Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          B/kblNkQ3ms1SzQMO/SpWc7KjkRSnbXvWp8KTyp1kwA=
Subject key identifier:   B3:24:4A:86:A8:E7:5A:91:26:83:C3:4B:DB:B5:8F:A0:97:6B:FF:A4
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       4ECE5EE4DE1CA8DB98EB656E028165F976D1CD0A
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:32 +0000
ROA not before:           Sun 03 May 2026 02:45:32 +0000
ROA not after:            Sun 02 May 2027 02:50:32 +0000
asID:                     46030
IP address blocks:        182.48.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ce:5e:e4:de:1c:a8:db:98:eb:65:6e:02:81:65:f9:76:d1:cd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:32 2026 GMT
            Not After : May  2 02:50:32 2027 GMT
        Subject: CN=B3244A86A8E75A912683C34BDBB58FA0976BFFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d9:c0:a6:a0:99:d6:35:d4:3a:79:a1:72:80:
                    81:2f:6f:3a:3e:3f:33:38:ad:64:3c:ee:0c:29:47:
                    ab:7f:c1:04:26:14:ce:50:b4:ce:1b:08:57:d8:93:
                    87:52:b6:eb:9f:e5:40:e6:3d:ae:b8:94:8d:23:85:
                    9c:d8:41:b6:13:5f:75:92:b0:a0:d5:81:43:fe:f4:
                    9d:8e:61:ab:b5:24:82:9d:6f:be:ce:16:77:d1:67:
                    6b:82:d6:ee:69:6a:48:34:a4:0b:42:54:d1:89:67:
                    94:2f:c6:44:30:1d:4f:59:8d:df:c9:bd:8e:9f:6e:
                    bf:ff:46:28:c6:af:96:d6:b3:c8:00:41:9c:17:52:
                    70:a8:c7:63:47:09:ec:6b:54:10:40:6b:6a:f3:41:
                    3b:39:06:f3:a2:70:27:d3:e3:74:58:0a:08:6d:b0:
                    c7:39:0e:21:ef:d1:77:9e:36:26:27:d7:cd:24:1a:
                    dc:b9:42:8c:64:3d:da:57:5a:fd:85:97:f1:7b:ac:
                    89:3b:0e:38:4a:ab:6d:c0:79:db:39:95:a4:ae:2d:
                    34:e4:c1:5b:1b:1f:9b:d3:34:e5:6b:b4:ea:eb:fa:
                    d1:0f:56:84:a2:89:98:f8:51:68:e0:16:98:d2:8f:
                    97:1e:24:73:7a:e9:72:4c:7e:92:5e:ec:01:d7:58:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:4A:86:A8:E7:5A:91:26:83:C3:4B:DB:B5:8F:A0:97:6B:FF:A4
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:93:f4:64:df:71:82:77:20:64:9c:c3:d1:da:37:4f:2b:b1:
         7c:fd:d0:30:b0:e7:b5:a8:a5:4f:00:26:bf:28:70:16:1f:11:
         f1:8e:19:c2:e7:26:0e:33:db:62:03:bb:09:fc:90:26:f5:51:
         48:e1:f3:67:99:27:1b:38:96:87:2b:db:30:f5:4b:ba:fb:46:
         d3:90:4c:04:f3:b1:f6:59:a8:dc:31:85:f3:7f:cc:16:d7:e1:
         c0:d7:db:06:59:3e:72:5a:c7:90:c0:9f:76:d6:30:cb:65:ef:
         74:4f:93:5d:85:4d:8a:1f:55:6e:d0:c1:62:9f:c9:f1:38:53:
         04:99:f6:c9:2f:3e:ea:52:02:9b:7b:8c:2f:6c:f5:25:b9:03:
         f2:83:9c:2b:86:6a:d4:76:c3:69:75:01:9b:9e:27:45:5b:4e:
         85:6b:fe:43:e7:25:44:a4:95:42:6e:cd:3d:e0:45:10:4a:57:
         00:b5:e0:2c:11:f5:7e:f9:51:cf:6c:39:3b:fa:f8:7c:d6:76:
         a3:0f:78:21:42:c8:54:a4:23:86:08:ba:78:91:d1:ef:43:56:
         b3:c2:95:85:dc:ae:cd:98:33:42:cd:c4:f3:e9:37:55:e3:b6:
         67:d2:b5:37:d2:af:30:2a:9b:00:4f:f9:4f:4b:f6:c7:12:1c:
         43:e1:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:33 2026 by rpki-client