Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137352e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137352e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          5T8Tor9uEyt7xupZTf9YjNdQa3WiJhFlyyfkYzVReeM=
Subject key identifier:   78:E1:30:A8:CC:4F:BA:25:4C:61:10:6C:96:51:16:D4:6B:EE:F9:9A
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       048E42DB7AA9B5203A0CA19C091D63EB3F74D034
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137352e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:37 +0000
ROA not before:           Sun 03 May 2026 02:45:37 +0000
ROA not after:            Sun 02 May 2027 02:50:37 +0000
asID:                     46030
IP address blocks:        182.48.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8e:42:db:7a:a9:b5:20:3a:0c:a1:9c:09:1d:63:eb:3f:74:d0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:37 2026 GMT
            Not After : May  2 02:50:37 2027 GMT
        Subject: CN=78E130A8CC4FBA254C61106C965116D46BEEF99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:9f:48:b9:8f:a2:6d:b3:59:da:2f:c0:84:
                    40:be:da:8c:ad:b7:e1:3c:cb:8b:9e:20:9a:ba:c5:
                    35:1c:f2:b5:d0:fb:f2:54:6e:2e:3e:f4:7a:a5:e6:
                    38:9b:54:9b:ad:b3:14:00:44:5b:aa:b4:6f:64:00:
                    e9:51:f9:44:e6:e8:29:84:ad:b4:40:4c:75:f6:5a:
                    a0:c2:6c:4d:83:2a:77:9b:ab:e6:9c:50:32:47:e1:
                    67:4b:86:4d:64:22:cc:a5:25:5b:a6:e6:9d:26:a6:
                    b9:74:4c:b0:cc:4c:27:b4:0c:94:44:45:ea:6f:e8:
                    84:92:27:8c:47:66:85:93:c5:79:93:51:e3:23:8f:
                    a0:b3:43:90:57:e4:28:07:69:12:fa:27:00:7f:b8:
                    48:b7:3d:b2:92:35:59:45:83:35:8b:da:65:79:c1:
                    f1:74:3b:04:4f:b3:61:59:cf:8d:c4:a9:e6:57:6f:
                    ae:7a:7f:8d:9d:c8:7c:c0:0e:35:85:38:34:3e:d0:
                    77:3b:55:da:73:5d:e4:2c:38:2d:96:10:fb:92:67:
                    e1:08:f8:2b:f6:5f:7c:10:24:95:da:2b:3d:96:8e:
                    81:7f:93:5d:41:3f:e7:5f:f4:32:e6:44:6c:7a:83:
                    bb:f2:9d:32:dc:25:ab:a8:63:4d:44:00:b2:62:9e:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E1:30:A8:CC:4F:BA:25:4C:61:10:6C:96:51:16:D4:6B:EE:F9:9A
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137352e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:97:7e:cc:49:c4:97:f5:b1:9b:a9:df:3d:ed:b7:25:47:39:
         fc:46:ad:b2:29:e3:d5:ce:fb:c8:70:d6:a3:4c:c6:fa:1a:c8:
         c8:9a:dc:9b:82:df:af:8e:1d:09:de:49:ac:c5:59:19:cd:f9:
         ee:ea:e5:6d:d9:eb:d5:e8:1e:22:86:f4:07:e4:36:24:af:cb:
         b8:6c:ba:0d:e4:1b:94:79:16:c0:be:cf:2b:c6:8e:cc:5d:21:
         10:c1:2e:bc:9a:25:62:7d:31:1a:b3:f1:90:66:58:ae:0b:eb:
         a0:56:23:59:58:fd:85:f4:51:42:cf:98:f6:d1:3f:1f:df:96:
         ad:4e:d9:61:ed:de:24:ea:3a:56:e1:21:d9:34:cc:9a:2e:c7:
         f9:50:ee:c1:82:de:81:41:00:9f:2a:59:e7:8c:6e:41:67:ff:
         c4:9a:2c:4e:76:77:af:e8:ca:98:91:a7:7d:51:66:8a:8a:b8:
         81:1e:87:f9:c1:50:03:5e:fa:b7:b5:94:b2:be:a7:66:05:c3:
         57:5f:12:10:2b:2a:87:13:bd:c7:83:46:2a:18:56:12:03:e0:
         62:fb:64:94:f9:63:24:c8:9e:51:8b:d4:4d:ea:87:a1:1b:d5:
         7a:e0:27:39:16:4b:d5:7e:0a:e3:ad:68:00:ce:21:b2:d0:88:
         d2:85:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:46 2026 by rpki-client