Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138322e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138322e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          /3/1RjKyrZlHVoTiW/tcRKdAaD1qr1a2KPJUdaqHdzc=
Subject key identifier:   FC:5B:59:CD:5D:8E:4B:57:86:C9:E1:E0:D8:CA:48:9F:39:7F:3F:96
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       71D2E56D8D9D7C25BC2B9341E8F2BC0E2881F990
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138322e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:32 +0000
ROA not before:           Sun 03 May 2026 02:45:32 +0000
ROA not after:            Sun 02 May 2027 02:50:32 +0000
asID:                     46030
IP address blocks:        182.48.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d2:e5:6d:8d:9d:7c:25:bc:2b:93:41:e8:f2:bc:0e:28:81:f9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:32 2026 GMT
            Not After : May  2 02:50:32 2027 GMT
        Subject: CN=FC5B59CD5D8E4B5786C9E1E0D8CA489F397F3F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:3b:cd:d9:0f:57:32:83:69:50:7f:61:49:
                    ba:ef:e6:3d:9d:51:b2:d0:ab:bb:83:92:b9:a2:db:
                    a8:37:68:5f:70:d3:6a:f6:18:95:e4:14:e1:0d:c9:
                    2c:08:79:37:b3:a2:f8:2e:1f:4f:81:40:0a:39:ee:
                    ae:7d:03:51:60:96:51:b4:5f:e2:dd:ef:a1:20:7e:
                    4e:d2:64:23:93:31:a1:f4:99:5f:ae:08:3f:d2:39:
                    d0:6b:93:5a:ef:32:fc:b8:5a:62:25:8d:4b:15:69:
                    e9:4e:56:47:01:35:50:2c:d6:4b:15:3b:77:63:88:
                    bc:7e:1b:2b:bc:9b:35:52:4b:e8:b9:60:ee:1c:ab:
                    9f:4d:92:63:f6:e5:6b:b9:74:73:73:fc:b6:81:3d:
                    10:6c:a4:07:2a:ea:25:34:56:df:ae:0b:4c:4b:ad:
                    14:37:da:1b:71:35:67:c4:dc:9d:6f:c1:6d:69:3e:
                    ca:46:32:21:74:c9:03:37:af:76:b2:30:d5:7f:aa:
                    bd:a9:32:cc:da:95:11:1e:39:b7:e2:fc:ed:8c:59:
                    a8:62:9a:77:d1:39:ba:1e:c2:e7:b6:01:18:ce:98:
                    58:e6:08:42:01:fd:f0:d4:f9:b1:9e:28:82:0f:44:
                    89:06:b6:e1:bf:f3:f4:6a:fc:39:1f:88:7a:a9:dd:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5B:59:CD:5D:8E:4B:57:86:C9:E1:E0:D8:CA:48:9F:39:7F:3F:96
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138322e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:72:aa:fb:da:d3:70:0c:c3:27:f2:c8:2e:38:1b:36:84:
         48:6a:79:a8:f4:b6:ba:76:52:97:ff:88:a7:83:f5:d2:6f:45:
         e9:d5:6b:6d:7b:ab:f2:38:cb:17:84:36:c9:5c:59:5e:4d:4c:
         d0:e0:9d:38:19:c5:a7:15:90:78:2c:f7:96:fc:ea:0c:ba:82:
         54:78:10:d0:82:17:af:ed:2c:3c:86:3a:27:77:7f:80:a8:0d:
         65:c9:34:fe:22:ad:6b:42:b1:34:94:31:25:35:9a:db:80:89:
         49:47:ad:ec:17:e2:ac:44:7e:ed:91:35:0e:1f:6e:4f:fa:49:
         42:f5:0b:a9:b0:68:66:4d:3f:23:1b:9f:cf:2d:3b:9a:97:68:
         12:6d:74:df:b6:01:1e:cd:3c:53:24:aa:47:b3:72:ac:3b:43:
         e7:2e:ba:27:10:c8:b0:87:73:dc:5e:32:48:8e:2f:0a:61:13:
         58:98:5b:fd:0c:b1:30:4e:99:c9:29:da:22:68:ac:2f:03:9a:
         dd:4e:27:96:b4:e4:b6:23:7c:a6:18:f5:50:38:32:28:de:4d:
         5e:92:39:5f:e6:2a:55:e3:4b:d3:53:61:86:3d:f2:ed:71:e7:
         77:bf:65:e1:ec:18:7d:b9:56:a3:34:24:c7:e0:a6:9b:15:c9:
         5d:b1:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:27 2026 by rpki-client