Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136392e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136392e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          4YrgDfVD0BXsVITQ1qM6LdwihWuqC7JjlQdVH1myE2c=
Subject key identifier:   99:63:A8:94:77:14:82:3E:27:94:7A:F7:A5:41:21:00:A0:44:1D:EE
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       1C71B038ABCB61BB90D42A698ABDDDAC3177E380
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136392e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:40 +0000
ROA not before:           Sun 03 May 2026 02:45:40 +0000
ROA not after:            Sun 02 May 2027 02:50:40 +0000
asID:                     46030
IP address blocks:        182.48.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:71:b0:38:ab:cb:61:bb:90:d4:2a:69:8a:bd:dd:ac:31:77:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:40 2026 GMT
            Not After : May  2 02:50:40 2027 GMT
        Subject: CN=9963A8947714823E27947AF7A5412100A0441DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:29:d9:7c:91:8f:45:74:9c:5f:62:fc:83:
                    1a:b5:61:b8:0f:29:cb:31:ea:5d:9a:15:f9:b8:ce:
                    27:09:9d:28:12:22:ae:27:e0:f5:ac:fe:22:31:91:
                    f8:1d:b4:fb:c0:92:81:8a:cf:d0:ba:7e:bb:7d:bb:
                    a4:76:36:14:0a:76:d7:79:25:4e:6e:36:7f:d7:35:
                    b5:a3:86:05:a2:58:4c:0a:00:b1:df:49:12:e4:b9:
                    40:21:a7:7f:cd:2c:f8:90:8b:4c:3b:29:0a:0b:c9:
                    e6:bc:0d:05:b7:6a:27:ff:00:86:53:5e:c1:77:3f:
                    6b:b5:a9:eb:b4:c3:99:a8:65:97:a4:4e:d6:b3:cc:
                    86:86:87:c2:08:e9:fe:a3:50:62:32:90:db:0b:4e:
                    58:4f:a4:ef:ab:0b:71:0f:58:3c:86:27:fb:71:8c:
                    a3:2f:4f:0e:f2:96:43:a9:8b:f0:6a:74:05:e5:a1:
                    99:61:4e:37:19:a3:72:b0:8a:2d:58:ca:d7:b0:56:
                    23:ec:03:a5:b9:fa:c7:be:06:b1:5c:2c:62:b0:27:
                    87:6e:01:15:a6:74:1a:22:b6:b4:65:f2:22:a1:f4:
                    bf:cd:29:05:c5:73:17:5a:5e:e6:b0:db:93:35:74:
                    93:31:81:66:15:99:33:39:6d:9c:7d:bd:f5:ec:bc:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:63:A8:94:77:14:82:3E:27:94:7A:F7:A5:41:21:00:A0:44:1D:EE
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136392e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:84:d4:d7:fb:e8:a0:18:1a:1e:8e:40:0f:a3:1e:c5:dc:48:
         ea:d0:94:30:3c:97:5e:95:7a:e0:4e:45:84:2d:45:45:57:d3:
         1a:e4:5c:8c:dd:c6:4b:ef:98:c9:14:cc:1a:b5:91:6a:8e:7e:
         4a:b7:b5:93:ac:8e:e8:1f:ea:9b:a5:41:50:7d:04:5c:7b:54:
         ed:d4:a7:27:fa:1c:dc:85:1a:8a:ba:9a:f3:7a:cf:50:68:f5:
         da:e0:33:31:c1:c0:08:88:9b:71:62:63:d7:61:b8:b1:aa:17:
         4c:00:cc:fe:3b:f0:7a:aa:b6:67:61:b6:9d:11:8d:5a:74:5c:
         21:2f:ed:f8:2d:13:dd:e9:27:ca:36:9b:b6:23:d8:14:cc:81:
         c6:17:6b:29:03:98:ec:3a:c6:bb:2a:a9:73:06:66:c5:f2:94:
         85:6d:98:8b:e2:56:86:8e:32:74:7a:21:69:69:ca:46:a6:0f:
         0f:45:72:8f:06:15:4e:39:03:1d:2f:75:8a:4c:e4:33:5e:77:
         9f:36:29:9b:19:ca:4d:a8:fe:af:48:ff:e4:02:aa:40:19:47:
         95:f6:68:62:2e:d7:f3:3e:c3:f7:3c:1f:a5:04:da:63:f0:af:
         34:3f:0e:0f:f0:22:f4:53:bd:9a:6e:0c:c7:4d:1f:e0:f8:41:
         87:ae:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:24 2026 by rpki-client