Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          PCggWZ4S0cmAIvlQ9OKIUJbBVOoSGkwzhD1/wRPVPCQ=
Subject key identifier:   38:E7:9C:FB:BC:81:C3:83:42:D1:85:F4:65:98:6B:A0:2C:14:62:D4
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       67C58F1D89D8F39F05D31B8F3D3D8D0BCD53898A
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:36 +0000
ROA not before:           Sun 03 May 2026 02:45:36 +0000
ROA not after:            Sun 02 May 2027 02:50:36 +0000
asID:                     46030
IP address blocks:        182.48.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c5:8f:1d:89:d8:f3:9f:05:d3:1b:8f:3d:3d:8d:0b:cd:53:89:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:36 2026 GMT
            Not After : May  2 02:50:36 2027 GMT
        Subject: CN=38E79CFBBC81C38342D185F465986BA02C1462D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:b5:03:dc:ac:96:79:bd:43:1f:37:a7:66:
                    49:1d:76:7b:1f:9a:2e:15:9f:5d:90:43:65:77:32:
                    b1:2d:fe:35:83:56:d9:76:69:71:e6:41:4c:d4:34:
                    16:dd:e8:73:cc:d0:54:eb:7b:9e:9e:ee:6e:2b:fb:
                    37:92:a3:f4:25:29:02:30:7f:e3:3a:f2:cf:1c:46:
                    50:3e:9f:a7:ed:86:6b:75:aa:07:a0:2a:e9:92:b8:
                    d2:29:1c:1a:f8:0f:db:ed:cf:5d:f9:71:9f:2a:32:
                    23:98:aa:67:dc:da:a2:ab:a4:88:8c:64:27:2b:aa:
                    82:87:ab:48:42:36:24:ec:52:f3:79:52:07:62:d6:
                    78:8d:9c:3d:5f:dd:fd:d5:90:55:18:4d:fb:38:74:
                    a8:98:23:db:27:e1:c9:aa:a7:2e:33:37:f8:42:2b:
                    5e:ce:a1:3c:ef:52:6e:ef:bb:e6:11:52:0d:72:78:
                    6b:30:ba:26:aa:37:ad:e9:4b:23:2b:1a:a9:b8:b7:
                    bc:b3:61:05:62:41:bf:26:af:b2:9a:5b:14:8a:b4:
                    2f:e9:ab:09:a1:86:1e:50:4c:8e:e5:e3:0c:d1:ca:
                    6d:0a:70:a4:28:3a:b0:91:e8:43:61:2b:f4:4b:c7:
                    ed:fe:e4:d1:de:60:6b:1b:c9:14:33:63:31:bb:f3:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:9C:FB:BC:81:C3:83:42:D1:85:F4:65:98:6B:A0:2C:14:62:D4
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:40:90:7a:f2:99:fe:a7:8e:78:4a:5e:70:44:01:56:1f:
         4d:a3:e7:e1:15:a4:35:70:24:c2:6b:77:b1:e8:e6:68:80:80:
         4c:11:11:18:06:1b:1b:d0:07:01:e1:eb:29:a9:50:69:03:77:
         78:11:8b:dd:3a:77:31:de:4a:3e:a0:50:af:60:16:32:23:05:
         7e:d7:62:32:96:77:fc:48:16:63:4d:3e:8c:56:67:c6:73:74:
         11:1a:37:49:05:e4:f4:b3:54:ca:e9:3a:3e:52:2c:1f:53:13:
         45:10:57:96:b1:63:8b:aa:50:27:2f:11:07:73:e6:38:6f:1c:
         38:9e:a5:c2:66:b4:80:5e:8f:06:b6:22:0d:7b:9e:ab:95:7f:
         8b:0d:44:42:cb:72:cc:e5:b1:4b:ff:af:51:c5:e6:b0:c8:d9:
         7c:79:a6:5c:bf:12:1a:e8:0d:f4:11:7e:cf:07:b4:5f:5b:49:
         60:2b:70:fd:e7:90:45:2d:49:95:9e:60:d0:2b:f3:b5:d4:84:
         ec:ea:19:e4:40:26:52:a5:0b:b9:ca:02:32:a4:91:82:cf:25:
         42:e4:a1:bd:0b:0e:fa:33:2b:e7:91:ef:23:9d:91:e0:14:9e:
         d2:c8:0f:c9:8d:37:dd:da:ae:82:da:7b:f3:15:97:24:90:fa:
         8b:04:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:08 2026 by rpki-client