Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136372e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136372e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          d6Y5uYZP91y+eB3UDXZIOMOBcAWU0tFndBdXQKLT93k=
Subject key identifier:   80:5A:B3:44:C8:91:CC:58:D8:8A:F9:23:D7:2A:A8:6D:5F:30:71:45
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       6F2710750AE2C1AE038B6630C09AC704F6774FB6
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136372e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:28 +0000
ROA not before:           Sun 03 May 2026 02:45:28 +0000
ROA not after:            Sun 02 May 2027 02:50:28 +0000
asID:                     46030
IP address blocks:        182.48.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:27:10:75:0a:e2:c1:ae:03:8b:66:30:c0:9a:c7:04:f6:77:4f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:28 2026 GMT
            Not After : May  2 02:50:28 2027 GMT
        Subject: CN=805AB344C891CC58D88AF923D72AA86D5F307145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:2b:b5:aa:84:f9:2c:3a:19:72:26:e3:f4:
                    55:77:28:67:cf:95:02:29:d7:38:48:f6:8b:ad:6f:
                    fa:db:80:65:5c:31:11:86:b8:56:17:65:e1:c7:99:
                    67:8b:fc:45:49:c8:5d:7b:00:8f:23:6d:e4:c4:5b:
                    76:20:21:cc:d6:60:08:1f:3d:e4:bc:85:d5:b3:59:
                    05:a7:ce:ee:0a:16:ef:eb:f9:1c:f1:52:3d:3a:ec:
                    b3:6b:09:2c:85:52:07:f9:66:5b:b9:c1:11:9d:ae:
                    c4:25:b2:54:89:01:e8:35:92:4f:7b:28:32:63:5f:
                    14:0f:3b:f2:6c:28:6b:de:c0:b4:b5:7a:e9:62:cd:
                    b8:36:69:87:a6:fb:e1:86:44:ee:54:90:64:ee:39:
                    c1:bc:f6:35:e6:3a:04:a9:d4:f1:96:4a:9f:b8:f5:
                    7e:02:61:bf:cf:7c:eb:ba:9b:19:cb:ab:e7:8e:3a:
                    51:91:2d:b6:12:b6:4c:4c:95:9f:71:2c:20:3f:93:
                    09:1f:ea:3a:72:25:bd:f6:a4:dc:ef:bf:fd:b8:61:
                    95:da:a6:9c:e3:61:3d:b4:d5:03:ba:95:b4:9c:9a:
                    4e:75:0b:6c:c1:55:45:97:09:51:b1:c5:0a:d4:c0:
                    23:35:4c:2f:0d:84:03:99:ad:df:16:ad:37:18:0a:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:B3:44:C8:91:CC:58:D8:8A:F9:23:D7:2A:A8:6D:5F:30:71:45
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136372e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:50:c7:8b:be:b5:d2:fd:b8:d4:e8:fc:f5:17:e3:d5:6a:
         73:ab:bb:6f:ed:66:0e:d6:b6:e4:a2:ca:ac:1f:12:65:2d:06:
         71:47:f6:f2:87:c6:1a:a9:37:4d:e9:bd:5d:92:0b:fe:4a:76:
         2f:1c:5f:e1:eb:bc:aa:9c:22:82:de:22:9f:e9:85:85:62:44:
         7e:37:0f:dc:13:af:8d:28:69:7e:67:cb:45:01:5b:48:8c:e2:
         8e:ca:bf:a9:34:01:06:f5:31:a6:fe:2d:19:35:d6:c6:18:b2:
         68:36:b1:cc:93:8a:37:54:a6:23:89:6c:42:c7:f9:6f:aa:77:
         e3:6f:de:56:24:00:10:3e:ef:85:73:e8:67:dc:4d:a5:13:1f:
         06:b7:02:ae:d2:1f:33:eb:11:38:3a:64:9b:82:6d:b9:ca:63:
         04:11:a2:25:4e:47:99:f8:2d:47:14:d2:27:e1:fd:76:df:c9:
         d2:e5:08:4f:93:70:72:d9:8c:f6:9c:37:2c:55:ce:0e:15:0d:
         3b:ad:b0:23:aa:9f:79:bd:71:80:0e:72:33:90:62:3b:76:3e:
         54:f5:a5:a6:16:8b:9c:86:99:4c:94:18:fe:de:db:76:9e:ff:
         d4:29:6b:1b:da:c6:fb:f1:ca:c3:25:8a:a1:95:8e:45:77:d1:
         29:31:91:9c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbycQdQriwa4Di2YwwJrHBPZ3T7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2MENF
MkUwNEQ4ODAeFw0yNjA1MDMwMjQ1MjhaFw0yNzA1MDIwMjUwMjhaMDMxMTAvBgNV
BAMTKDgwNUFCMzQ0Qzg5MUNDNThEODhBRjkyM0Q3MkFBODZENUYzMDcxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3Su1qoT5LDoZcibj9FV3KGfP
lQIp1zhI9outb/rbgGVcMRGGuFYXZeHHmWeL/EVJyF17AI8jbeTEW3YgIczWYAgf
PeS8hdWzWQWnzu4KFu/r+RzxUj067LNrCSyFUgf5Zlu5wRGdrsQlslSJAeg1kk97
KDJjXxQPO/JsKGvewLS1eulizbg2aYem++GGRO5UkGTuOcG89jXmOgSp1PGWSp+4
9X4CYb/PfOu6mxnLq+eOOlGRLbYStkxMlZ9xLCA/kwkf6jpyJb32pNzvv/24YZXa
ppzjYT201QO6lbScmk51C2zBVUWXCVGxxQrUwCM1TC8NhAOZrd8WrTcYCmyXAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUgFqzRMiRzFjYivkj1yqobV8wcUUwHwYDVR0j
BBgwFoAUkGzRgy4JX9hkMm2TQMM2DOLgTYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQxZDU5NmMtMDllMy00NjIxLWE2M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMy
RTA5NUZEODY0MzI2RDkzNDBDMzM2MENFMkUwNEQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MDZDRDE4MzJFMDk1RkQ4NjQzMjZEOTM0MEMzMzYwQ0UyRTA0
RDg4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwpzANBgkqhkiG
9w0BAQsFAAOCAQEAbhBQx4u+tdL9uNTo/PUX49Vqc6u7b+1mDta25KLKrB8SZS0G
cUf28ofGGqk3Tem9XZIL/kp2Lxxf4eu8qpwigt4in+mFhWJEfjcP3BOvjShpfmfL
RQFbSIzijsq/qTQBBvUxpv4tGTXWxhiyaDaxzJOKN1SmI4lsQsf5b6p342/eViQA
ED7vhXPoZ9xNpRMfBrcCrtIfM+sRODpkm4JtucpjBBGiJU5HmfgtRxTSJ+H9dt/J
0uUIT5NwctmM9pw3LFXODhUNO62wI6qfeb1xgA5yM5BiO3Y+VPWlphaLnIaZTJQY
/t7bdp7/1ClrG9rG+/HKwyWKoZWORXfRKTGRnA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:06 2026 by rpki-client