Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          zas81XYAzKm/epSWBwoKOUmYW9ltga5JFRl4SlgFNYQ=
Subject key identifier:   08:A7:EE:54:BE:EE:39:B1:79:C5:FB:60:E6:18:F6:13:91:A0:7B:87
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       7C02BA994BD6E3A11484225FABE3F81487F1E7FF
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:28 +0000
ROA not before:           Sun 03 May 2026 02:45:28 +0000
ROA not after:            Sun 02 May 2027 02:50:28 +0000
asID:                     46030
IP address blocks:        182.48.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:02:ba:99:4b:d6:e3:a1:14:84:22:5f:ab:e3:f8:14:87:f1:e7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:28 2026 GMT
            Not After : May  2 02:50:28 2027 GMT
        Subject: CN=08A7EE54BEEE39B179C5FB60E618F61391A07B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:60:d7:f5:9c:1b:db:84:a2:59:e1:71:69:
                    db:3f:ce:7e:42:72:30:c0:d0:47:d3:3a:8b:a4:25:
                    ae:3b:6c:65:a0:5c:e6:fd:05:21:b0:57:b4:de:10:
                    4c:43:e5:b7:c2:63:ec:75:d6:ae:0e:8b:c7:4c:8e:
                    3e:07:11:c7:15:e6:3e:ea:5e:ca:87:6f:b2:25:a8:
                    0c:84:a3:d4:c0:d0:28:9a:b3:12:16:81:3f:fd:cc:
                    e9:b3:44:4b:9f:db:e6:81:16:77:dd:2d:73:20:77:
                    72:58:78:95:39:0e:01:94:78:b7:31:31:5c:d7:87:
                    cb:b5:38:b1:07:88:c1:53:6e:ad:b0:06:09:24:44:
                    8d:72:62:7d:5b:4e:51:db:ac:d4:48:eb:aa:09:24:
                    e2:29:ce:30:34:9a:11:ee:ae:a7:d9:25:cf:3d:5c:
                    eb:a2:4a:39:ee:41:af:15:ec:67:35:6b:58:1d:db:
                    c1:a1:2f:88:d8:e8:72:aa:29:63:e1:a0:48:94:5d:
                    e6:0f:8e:9c:10:85:c6:f9:86:d5:2f:49:f6:d2:37:
                    c2:5e:3c:bd:e7:ff:b2:5d:ec:9c:7c:02:a5:b0:a2:
                    a0:ce:3d:45:39:59:fc:e5:29:39:bc:46:82:21:b4:
                    56:4c:e0:53:60:1b:50:6b:ea:ab:1f:aa:61:be:cb:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:EE:54:BE:EE:39:B1:79:C5:FB:60:E6:18:F6:13:91:A0:7B:87
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:a0:4a:65:12:ca:92:cc:25:d0:ec:72:ed:55:ae:6d:02:
         83:2d:8f:d0:d6:66:e8:6e:6a:1b:a7:66:d4:29:ae:4d:44:c5:
         3b:a8:58:99:34:7b:03:be:0b:37:3f:e4:23:92:6f:e5:7b:4a:
         65:72:2b:c7:e6:cb:87:11:a1:bb:cd:ae:0b:87:00:ae:1a:91:
         c3:02:0c:fa:08:f1:8d:05:c9:62:73:c7:ff:ea:1a:f1:d2:12:
         24:40:3d:f6:b7:dd:88:0d:74:26:a4:84:bf:82:c6:f0:63:78:
         13:96:bb:3d:12:0f:a9:61:23:2a:c4:d4:1e:5c:61:0f:98:e5:
         97:db:92:55:8a:3b:dd:58:07:4f:65:33:a3:8a:e6:15:3c:42:
         2e:ec:98:6e:e1:0c:a4:8e:eb:02:6b:f7:5c:21:3f:cd:13:ec:
         d4:2c:e7:7c:4d:d7:60:b4:7a:e6:6c:57:ad:a5:8f:6b:e9:fa:
         db:e3:03:cc:f3:55:7c:3b:a9:b0:51:db:2d:e5:67:72:2a:77:
         b1:3a:07:f9:ee:19:09:af:62:f3:b8:f1:1a:1b:74:a0:97:b5:
         13:39:86:6c:08:ba:03:9f:4f:ec:ae:e6:00:7f:da:af:b8:ac:
         9b:bd:42:a5:8a:6c:ad:cc:a8:2b:fa:d5:a0:7f:f5:97:61:98:
         11:29:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:52 2026 by rpki-client