Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          Ng7waYdDe1Dfj8ZChcOrErxA2un9U810Hwr4zNlkzaw=
Subject key identifier:   63:B8:50:78:07:FB:A3:B8:00:35:84:19:14:E8:7D:FC:A6:D7:68:C6
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       ACEAFF0492C0AA9DC9CE14F67F28580A3DCB1F
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:30 +0000
ROA not before:           Sun 03 May 2026 02:45:30 +0000
ROA not after:            Sun 02 May 2027 02:50:30 +0000
asID:                     46030
IP address blocks:        182.48.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ac:ea:ff:04:92:c0:aa:9d:c9:ce:14:f6:7f:28:58:0a:3d:cb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:30 2026 GMT
            Not After : May  2 02:50:30 2027 GMT
        Subject: CN=63B8507807FBA3B80035841914E87DFCA6D768C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:98:ba:63:bf:41:76:f3:da:21:5f:49:12:
                    26:da:28:23:b1:d0:74:5a:4f:1b:d9:6d:d9:f0:7d:
                    e1:1e:61:19:ae:ec:c4:72:d3:5a:86:2f:04:09:4a:
                    e5:4b:69:25:55:cc:a5:b1:49:02:94:de:2f:75:2c:
                    34:84:86:2b:cd:dc:87:0f:77:5b:ea:ef:75:48:f3:
                    48:35:7a:25:22:6e:d5:e1:9b:04:42:f8:44:6d:0b:
                    03:26:79:43:35:9e:38:4a:df:fe:1b:34:8a:9d:f3:
                    6a:22:31:d3:9e:8e:e7:14:8a:63:90:3c:6b:87:97:
                    dc:c4:86:68:e7:d9:b4:1f:ed:78:ea:64:b3:9c:55:
                    6e:f8:0a:8d:73:19:17:53:cb:8c:cc:90:0b:1d:45:
                    5f:02:06:69:f3:27:cd:0e:81:d0:10:24:00:30:15:
                    dd:bc:8b:04:b2:69:8a:3f:21:78:0a:74:fb:03:f8:
                    08:16:09:44:72:5c:5c:64:eb:47:c8:8a:f5:29:c2:
                    5f:af:0e:0b:aa:9f:cb:52:e1:06:9a:0c:47:92:b8:
                    4c:29:ee:c6:e4:2f:3b:81:2b:13:17:06:69:14:c2:
                    fa:9f:6e:4e:fc:80:b5:7d:b2:7c:6a:e6:83:e5:32:
                    c2:43:bc:6e:38:9e:d8:3a:2f:8c:7e:ed:4e:7c:b0:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B8:50:78:07:FB:A3:B8:00:35:84:19:14:E8:7D:FC:A6:D7:68:C6
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:05:0d:dd:e7:f7:c9:8b:79:0b:71:f6:2b:f9:d3:c6:c9:63:
         99:78:0a:b2:cb:ee:aa:a1:24:cd:15:4b:a5:8f:8f:92:08:1c:
         75:52:de:8a:3b:36:86:dc:86:c9:64:5d:f1:59:9a:fb:fb:d0:
         81:07:7e:53:6e:92:8d:7a:1b:7a:64:3a:c9:5a:77:66:66:96:
         56:b7:1b:e4:0a:a7:93:ab:f3:58:99:e3:6f:73:46:6c:6b:1c:
         0d:53:db:0b:90:49:a9:96:9f:1e:06:1e:23:84:cd:6e:72:8e:
         b0:6e:8d:83:cb:dd:c2:c0:8d:e5:c0:38:58:05:b1:4d:ad:32:
         5b:6e:ff:17:31:4b:ff:d7:67:47:36:ca:35:58:fe:fd:5a:b7:
         21:a7:4b:b1:d3:26:41:b2:01:2c:ce:94:0d:87:e0:1f:46:1b:
         19:72:25:55:a8:bf:76:17:ba:d4:fb:95:fe:99:f4:f8:e8:e2:
         3d:72:25:3b:74:a8:5d:53:70:08:1d:23:2a:bf:48:e4:2c:64:
         df:6b:29:de:2a:77:6f:cc:6a:2d:7e:94:1b:76:25:83:c9:e4:
         5c:52:d8:c5:53:3c:d2:a9:11:ce:75:45:7a:c1:88:25:8e:9e:
         72:c1:52:d7:b4:9a:4e:b1:9b:ef:26:83:e8:0b:0d:65:aa:5a:
         9f:51:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:05 2026 by rpki-client