Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
File: AS38060.roa (raw, json)
Hash identifier: M+GTXi9tKC0LIsihgoMGH2eDUVI1qG0W0AR5Nr1Mi/k=
Subject key identifier: BD:B7:2D:C9:A0:87:B7:0B:5C:1B:33:7D:78:44:37:4B:48:26:37:4A
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 4971472FA9259A5FFA0F5DDFFEFF825BAC38FA55
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
Signing time: Mon 30 Jun 2025 04:08:28 +0000
ROA not before: Mon 30 Jun 2025 04:03:28 +0000
ROA not after: Mon 29 Jun 2026 04:08:28 +0000
asID: 38060
IP address blocks: 112.78.132.0/24 maxlen: 24
112.78.134.0/24 maxlen: 24
112.78.142.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.150.0/24 maxlen: 24
112.78.151.0/24 maxlen: 24
112.78.153.0/24 maxlen: 24
112.78.178.0/24 maxlen: 24
112.78.191.0/24 maxlen: 24
117.102.66.0/24 maxlen: 24
117.102.72.0/24 maxlen: 24
117.102.75.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.81.0/24 maxlen: 24
117.102.97.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
118.99.67.0/24 maxlen: 24
118.99.72.0/24 maxlen: 24
118.99.107.0/24 maxlen: 24
118.99.109.0/24 maxlen: 24
118.99.110.0/24 maxlen: 24
118.99.112.0/24 maxlen: 24
118.99.123.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.14.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.33.0/24 maxlen: 24
182.253.36.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.42.0/24 maxlen: 24
182.253.44.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.62.0/24 maxlen: 24
182.253.87.0/24 maxlen: 24
182.253.98.0/24 maxlen: 24
182.253.106.0/24 maxlen: 24
182.253.116.0/24 maxlen: 24
182.253.122.0/24 maxlen: 24
182.253.123.0/24 maxlen: 24
182.253.124.0/24 maxlen: 24
182.253.127.0/24 maxlen: 24
182.253.131.0/24 maxlen: 24
182.253.133.0/24 maxlen: 24
182.253.137.0/24 maxlen: 24
182.253.139.0/24 maxlen: 24
182.253.151.0/24 maxlen: 24
182.253.185.0/24 maxlen: 24
182.253.186.0/24 maxlen: 24
182.253.192.0/24 maxlen: 24
182.253.194.0/24 maxlen: 24
182.253.203.0/24 maxlen: 24
182.253.215.0/24 maxlen: 24
182.253.217.0/24 maxlen: 24
182.253.228.0/24 maxlen: 24
182.253.242.0/24 maxlen: 24
182.253.243.0/24 maxlen: 24
182.253.244.0/24 maxlen: 24
182.253.245.0/24 maxlen: 24
182.253.250.0/24 maxlen: 24
182.253.251.0/24 maxlen: 24
202.169.37.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
203.142.74.0/24 maxlen: 24
203.142.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 08:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:71:47:2f:a9:25:9a:5f:fa:0f:5d:df:fe:ff:82:5b:ac:38:fa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Jun 30 04:03:28 2025 GMT
Not After : Jun 29 04:08:28 2026 GMT
Subject: CN=BDB72DC9A087B70B5C1B337D7844374B4826374A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:d8:02:b0:2a:aa:b8:6b:08:b6:92:63:c8:
c6:c1:ab:58:a7:1f:18:c3:7c:97:5a:1a:aa:29:e6:
64:8c:09:25:d7:ed:b8:29:de:50:68:22:0f:11:1e:
e2:83:e4:c0:6b:1e:bb:56:45:2c:b7:8e:06:54:bc:
56:3c:6d:30:41:20:91:a8:24:9c:22:96:2e:35:9a:
13:3c:dd:eb:61:06:0d:08:da:72:d3:8b:79:2b:9d:
74:d4:a8:22:0b:72:73:31:aa:c7:f7:39:37:8a:8b:
ee:8e:2d:f9:be:13:03:62:a5:7a:ea:50:c2:16:57:
5d:43:6f:b1:d3:0e:70:df:81:b9:60:a0:63:16:1e:
60:48:09:3b:6a:32:38:f0:a8:28:b7:cb:51:2a:d3:
b0:b1:9b:1e:91:fa:59:c3:fc:6d:0c:82:bb:e1:4e:
42:5f:72:ba:10:07:2a:85:4d:7a:b8:c3:b5:f3:c7:
02:e2:14:38:5b:7c:6d:2f:9b:1e:8a:27:86:fc:35:
1f:57:dc:0a:ab:8c:08:4f:63:36:5a:cc:e8:44:84:
5a:ad:04:29:3a:01:76:e6:6a:ee:04:fd:25:03:37:
8a:69:3a:bc:0e:89:64:61:b0:01:89:d0:1b:2a:92:
d6:27:7f:1f:c7:8a:19:1e:16:3e:ae:76:51:30:67:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:2D:C9:A0:87:B7:0B:5C:1B:33:7D:78:44:37:4B:48:26:37:4A
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.132.0/24
112.78.134.0/24
112.78.142.0/24
112.78.144.0/24
112.78.150.0/23
112.78.153.0/24
112.78.178.0/24
112.78.191.0/24
117.102.66.0/24
117.102.72.0/24
117.102.75.0/24
117.102.79.0/24
117.102.81.0/24
117.102.97.0/24
117.102.120.0/24
118.99.67.0/24
118.99.72.0/24
118.99.107.0/24
118.99.109.0-118.99.110.255
118.99.112.0/24
118.99.123.0/24
182.253.6.0/24
182.253.14.0/24
182.253.23.0/24
182.253.33.0/24
182.253.36.0/24
182.253.40.0/24
182.253.42.0/24
182.253.44.0/23
182.253.62.0/24
182.253.87.0/24
182.253.98.0/24
182.253.106.0/24
182.253.116.0/24
182.253.122.0-182.253.124.255
182.253.127.0/24
182.253.131.0/24
182.253.133.0/24
182.253.137.0/24
182.253.139.0/24
182.253.151.0/24
182.253.185.0-182.253.186.255
182.253.192.0/24
182.253.194.0/24
182.253.203.0/24
182.253.215.0/24
182.253.217.0/24
182.253.228.0/24
182.253.242.0-182.253.245.255
182.253.250.0/23
202.169.37.0-202.169.38.255
202.169.46.0/24
202.169.56.0/24
203.142.74.0/24
203.142.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ee:e7:6f:37:c7:be:45:69:8b:8b:26:0c:5d:17:15:7c:8e:
7e:a0:37:ef:e4:1b:5f:29:be:ba:7c:a1:1b:b1:f7:ad:e5:77:
3a:92:5f:ad:15:eb:50:cc:9e:ae:fd:4b:54:d9:16:ea:00:67:
eb:da:a0:de:ac:8d:4d:f3:e2:f3:39:28:f1:d8:60:e2:b9:d6:
2a:fa:50:0c:24:28:ec:43:62:3b:5b:59:5a:36:11:c6:3c:6c:
e2:ca:6b:96:aa:62:0e:86:9c:7d:0e:3a:13:4b:92:86:8b:44:
0f:6c:78:6a:1e:79:0d:fb:37:25:c1:ba:90:52:a4:9d:5c:a0:
5e:29:db:45:c0:c0:3b:d1:fb:21:91:5b:c7:a3:7f:7f:44:ca:
95:a0:8b:f4:41:36:0f:8d:75:da:cf:5e:03:36:a7:6e:8b:23:
32:51:ac:b2:5a:cf:94:fd:a2:cf:56:ab:83:9f:a8:0e:77:26:
c2:4d:4e:26:02:af:52:96:55:c2:a1:e3:5d:00:f7:e5:1a:f8:
bd:59:d1:cc:93:f8:76:93:7f:9a:22:c1:dd:c1:a0:5c:3c:89:
01:18:3c:19:ec:80:d9:0c:18:a0:75:86:3d:03:9a:15:a9:20:
42:7a:74:f4:11:2d:98:1a:d3:28:9d:84:92:74:27:14:bf:4a:
74:39:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:02:29 2025 by rpki-client