Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138332e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138332e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          UGbDMfBesxO5/EEF+JrapKZzclHkwuQF79qZ/AxYM8I=
Subject key identifier:   59:22:0F:D6:AE:A1:25:F1:7E:D8:6B:58:14:B0:01:AE:E6:81:7A:2D
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       1FFA640D791CF5CBC3A7C96DB39734E13C39B5A0
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138332e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:44 +0000
ROA not before:           Sun 03 May 2026 02:45:44 +0000
ROA not after:            Sun 02 May 2027 02:50:44 +0000
asID:                     46030
IP address blocks:        182.48.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:64:0d:79:1c:f5:cb:c3:a7:c9:6d:b3:97:34:e1:3c:39:b5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:44 2026 GMT
            Not After : May  2 02:50:44 2027 GMT
        Subject: CN=59220FD6AEA125F17ED86B5814B001AEE6817A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:2d:a6:49:02:1b:f6:72:8a:21:44:c2:3c:
                    68:55:ed:e5:4f:93:03:10:32:5a:9e:3c:c4:53:a9:
                    2e:b9:8a:0d:a1:b9:61:3e:9f:9d:77:34:d0:3a:8a:
                    45:ac:d5:ce:52:c4:3a:20:fa:eb:5f:7f:99:47:23:
                    68:8c:7d:07:2d:bd:e8:08:ce:42:33:78:23:fc:6f:
                    e2:3d:ec:65:94:8e:44:1c:55:5b:90:f0:78:f1:f9:
                    56:19:97:c2:ea:9a:65:43:fa:8f:d0:e4:30:93:53:
                    e5:63:85:e6:49:ea:35:e7:99:7f:07:bd:8b:11:22:
                    a6:fc:bf:52:12:3d:a5:98:9e:21:ac:75:ca:c9:5e:
                    63:a6:ae:93:60:a7:c5:70:fd:c6:9a:a1:b2:1a:8b:
                    52:50:af:34:11:a6:4f:5b:e4:39:e5:55:fb:24:d2:
                    41:04:c7:7b:27:56:76:1d:e5:e7:ec:a2:92:a8:10:
                    99:21:dd:b3:01:85:2d:4c:6c:de:d6:2c:2a:e2:7f:
                    e9:f0:c3:3d:dc:79:06:c2:d2:59:0a:d2:35:1c:f2:
                    0b:e2:af:98:55:5c:e0:4b:e2:e0:b9:08:fb:d5:a1:
                    99:20:c0:fc:d5:31:18:be:33:19:3d:50:8a:fd:7e:
                    10:9e:8c:50:f9:ed:d8:73:a4:79:c1:12:41:19:a8:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:22:0F:D6:AE:A1:25:F1:7E:D8:6B:58:14:B0:01:AE:E6:81:7A:2D
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138332e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:c5:c1:09:54:f8:0c:72:db:69:51:23:0d:6c:80:ae:44:a1:
         fc:ef:65:8e:43:6c:bf:02:2f:59:e7:49:3e:35:ed:19:3d:60:
         0f:26:33:54:51:6b:19:9c:f5:c3:5b:61:26:f4:74:73:8c:be:
         9b:20:6d:91:1f:0f:f6:cf:2c:9e:3c:d4:5b:7c:d4:f9:c1:09:
         e1:95:89:3f:7f:ce:ac:40:a1:7d:30:5a:1c:f9:25:6b:24:58:
         b0:31:22:2b:66:f7:e3:e8:d7:05:cd:0a:24:6d:04:e7:a3:0a:
         8b:b2:86:ee:00:de:83:df:2f:2c:f8:06:b0:4d:da:44:3c:1b:
         4d:2e:d9:a6:db:1a:52:0d:7c:33:3f:86:80:5d:99:60:34:d2:
         89:52:3e:2b:d2:64:a5:dc:55:0b:a0:03:bf:f9:f5:6e:b6:36:
         7f:89:85:7d:0e:8d:11:01:d5:27:11:24:f6:75:3c:54:c6:71:
         f0:99:1b:cc:18:0d:49:71:5b:b7:23:4d:04:b4:6a:16:25:b4:
         bb:dc:34:9c:e0:2d:37:88:78:f7:22:aa:e9:93:60:ab:44:3c:
         95:b8:39:f4:af:6d:ad:02:d4:e6:af:75:59:0e:22:77:95:9d:
         02:9c:ed:0f:58:4c:ff:fb:2e:50:66:f1:23:cc:68:2e:89:c3:
         aa:23:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:38 2026 by rpki-client