Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137382e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137382e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          18ON4ArCTP+lfrAOcIUbJ7NgSJlxjIjAeKAx8615vRA=
Subject key identifier:   8A:D7:34:9D:70:A4:FF:BC:C3:30:E8:57:C8:FA:4D:A1:71:34:BE:0F
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       3DE392003F5FCE9084F515F0C9D0729370A47296
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137382e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:39 +0000
ROA not before:           Sun 03 May 2026 02:45:39 +0000
ROA not after:            Sun 02 May 2027 02:50:39 +0000
asID:                     46030
IP address blocks:        182.48.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e3:92:00:3f:5f:ce:90:84:f5:15:f0:c9:d0:72:93:70:a4:72:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:39 2026 GMT
            Not After : May  2 02:50:39 2027 GMT
        Subject: CN=8AD7349D70A4FFBCC330E857C8FA4DA17134BE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:83:e8:74:6b:b6:71:3e:2c:ec:87:b9:14:
                    21:0e:10:db:04:69:85:47:f7:4f:55:56:3f:16:6b:
                    aa:99:36:ef:2b:79:87:15:eb:5a:cd:ba:db:4c:cd:
                    c1:16:77:66:79:73:bf:44:7f:44:b4:cd:c9:b2:44:
                    ae:96:38:87:df:e5:ec:ca:a8:e6:57:f3:7c:b1:72:
                    e9:88:9d:8e:4e:94:26:73:94:d0:31:fe:5e:88:2e:
                    23:1f:4a:84:29:93:96:13:7d:2d:d0:ec:0f:a1:44:
                    e7:fe:82:d3:7d:ae:24:99:46:30:eb:dc:e3:6d:12:
                    f8:9e:0d:c9:a8:a6:92:36:23:98:f8:77:b8:ab:05:
                    8a:6a:2c:f6:c8:a9:dd:69:9a:74:74:75:43:89:c4:
                    ba:bc:63:4c:8e:fb:f5:94:f8:dd:64:32:4d:5b:00:
                    b9:5f:06:d1:ff:80:30:ad:8d:a7:4a:1d:09:a5:c9:
                    99:2a:f4:d7:ba:43:df:1a:fc:82:a0:9d:62:5b:41:
                    1e:e4:01:87:60:1a:27:9d:c5:77:34:0e:c4:c7:ad:
                    2a:24:95:8d:c4:6f:10:45:b9:0a:73:29:94:e9:8b:
                    a9:5d:ee:30:af:dd:c9:f0:77:fc:70:e9:43:8a:3f:
                    52:3d:a5:e1:06:cc:ad:3e:31:cf:fc:71:ad:e1:a7:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:34:9D:70:A4:FF:BC:C3:30:E8:57:C8:FA:4D:A1:71:34:BE:0F
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137382e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b4:c6:6a:fa:ac:82:e8:d4:1c:3e:29:0a:b4:23:f9:49:66:
         91:9b:08:42:03:7a:78:4b:ae:f9:06:21:fd:4d:ea:b0:bb:87:
         e1:82:5b:22:04:f3:75:98:20:b3:bd:cd:9a:88:1f:d5:72:4e:
         75:92:22:21:16:54:bd:02:bf:f2:19:3e:79:73:27:21:68:ca:
         a6:76:1d:d2:36:6b:35:ed:60:8e:b6:af:de:80:b0:7c:45:97:
         70:78:46:49:67:6e:c7:0b:ac:5f:53:0e:8e:0d:7c:c3:f3:7e:
         35:6d:55:a4:c7:5f:20:8f:94:b7:61:9d:db:5c:57:d2:5f:bd:
         03:45:5e:56:d9:1f:59:ea:60:d2:62:22:1b:2f:30:df:3f:23:
         aa:4a:fd:06:d4:96:53:3f:58:af:16:95:f1:a5:3b:09:e6:98:
         f8:a3:e1:7e:61:3c:2a:de:92:de:b6:b2:2f:5b:03:ee:d8:f4:
         59:a9:8b:89:1f:fb:c2:87:14:4a:53:99:1e:60:32:a3:93:3a:
         27:5d:5d:f1:c6:b1:43:9f:01:36:3a:c0:2f:f3:bc:2c:3b:ad:
         c0:23:8c:15:7f:a3:fe:b9:5a:65:5f:64:03:65:93:6f:b6:67:
         73:3f:fc:08:35:93:18:1b:9b:3b:b8:c9:e8:39:a2:ee:d5:d2:
         5f:90:a1:d8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPeOSAD9fzpCE9RXwydByk3CkcpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2MENF
MkUwNEQ4ODAeFw0yNjA1MDMwMjQ1MzlaFw0yNzA1MDIwMjUwMzlaMDMxMTAvBgNV
BAMTKDhBRDczNDlENzBBNEZGQkNDMzMwRTg1N0M4RkE0REExNzEzNEJFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbYPodGu2cT4s7Ie5FCEOENsE
aYVH909VVj8Wa6qZNu8reYcV61rNuttMzcEWd2Z5c79Ef0S0zcmyRK6WOIff5ezK
qOZX83yxcumInY5OlCZzlNAx/l6ILiMfSoQpk5YTfS3Q7A+hROf+gtN9riSZRjDr
3ONtEvieDcmoppI2I5j4d7irBYpqLPbIqd1pmnR0dUOJxLq8Y0yO+/WU+N1kMk1b
ALlfBtH/gDCtjadKHQmlyZkq9Ne6Q98a/IKgnWJbQR7kAYdgGiedxXc0DsTHrSok
lY3EbxBFuQpzKZTpi6ld7jCv3cnwd/xw6UOKP1I9peEGzK0+Mc/8ca3hpw3nAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUitc0nXCk/7zDMOhXyPpNoXE0vg8wHwYDVR0j
BBgwFoAUkGzRgy4JX9hkMm2TQMM2DOLgTYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQxZDU5NmMtMDllMy00NjIxLWE2M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMy
RTA5NUZEODY0MzI2RDkzNDBDMzM2MENFMkUwNEQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MDZDRDE4MzJFMDk1RkQ4NjQzMjZEOTM0MEMzMzYwQ0UyRTA0
RDg4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwsjANBgkqhkiG
9w0BAQsFAAOCAQEArbTGavqsgujUHD4pCrQj+UlmkZsIQgN6eEuu+QYh/U3qsLuH
4YJbIgTzdZggs73Nmogf1XJOdZIiIRZUvQK/8hk+eXMnIWjKpnYd0jZrNe1gjrav
3oCwfEWXcHhGSWduxwusX1MOjg18w/N+NW1VpMdfII+Ut2Gd21xX0l+9A0VeVtkf
Wepg0mIiGy8w3z8jqkr9BtSWUz9YrxaV8aU7CeaY+KPhfmE8Kt6S3rayL1sD7tj0
WamLiR/7wocUSlOZHmAyo5M6J11d8caxQ58BNjrAL/O8LDutwCOMFX+j/rlaZV9k
A2WTb7Zncz/8CDWTGBubO7jJ6Dmi7tXSX5Ch2A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:07:43 2026 by rpki-client