36:e9:bc:24:09:52:4f:63:69:1b:17:ae:0a:de:fa:
         3d:9c:87:08:12:c0:c1:3d:20:18:e9:0d:63:43:41:dd:4a:70:
         23:8f:ec:d9:cb:e0:ce:0d:02:12:07:cc:4f:ca:f4:bb:ac:a4:
         06:5f:57:97:b9:cc:62:ed:b1:f6:06:71:60:81:8c:ca:f6:ab:
         b6:c7:2b:44:85:dd:50:66:32:7f:ac:74:dc:02:97:e1:4e:00:
         e3:ee:d2:eb:3e:52:00:df:e8:94:4c:db:6c:57:8f:ac:20:42:
         23:54:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:21 2026 by rpki-client