Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          2Ix9NBX4ryTwqueIaz6deDkrg5ibNpli+8/f+eL7h/o=
Subject key identifier:   F3:8F:D9:7E:44:4A:41:EA:75:FC:22:61:45:3D:1A:2F:0B:F3:54:B2
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       3B05B4AFD3073D659D103C731CAABEEA64928F67
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:43 +0000
ROA not before:           Sun 03 May 2026 02:45:43 +0000
ROA not after:            Sun 02 May 2027 02:50:43 +0000
asID:                     46030
IP address blocks:        182.48.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:05:b4:af:d3:07:3d:65:9d:10:3c:73:1c:aa:be:ea:64:92:8f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:43 2026 GMT
            Not After : May  2 02:50:43 2027 GMT
        Subject: CN=F38FD97E444A41EA75FC2261453D1A2F0BF354B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:9f:42:60:6d:53:2e:80:24:0e:d3:1c:45:
                    38:93:24:34:4a:bc:1e:07:bc:27:af:b4:27:1a:3f:
                    ac:17:ec:bc:9f:c6:96:6a:34:45:8b:04:d3:c5:42:
                    54:98:1d:93:a4:dc:d0:0b:64:4a:75:c3:87:ef:8b:
                    2b:12:9b:29:0a:43:16:74:52:c5:3e:3a:b7:fe:02:
                    76:bf:23:e9:23:c4:fa:df:9a:a7:ec:c0:7f:db:90:
                    df:8a:43:1d:81:ec:9d:10:bd:34:e9:43:d4:fd:f0:
                    5d:5c:1a:2d:23:87:47:4b:19:8d:a4:30:8e:57:46:
                    3e:92:21:ab:64:cf:d4:9f:01:5f:66:35:f9:2c:fe:
                    75:9a:61:ea:12:72:6d:01:b3:6a:1a:f6:7f:c4:1a:
                    93:bd:70:13:a7:32:b0:4a:fe:51:3c:28:3c:87:1f:
                    a3:ca:96:da:a5:a5:f6:20:76:b6:74:f8:5a:eb:b6:
                    3c:b2:22:48:80:20:48:08:24:51:0d:40:10:0f:ad:
                    d3:5a:c8:c1:89:a8:5a:58:dd:24:ef:83:b4:a3:d6:
                    5f:d9:3f:53:98:ac:26:13:5f:2f:72:40:a2:f1:d2:
                    d6:d9:d9:4e:57:c0:fb:40:d3:97:26:f4:9b:ee:4a:
                    21:73:b2:c8:c0:a2:1f:0e:bd:21:2e:3f:c1:65:89:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8F:D9:7E:44:4A:41:EA:75:FC:22:61:45:3D:1A:2F:0B:F3:54:B2
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:54:5d:d1:4c:04:2a:6d:1a:21:e1:36:ef:db:31:c9:2b:
         e4:36:51:5f:6b:cb:4f:a5:b8:cb:14:03:6e:aa:fd:0a:04:09:
         af:e4:05:f4:8b:f5:fa:60:45:48:e6:3e:36:0f:2e:87:a0:c4:
         90:50:b3:2f:b8:69:08:2b:41:b3:6e:f9:ef:25:2a:3f:39:f2:
         9f:99:42:60:c7:fe:3c:cd:06:da:79:fe:f7:b3:ba:db:37:a4:
         4b:64:07:3c:65:ea:c0:22:6b:a8:53:b3:2e:9a:7a:2e:99:12:
         bd:f3:b8:72:92:16:96:5b:a5:fa:5d:56:e4:8d:34:4a:a8:6b:
         e4:78:7e:de:5a:a9:8e:98:d6:18:61:63:aa:99:7d:a7:bc:48:
         a3:f9:ea:a8:c2:7d:11:90:e4:c2:ce:cf:c9:c1:74:57:19:6f:
         46:10:dc:1b:0a:b0:d6:c9:83:88:fb:c6:73:ba:35:d4:9d:d8:
         a4:c4:bd:e6:45:a8:af:8c:87:bb:35:34:61:74:fd:df:1d:be:
         92:a2:04:49:9b:04:4a:08:0a:22:55:a1:d4:db:a4:f6:b9:77:
         3a:07:29:de:55:e0:e0:e9:c3:1f:0a:4d:6c:51:b2:1a:d8:9d:
         93:ba:65:07:42:f5:9e:27:5b:b4:e8:0c:49:30:b0:de:ab:f6:
         03:5a:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:17 2026 by rpki-client