Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136352e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136352e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          Ztfsn5PM55Asy7cf5oKAtrKPTWkPp+IkS2IEf6RTR1I=
Subject key identifier:   34:5E:B7:62:1E:D0:BF:B1:B4:85:11:4C:25:2C:EA:67:84:85:22:F3
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       278B4D025431F3980A06C24015E98758771A7023
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136352e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:35 +0000
ROA not before:           Sun 03 May 2026 02:45:35 +0000
ROA not after:            Sun 02 May 2027 02:50:35 +0000
asID:                     46030
IP address blocks:        182.48.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8b:4d:02:54:31:f3:98:0a:06:c2:40:15:e9:87:58:77:1a:70:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:35 2026 GMT
            Not After : May  2 02:50:35 2027 GMT
        Subject: CN=345EB7621ED0BFB1B485114C252CEA67848522F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:34:18:c3:3c:2e:86:44:27:d2:10:ab:f0:
                    53:0d:79:52:71:37:0b:af:c6:de:38:90:b2:3d:51:
                    40:2c:a3:2f:8d:75:9e:5b:53:98:04:e8:f9:8c:8f:
                    e9:5f:8a:2b:50:87:2c:66:1c:5c:b8:d1:52:7f:8c:
                    46:d3:2f:26:6e:54:8f:b8:61:98:50:e3:4c:1a:34:
                    ab:a0:99:8c:f3:8f:ea:e1:47:1a:96:d5:eb:de:5c:
                    8a:b5:97:17:1a:40:e1:52:1b:98:4f:f2:78:bc:93:
                    da:88:32:35:c4:87:0b:3b:f5:6c:3a:5b:47:ae:1f:
                    5f:13:2d:4c:58:29:c6:d1:36:25:91:5b:f2:af:8c:
                    c2:2e:2b:d8:33:88:27:ef:8d:13:e4:f7:e5:98:b0:
                    72:86:90:77:ee:24:a8:80:5c:12:db:ab:23:7d:4e:
                    c2:82:fa:b3:c5:bb:79:56:33:ca:67:43:93:d7:28:
                    43:85:9c:e3:b2:00:e2:7e:29:fe:ad:8f:62:92:0d:
                    60:6c:e6:18:e8:e2:c4:bc:ea:a3:9e:5f:4c:61:9e:
                    aa:70:d8:8f:51:07:c5:69:0c:8a:66:52:99:3c:a6:
                    3b:8c:69:84:87:c1:35:e5:94:8f:f1:8b:b8:34:63:
                    c3:60:c3:2e:35:4e:b7:2b:b3:82:84:09:3d:67:06:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5E:B7:62:1E:D0:BF:B1:B4:85:11:4C:25:2C:EA:67:84:85:22:F3
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136352e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:65:9b:26:6a:26:fa:d0:c7:5b:1a:ab:e5:fd:d0:cc:c5:cc:
         4d:47:cb:83:ff:bd:fa:6f:2e:17:fb:f0:93:12:13:79:61:fc:
         01:c3:b8:cb:ac:92:d7:a9:32:87:7d:6f:0f:f0:89:50:36:07:
         27:55:ad:9d:b2:88:97:c5:d0:df:0d:7a:bc:01:74:9b:db:e6:
         22:8d:19:64:da:71:3f:16:32:0a:b6:6b:c8:f8:a4:38:dd:c0:
         08:45:b6:1c:4a:fe:1d:97:b8:6f:cc:3b:b8:41:16:1b:9e:19:
         31:3f:b5:cc:7e:8a:8f:a1:f5:49:fc:7c:88:14:a2:bf:ce:d8:
         34:34:fc:57:22:56:27:7c:08:5b:38:23:4c:cc:61:ab:ae:49:
         cb:bb:ec:ca:51:58:6a:71:98:1f:a5:57:1b:93:1d:94:cf:ca:
         a9:c9:87:b7:2f:1a:9b:d4:43:96:8f:47:a0:76:f1:ab:56:f9:
         86:5b:ba:e4:2d:e9:39:ab:a8:9c:86:34:ba:d4:99:68:08:d3:
         6a:61:6c:c9:d9:71:48:52:fe:be:66:a3:c5:75:8e:c9:0d:80:
         93:55:62:19:c8:cd:ba:a8:fd:4c:0e:dc:4f:7a:d5:79:4d:2a:
         b4:0b:4a:44:2c:75:51:2c:7d:fe:0c:27:1d:43:d5:4e:79:2d:
         79:a0:1b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:41 2026 by rpki-client