Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138382e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138382e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          CTAc5TKDYG8jWJrPFMAEsp+Pffmom314/f31IgCyWSY=
Subject key identifier:   FC:A7:42:EF:73:B2:76:23:48:C0:E3:E8:D6:98:16:D7:71:88:EB:52
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       6AB5EDDFE132484EF9DEA6261C8FAB3AB6642593
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138382e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:42 +0000
ROA not before:           Sun 03 May 2026 02:45:42 +0000
ROA not after:            Sun 02 May 2027 02:50:42 +0000
asID:                     46030
IP address blocks:        182.48.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b5:ed:df:e1:32:48:4e:f9:de:a6:26:1c:8f:ab:3a:b6:64:25:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:42 2026 GMT
            Not After : May  2 02:50:42 2027 GMT
        Subject: CN=FCA742EF73B2762348C0E3E8D69816D77188EB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:50:8b:14:35:41:29:08:d2:c3:53:7f:ed:
                    5e:ce:da:40:f4:2c:aa:5a:c8:d2:5d:42:43:6f:dc:
                    f8:53:76:e9:06:9d:a4:b6:78:ba:01:02:86:9a:da:
                    62:30:cd:78:d9:fc:7a:06:3d:ed:4e:6c:55:d7:63:
                    c0:de:9f:87:8a:c6:3d:72:ef:38:5c:27:ca:8e:ce:
                    8f:45:12:7f:0f:6e:f7:e2:b4:77:ae:66:5d:9c:54:
                    a7:e3:e8:e1:06:fc:a2:f8:0d:b0:d6:58:57:71:5a:
                    c8:86:ab:b2:cf:0c:30:f5:dc:3e:cd:5b:76:7f:91:
                    ac:b7:7d:33:d9:d7:21:de:f8:b3:28:0a:fe:9c:a6:
                    46:17:92:3e:c5:db:1a:f2:22:fc:a8:e3:b9:d7:de:
                    ed:10:7a:2f:e7:51:ce:36:fa:f8:a1:10:d8:44:87:
                    32:6c:91:a7:05:d2:54:04:ab:81:8e:07:22:c8:c8:
                    20:4c:34:0c:06:27:9b:d7:b7:e7:5e:1a:74:7e:63:
                    a0:ff:e4:a4:1b:1b:b9:da:15:f2:e8:b3:32:b5:67:
                    91:f5:7f:94:67:87:fc:6e:de:21:0f:97:f6:b2:33:
                    6a:21:2d:ba:f7:25:da:da:c3:d7:28:43:aa:89:11:
                    48:cc:b6:77:17:da:86:f3:4a:30:45:56:6b:3a:3f:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A7:42:EF:73:B2:76:23:48:C0:E3:E8:D6:98:16:D7:71:88:EB:52
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138382e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:29:f7:6c:df:11:76:e4:20:fc:1c:8e:f2:ce:0f:48:05:b7:
         bd:0a:bb:61:39:77:17:ee:09:e6:0d:14:68:9c:b0:ee:d4:61:
         94:db:4b:91:50:5e:6b:7f:0b:22:7c:8c:ce:1e:93:de:76:43:
         89:96:a1:c3:15:60:29:52:89:d3:0c:23:e4:c4:44:c1:24:c1:
         f1:11:47:4f:d3:a0:3b:7e:7d:85:e0:f2:61:ec:90:e8:ea:95:
         32:01:c3:62:81:b2:19:36:c9:31:e9:4f:61:31:f2:cb:22:d5:
         48:7a:68:84:f2:da:d7:b3:b4:89:57:00:94:37:5d:47:bd:94:
         47:27:3a:2a:22:80:50:1d:31:ab:44:6d:0c:da:30:27:85:ee:
         cc:d4:00:e2:a7:34:2e:25:53:eb:5c:38:b7:e6:27:d4:66:d6:
         88:5a:84:7c:b1:6e:33:26:6f:69:13:54:ff:5f:20:f1:26:2b:
         21:1e:fd:d9:e2:6f:1c:5d:62:d2:74:a7:f1:46:c8:f0:96:ee:
         6b:ce:e1:fb:38:95:e5:d2:25:12:35:90:8b:27:74:de:0c:66:
         ab:ac:d0:8b:21:81:24:88:8c:b4:39:fd:8f:36:e6:d9:82:66:
         f3:ef:d6:55:a8:40:53:c2:b4:9c:1f:7b:d6:6d:46:4b:99:75:
         fa:b7:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:38 2026 by rpki-client