Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          tPLdls9+EYZXd6ZrhIRMSY3IobhJMxdyCJJTVoTUXQ8=
Subject key identifier:   05:D9:62:2F:8D:D8:1F:9A:F4:98:62:A0:8F:D0:1D:9A:DC:06:9B:41
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       1A54CE54271C99F2DA2E9392BF7596EFC18466FE
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:28 +0000
ROA not before:           Sun 03 May 2026 02:45:28 +0000
ROA not after:            Sun 02 May 2027 02:50:28 +0000
asID:                     46030
IP address blocks:        182.48.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:54:ce:54:27:1c:99:f2:da:2e:93:92:bf:75:96:ef:c1:84:66:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:28 2026 GMT
            Not After : May  2 02:50:28 2027 GMT
        Subject: CN=05D9622F8DD81F9AF49862A08FD01D9ADC069B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:98:11:db:2a:a9:c0:9d:b2:e2:6f:ab:10:1c:
                    4f:d1:da:47:91:40:c9:21:68:49:86:2b:c0:98:47:
                    5a:62:b1:63:6d:cd:b0:9f:55:c6:9a:ad:10:fd:3a:
                    1f:71:90:55:aa:dc:f3:07:31:86:d2:df:f8:a5:a4:
                    29:8f:ae:4e:84:0e:8b:12:3a:c9:90:4c:2d:41:47:
                    89:ac:c2:c3:92:ab:05:69:12:e4:d8:42:95:49:b5:
                    2a:6e:7f:df:c3:b6:19:2d:05:64:78:00:2a:85:83:
                    8c:02:99:b2:e1:22:8c:e9:5d:b6:1b:32:be:5b:46:
                    41:26:08:1d:f9:94:1c:5d:2b:03:8b:f6:12:80:48:
                    95:cb:01:e1:9e:3d:f1:c5:63:97:47:1c:f2:59:02:
                    10:3b:80:82:d9:b3:b7:e9:50:aa:8b:af:c6:e5:fc:
                    b3:8c:87:2d:6d:7d:2d:6c:5e:3f:91:41:33:e9:48:
                    ce:ca:de:16:24:02:05:b6:13:2d:b9:0c:65:80:c9:
                    ea:31:f1:dd:c8:5d:de:4a:66:21:22:69:f0:26:f2:
                    06:ea:41:dd:73:d0:57:46:44:3b:9f:f3:d6:ac:81:
                    b1:4b:2d:08:77:67:74:00:b6:0f:b7:3e:5e:9f:31:
                    b3:3e:a3:a1:21:a2:95:f3:da:cd:35:ca:60:0b:49:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D9:62:2F:8D:D8:1F:9A:F4:98:62:A0:8F:D0:1D:9A:DC:06:9B:41
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:d0:3a:1b:3e:6b:30:45:14:f9:6e:de:c8:0f:8f:81:32:e6:
         2a:a5:f2:aa:e7:dc:bd:20:ea:21:c9:a0:af:d0:e6:f8:8d:c5:
         22:d0:d8:76:dd:aa:1b:1a:07:9d:f9:29:1e:65:83:b3:a0:a9:
         6a:f0:49:1e:f0:dc:0e:0e:bf:55:b1:3c:b3:73:01:ef:aa:7b:
         4e:74:db:07:59:32:44:54:fd:5b:d3:41:91:fd:85:5d:f6:9c:
         98:df:2e:0d:b8:e5:2d:89:89:e4:74:ba:f4:ed:7e:ec:81:10:
         88:3e:a8:3c:de:2e:92:eb:20:b5:0e:61:9a:48:b9:19:75:9f:
         e0:72:80:ac:a6:af:2f:5e:84:02:49:4e:c6:bd:50:7a:7c:88:
         d7:91:2b:fe:a9:38:3e:ce:d2:23:1c:33:a8:52:63:b4:19:60:
         88:c4:4a:05:12:33:2e:e4:14:c5:52:3c:18:af:71:f9:d2:a2:
         20:78:83:1b:83:b7:7a:66:dd:e6:46:4a:3b:d0:92:6b:32:b1:
         de:0c:42:18:02:52:bd:cd:4e:f9:97:8b:5c:a7:e7:c7:e8:e3:
         88:31:77:a4:a1:be:2b:b2:d8:69:e9:d0:72:55:fc:eb:e8:b6:
         a1:19:2a:5d:f3:33:e0:67:a5:e6:ba:15:4a:14:27:bc:fc:4d:
         e0:61:03:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:53 2026 by rpki-client