Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137322e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137322e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          Yai10k7mfc36oSbam/+tt3MhIgvsdyGdsbNufFy+++s=
Subject key identifier:   35:D0:59:0F:91:FE:D1:A9:D6:84:B3:BA:F3:EC:64:2F:3F:38:3B:19
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       559FE6F365B0B27BDCC50A8193BB9EDC863C12E0
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137322e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:36 +0000
ROA not before:           Sun 03 May 2026 02:45:36 +0000
ROA not after:            Sun 02 May 2027 02:50:36 +0000
asID:                     46030
IP address blocks:        182.48.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9f:e6:f3:65:b0:b2:7b:dc:c5:0a:81:93:bb:9e:dc:86:3c:12:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:36 2026 GMT
            Not After : May  2 02:50:36 2027 GMT
        Subject: CN=35D0590F91FED1A9D684B3BAF3EC642F3F383B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:1c:f2:85:18:44:4e:ae:ec:69:b7:5c:f6:
                    4f:80:6c:2a:55:c1:e4:b9:14:26:6a:09:03:b8:4c:
                    9a:58:84:55:d9:50:bb:d3:a5:24:f9:55:e4:0a:fc:
                    bc:7f:55:bb:25:11:14:03:e5:b6:0d:58:ea:b9:f7:
                    eb:34:d1:6e:5f:e9:c9:75:d8:17:ad:58:64:8a:17:
                    48:4e:f7:e5:8a:f2:af:62:b9:f8:d8:36:12:a4:c2:
                    78:41:2f:2e:25:56:8b:1a:43:b7:3a:96:26:f6:85:
                    a0:35:f5:d6:64:d9:2d:2d:f0:dc:0c:84:ea:d1:71:
                    68:dc:57:9a:d1:75:3a:25:85:78:bd:de:f5:e2:35:
                    d7:36:7b:0d:c5:c7:aa:3e:5a:29:c8:d1:f3:5f:37:
                    8c:0c:0e:68:b8:c1:ad:be:97:f0:e1:59:7a:ba:fe:
                    4c:55:35:aa:84:51:df:89:d8:a2:49:09:9c:ce:f5:
                    03:3e:8f:03:48:d3:83:7e:d8:4e:74:a8:d5:3e:2a:
                    ec:0d:32:d6:53:23:2b:33:68:0b:0a:d2:75:c4:0b:
                    b6:e8:3c:7f:c4:bf:a6:a4:e3:ed:ee:1b:8d:86:31:
                    bc:6d:37:08:40:30:dd:92:81:9c:d0:8c:bc:ef:6d:
                    9e:6c:d1:c3:ee:1f:63:51:5b:e4:96:51:66:79:26:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:59:0F:91:FE:D1:A9:D6:84:B3:BA:F3:EC:64:2F:3F:38:3B:19
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137322e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:db:ee:4e:bb:e1:aa:ae:8d:f8:95:c4:67:62:a5:b2:bc:b6:
         c7:ac:80:81:b6:8b:ef:6c:c1:ee:3a:f3:3e:90:ea:e6:dc:36:
         34:07:c4:56:bf:01:c3:ac:11:a7:42:b8:00:8d:da:4b:56:1d:
         f6:89:13:ad:54:f7:55:f4:3e:1f:0f:e7:f0:93:9a:5b:77:06:
         bc:7b:34:af:d6:c7:47:2d:af:f6:a4:2f:68:cf:b1:d7:41:3a:
         4b:48:64:d3:b7:15:59:fc:44:c4:16:96:87:f7:8c:0e:7d:68:
         24:2b:29:d4:4a:f6:6a:07:a7:ad:b2:8a:c8:db:ac:81:55:b5:
         1d:77:45:1c:df:73:36:03:46:9e:b6:be:b7:ff:73:df:c8:4f:
         1c:ca:ad:ad:c8:a9:23:cf:02:7e:19:34:1a:af:e3:40:c3:66:
         d6:89:c5:06:e5:99:81:f2:18:45:94:db:1d:cb:2f:49:c5:43:
         4c:18:1f:a3:92:ba:71:07:c1:b6:0b:b0:f1:47:97:05:7f:70:
         02:59:58:49:63:c4:3c:1a:93:8f:0d:9f:df:01:f5:36:c4:48:
         2a:ed:dd:f3:68:2c:3a:7c:df:0c:85:6e:d9:df:a8:4f:a5:82:
         aa:8c:a1:55:84:73:d4:e2:00:24:bd:7e:ec:dd:b8:ea:27:56:
         f1:91:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:28 2026 by rpki-client