Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136332e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136332e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          ewmkkTzxhOGyo6MzFFyyoH5/Y+VapDFv9s96w13qA+g=
Subject key identifier:   98:D6:30:B2:DA:E1:0A:34:1B:54:6D:06:EF:72:76:3D:A0:C8:E1:C6
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       7A9736B7670BEC200992EFBFB2248B16874D8A9E
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136332e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:30 +0000
ROA not before:           Sun 03 May 2026 02:45:30 +0000
ROA not after:            Sun 02 May 2027 02:50:30 +0000
asID:                     46030
IP address blocks:        182.48.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:97:36:b7:67:0b:ec:20:09:92:ef:bf:b2:24:8b:16:87:4d:8a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:30 2026 GMT
            Not After : May  2 02:50:30 2027 GMT
        Subject: CN=98D630B2DAE10A341B546D06EF72763DA0C8E1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:dc:81:c7:68:9f:7a:7b:a6:2e:fe:de:a0:
                    c3:b1:c0:6c:f4:04:e3:dd:cd:3e:a5:60:2b:e0:95:
                    15:bf:30:0f:28:50:4f:0e:06:30:e2:6d:74:bf:bc:
                    c7:3d:8f:a9:82:6f:38:b9:5a:c3:f1:87:f7:bc:f2:
                    48:43:d9:c1:d3:e7:d1:9c:53:a3:ad:e4:e9:d9:02:
                    74:96:bc:c3:00:49:fa:be:f8:77:83:ce:c7:5d:4f:
                    fa:40:15:0f:67:ce:58:52:d1:02:92:08:7f:f8:a4:
                    df:34:e2:11:b9:c9:88:b1:67:6a:fd:74:4d:67:be:
                    28:07:a8:9c:45:d8:f6:64:a4:53:05:ed:d8:8a:4b:
                    ec:15:14:26:b7:20:75:3b:c9:2d:b0:14:c2:b2:59:
                    bb:22:73:91:db:66:fd:ff:d2:5b:a8:6f:f5:fb:45:
                    4c:5a:d3:f3:55:7f:b3:63:fd:65:d4:f8:34:74:f9:
                    a9:12:94:af:b6:91:31:04:f0:7c:75:ff:64:6a:7c:
                    7b:d1:f8:7c:09:fa:be:1b:88:fa:66:96:04:31:ca:
                    d9:08:2a:ac:f8:21:1b:09:29:a2:a9:ad:56:38:eb:
                    7e:05:38:7c:90:25:a0:6c:e6:a4:9c:65:2e:45:10:
                    5f:e6:a4:5c:eb:77:4a:01:59:49:76:98:45:f7:6d:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:30:B2:DA:E1:0A:34:1B:54:6D:06:EF:72:76:3D:A0:C8:E1:C6
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136332e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:39:bb:41:51:fe:af:14:d8:66:73:24:9b:a8:c1:35:29:29:
         28:36:3a:29:1e:6b:ac:46:57:ad:0f:01:b6:29:92:21:b6:f4:
         89:bb:f7:30:fd:55:c3:90:62:22:13:58:4b:4d:64:a7:7f:15:
         f8:f5:ed:e3:b3:82:3c:67:2c:7c:2b:78:6b:20:ec:93:e8:95:
         0c:f2:df:23:2c:f9:44:0f:4f:d9:31:07:99:3e:fa:56:af:be:
         b8:f6:7d:f6:c4:2e:da:a4:25:64:d6:25:00:10:1b:37:2f:eb:
         ce:22:b3:3c:bb:cd:6d:c6:55:d3:90:e3:96:a8:db:43:ea:ab:
         07:f1:cc:11:cc:c3:3c:a2:e6:51:f6:04:9a:af:82:bc:b2:49:
         94:8b:8b:a9:2a:2f:1e:fc:ec:5f:cb:e6:30:0a:7d:e6:4a:70:
         2c:67:e9:05:c4:1c:1f:99:fb:a4:c7:b7:32:a8:d6:26:37:d8:
         f0:76:ed:1b:52:f7:fb:a8:a9:19:0e:52:17:57:a8:a9:90:6a:
         0d:98:42:0b:77:50:93:e6:84:6a:9e:f9:83:1b:65:93:ae:68:
         c8:a0:b0:bd:10:58:7e:e4:34:2f:c7:11:da:3b:fd:73:16:9b:
         16:21:70:4e:93:90:d7:c6:f7:23:3a:2e:01:a1:82:0d:63:8b:
         3d:12:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:55 2026 by rpki-client