Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137342e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137342e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          9EIhETWWjW1dZSmzJuION9agY2xrl3P3+FsQS+Eeaz0=
Subject key identifier:   06:1A:20:8E:7C:DB:D5:57:58:0C:3E:34:C5:36:92:AD:BA:96:0A:D6
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       10446377D35E7BDD29224D1C5D01ED3BC4AC7C7A
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137342e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:32 +0000
ROA not before:           Sun 03 May 2026 02:45:32 +0000
ROA not after:            Sun 02 May 2027 02:50:32 +0000
asID:                     46030
IP address blocks:        182.48.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:44:63:77:d3:5e:7b:dd:29:22:4d:1c:5d:01:ed:3b:c4:ac:7c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:32 2026 GMT
            Not After : May  2 02:50:32 2027 GMT
        Subject: CN=061A208E7CDBD557580C3E34C53692ADBA960AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:ef:7d:a2:fc:2e:78:14:5d:4f:92:76:a6:
                    4b:6b:28:56:9a:09:0e:4a:ca:c8:f1:9d:75:51:59:
                    36:c4:0b:bd:0f:95:fb:47:c1:2d:ca:d6:70:0d:98:
                    34:77:17:24:8a:89:84:cc:6e:15:52:ab:a0:0f:d7:
                    24:08:f9:c0:20:d2:2f:bf:93:da:90:32:4d:c8:5f:
                    d8:67:83:c3:59:8e:7d:b6:0c:69:b4:22:ae:74:81:
                    9d:c9:b9:1e:e7:13:6e:8a:82:a2:d0:fb:2b:97:1f:
                    93:0f:53:e5:85:f2:de:4e:c5:c8:f1:b5:dc:af:be:
                    a5:68:6f:af:cd:5b:88:46:ad:73:69:c6:44:4f:47:
                    0d:13:bb:85:89:d8:7e:8e:44:3b:c6:49:ca:97:98:
                    2a:c7:11:54:11:6f:3f:1d:e5:85:e5:3c:aa:9e:90:
                    ad:fb:93:ac:5e:1e:0b:79:7f:46:91:24:73:22:53:
                    3e:4f:ce:70:4b:e7:c1:88:83:f0:41:31:72:8b:47:
                    2e:05:31:2a:74:25:ed:33:d9:a7:7e:b1:27:aa:6b:
                    7a:23:cb:5c:ca:f9:ad:80:a8:bb:56:ed:d9:cb:46:
                    23:fc:c0:8c:d2:1c:18:41:7b:5a:e9:54:87:b7:59:
                    31:6c:c5:a7:fd:c4:e0:37:17:57:c0:cb:37:fb:ac:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1A:20:8E:7C:DB:D5:57:58:0C:3E:34:C5:36:92:AD:BA:96:0A:D6
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137342e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:c3:54:3a:1c:f9:30:6c:c7:b0:ab:63:8b:23:94:28:6a:
         f6:65:11:91:8e:b0:43:b9:d9:b2:79:89:cc:21:43:1f:01:6b:
         cb:ba:b2:fb:a8:76:74:7a:df:01:fa:c1:4f:34:1e:f1:37:23:
         d8:74:3e:a8:c2:99:b7:00:8b:5d:49:a4:3e:24:d3:7e:34:8a:
         4e:5b:68:b8:40:c0:7f:61:23:60:26:1e:f2:77:b8:1c:a4:a0:
         ab:e8:42:59:40:22:b0:c8:1a:92:ac:15:85:f9:8a:ea:2b:a8:
         a4:20:c7:8b:aa:3e:7b:ce:f7:62:b8:69:eb:b7:b0:5c:fe:f2:
         ed:32:0b:ea:b1:cf:e3:9e:b5:22:21:3c:94:a1:73:2e:6d:fc:
         d5:03:82:ff:e1:6b:56:0b:91:7e:b4:8e:89:32:b1:e5:b4:70:
         ce:37:3b:e7:4e:21:0d:c1:6f:4f:8a:41:f9:58:39:9b:b5:0b:
         7f:41:13:54:a6:35:d7:1e:0b:92:db:a4:d7:e7:1d:35:f7:18:
         55:02:17:91:05:2b:9f:32:4b:17:42:e9:10:50:d1:4c:31:4f:
         e7:5b:1f:9b:52:7a:d8:1d:42:25:a6:fb:87:0f:40:be:16:a5:
         e9:9b:a3:0c:3c:26:01:34:f4:36:78:51:61:f9:a3:97:cb:35:
         f9:87:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:27 2026 by rpki-client