Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          ZoVbl1Ej5vOkXGYFcM3GgFWF5vBfmm2YepIHJBqDbQM=
Subject key identifier:   77:2E:B7:5E:9D:73:05:78:FF:1F:0A:8B:DF:F0:AC:C3:0F:86:BA:1C
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       630CD1278F03E9BE536B60348D3240A7FCF9D0F5
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:42 +0000
ROA not before:           Sun 03 May 2026 02:45:42 +0000
ROA not after:            Sun 02 May 2027 02:50:42 +0000
asID:                     46030
IP address blocks:        182.48.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0c:d1:27:8f:03:e9:be:53:6b:60:34:8d:32:40:a7:fc:f9:d0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:42 2026 GMT
            Not After : May  2 02:50:42 2027 GMT
        Subject: CN=772EB75E9D730578FF1F0A8BDFF0ACC30F86BA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:ce:a7:b6:96:96:30:3d:3e:4c:13:73:62:
                    e8:bb:a4:19:be:78:cf:f9:ef:28:af:eb:e3:d4:08:
                    12:83:e0:e0:a4:2b:d4:b9:53:20:af:53:4d:03:e0:
                    fc:2f:0f:af:9f:02:e5:d7:3b:e2:3e:e7:e6:ee:8f:
                    25:de:c2:d3:5d:a0:7d:5e:c7:90:82:28:14:5c:c6:
                    8b:1d:3e:f3:2d:56:af:e7:69:b3:35:9f:ed:5c:09:
                    0f:fe:0b:8a:6a:b5:91:90:56:33:6f:a1:a5:dd:69:
                    51:f7:1d:c5:ca:98:27:be:7e:78:da:d6:e4:16:6c:
                    0b:07:60:d9:a3:32:9c:70:21:42:49:31:9f:77:2e:
                    8f:4e:de:03:6f:4b:d2:d4:ec:db:69:4b:4c:67:36:
                    c1:b2:72:b1:34:ac:25:d8:96:de:8a:ad:e5:8a:71:
                    a4:f0:25:b2:75:70:b0:8c:6a:ac:c2:80:19:81:b9:
                    96:0e:1f:ce:91:af:e3:76:e5:5b:b4:80:19:80:da:
                    cf:44:6d:42:2b:fb:3f:2c:c3:b0:03:7e:2e:19:d7:
                    d0:35:2c:13:3e:c8:54:14:68:c3:f0:82:ee:d1:14:
                    e8:86:5e:49:98:7b:ab:e5:11:88:69:4e:c5:92:d9:
                    a8:b8:e7:5e:69:4e:34:db:07:32:1f:34:c9:d5:f0:
                    a6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2E:B7:5E:9D:73:05:78:FF:1F:0A:8B:DF:F0:AC:C3:0F:86:BA:1C
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:5f:2b:7c:da:98:89:0b:58:24:3e:45:3e:60:a8:6b:31:
         62:e4:e6:ef:15:04:bd:0b:8a:00:aa:1d:28:7c:71:2a:9d:8d:
         2f:5f:3a:94:ac:ec:35:e4:79:95:6f:40:98:39:ac:6c:c6:d5:
         ce:27:e2:9d:29:87:7b:57:e9:82:ec:54:d4:cf:d3:48:fd:ab:
         82:3d:3b:4b:36:a2:da:b5:25:6e:df:6c:8e:94:7d:01:57:8b:
         1b:97:c9:f2:64:c8:aa:d1:9c:48:9b:9d:02:63:8e:8e:0e:c6:
         b2:62:8d:b2:1d:16:f9:fc:2d:a7:07:b0:2c:72:45:ea:a2:06:
         cc:c6:0f:3c:33:56:6c:6a:be:b7:ed:06:55:a6:23:41:77:ae:
         4c:9c:26:b3:ba:49:a6:c1:cf:3b:38:f2:dc:ac:3c:cd:5d:58:
         5b:07:52:8e:73:90:da:22:15:43:b9:74:31:aa:9b:d0:82:48:
         bd:27:11:b9:ce:5c:c8:18:1b:27:53:4c:e3:64:66:17:ed:3e:
         8a:93:34:b1:30:74:38:6c:6e:0b:50:98:3a:a5:91:de:fd:f2:
         38:75:ab:a3:08:bf:a8:7f:ae:75:b5:a7:4f:3f:53:e6:ff:ad:
         c5:b1:76:05:85:2b:17:cc:12:30:51:fa:50:3d:3f:33:69:07:
         23:37:c3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:24 2026 by rpki-client