Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
File: AS38482.roa (raw, json)
Hash identifier: mqOgj/4JaT7AGWmmy0w7CKSJj5WCQYyZUeVO9quFzao=
Subject key identifier: 66:4D:3B:90:9F:D4:B0:90:63:22:42:D8:A3:E1:10:E1:60:E1:1B:CD
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 40E8D5B138A29B4052709867C0A63962D7EF17EF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
Signing time: Thu 26 Jun 2025 01:42:36 +0000
ROA not before: Thu 26 Jun 2025 01:37:36 +0000
ROA not after: Thu 25 Jun 2026 01:42:36 +0000
asID: 38482
IP address blocks: 112.78.135.0/24 maxlen: 24
112.78.136.0/24 maxlen: 24
112.78.137.0/24 maxlen: 24
112.78.139.0/24 maxlen: 24
112.78.141.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.146.0/24 maxlen: 24
112.78.149.0/24 maxlen: 24
112.78.152.0/24 maxlen: 24
112.78.170.0/24 maxlen: 24
112.78.176.0/24 maxlen: 24
112.78.186.0/24 maxlen: 24
112.78.187.0/24 maxlen: 24
117.102.65.0/24 maxlen: 24
117.102.70.0/24 maxlen: 24
117.102.73.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.80.0/24 maxlen: 24
117.102.82.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.84.0/24 maxlen: 24
117.102.85.0/24 maxlen: 24
117.102.86.0/24 maxlen: 24
117.102.88.0/24 maxlen: 24
117.102.90.0/24 maxlen: 24
117.102.92.0/24 maxlen: 24
117.102.94.0/24 maxlen: 24
117.102.95.0/24 maxlen: 24
117.102.98.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.103.0/24 maxlen: 24
117.102.104.0/24 maxlen: 24
117.102.107.0/24 maxlen: 24
117.102.113.0/24 maxlen: 24
117.102.114.0/24 maxlen: 24
117.102.116.0/24 maxlen: 24
117.102.118.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
117.102.122.0/24 maxlen: 24
118.99.74.0/24 maxlen: 24
118.99.85.0/24 maxlen: 24
118.99.86.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
182.253.0.0/24 maxlen: 24
182.253.1.0/24 maxlen: 24
182.253.2.0/24 maxlen: 24
182.253.3.0/24 maxlen: 24
182.253.5.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.11.0/24 maxlen: 24
182.253.15.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.18.0/24 maxlen: 24
182.253.19.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.25.0/24 maxlen: 24
182.253.27.0/24 maxlen: 24
182.253.28.0/24 maxlen: 24
182.253.29.0/24 maxlen: 24
182.253.30.0/24 maxlen: 24
182.253.34.0/24 maxlen: 24
182.253.35.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.41.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.46.0/24 maxlen: 24
182.253.47.0/24 maxlen: 24
182.253.60.0/24 maxlen: 24
182.253.68.0/24 maxlen: 24
182.253.69.0/24 maxlen: 24
182.253.70.0/24 maxlen: 24
182.253.71.0/24 maxlen: 24
182.253.85.0/24 maxlen: 24
182.253.100.0/24 maxlen: 24
182.253.101.0/24 maxlen: 24
182.253.120.0/24 maxlen: 24
182.253.190.0/24 maxlen: 24
182.253.195.0/24 maxlen: 24
182.253.201.0/24 maxlen: 24
182.253.204.0/24 maxlen: 24
182.253.205.0/24 maxlen: 24
182.253.210.0/24 maxlen: 24
182.253.213.0/24 maxlen: 24
182.253.221.0/24 maxlen: 24
182.253.222.0/24 maxlen: 24
182.253.226.0/24 maxlen: 24
182.253.236.0/24 maxlen: 24
182.253.237.0/24 maxlen: 24
182.253.238.0/24 maxlen: 24
182.253.239.0/24 maxlen: 24
182.253.240.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.39.0/24 maxlen: 24
202.169.41.0/24 maxlen: 24
202.169.43.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.49.0/24 maxlen: 24
202.169.51.0/24 maxlen: 24
202.169.52.0/24 maxlen: 24
202.169.54.0/24 maxlen: 24
202.169.55.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
202.169.58.0/24 maxlen: 24
202.169.62.0/24 maxlen: 24
203.142.64.0/24 maxlen: 24
203.142.65.0/24 maxlen: 24
203.142.69.0/24 maxlen: 24
203.142.70.0/24 maxlen: 24
203.142.80.0/24 maxlen: 24
203.142.81.0/24 maxlen: 24
203.142.83.0/24 maxlen: 24
203.142.85.0/24 maxlen: 24
203.142.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 08:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e8:d5:b1:38:a2:9b:40:52:70:98:67:c0:a6:39:62:d7:ef:17:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Jun 26 01:37:36 2025 GMT
Not After : Jun 25 01:42:36 2026 GMT
Subject: CN=664D3B909FD4B090632242D8A3E110E160E11BCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:40:a8:37:a8:c6:a2:f2:56:21:e0:af:5b:
64:0e:ed:72:e0:14:c5:33:36:81:b4:ba:6f:77:c2:
c8:a6:05:55:99:5d:6e:ee:b1:56:35:bb:16:f4:c4:
f5:6e:22:72:8e:24:04:2d:d1:bf:30:9c:02:5f:d8:
86:1b:92:9a:f4:a6:1a:62:f6:68:e1:f0:ac:66:5a:
ed:d7:f4:7a:4d:ad:75:71:a1:be:5e:cd:b6:9f:28:
ed:9e:7c:1c:36:7e:f0:f4:a4:0f:ba:e2:80:55:0d:
3a:7d:af:98:d4:25:d5:e0:9b:ef:40:4c:44:06:d6:
24:72:76:43:cf:4d:b7:51:61:c5:4f:08:72:5f:f0:
91:7e:dd:17:b8:d0:fa:b3:b7:d1:69:0c:e8:a4:3d:
15:6f:f5:e7:64:39:af:e2:61:be:6a:e2:8c:51:d1:
05:5a:f6:f8:a2:6b:bc:3b:77:b9:42:d1:e0:b6:df:
ab:3e:79:6c:ee:b3:41:34:65:67:b7:d0:e1:34:a3:
e8:5e:e6:84:60:21:5f:53:f4:20:b2:c3:48:d4:61:
f9:51:de:e0:77:4a:99:d9:bd:ee:26:fb:fc:52:98:
a4:80:45:a1:2a:25:d5:61:60:2e:cd:a2:f1:8a:e4:
e0:99:ab:75:9c:c9:78:4a:be:f8:7c:cd:c7:ed:64:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4D:3B:90:9F:D4:B0:90:63:22:42:D8:A3:E1:10:E1:60:E1:1B:CD
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.135.0-112.78.137.255
112.78.139.0/24
112.78.141.0/24
112.78.144.0/24
112.78.146.0/24
112.78.149.0/24
112.78.152.0/24
112.78.170.0/24
112.78.176.0/24
112.78.186.0/23
117.102.65.0/24
117.102.70.0/24
117.102.73.0/24
117.102.79.0-117.102.80.255
117.102.82.0-117.102.86.255
117.102.88.0/24
117.102.90.0/24
117.102.92.0/24
117.102.94.0/23
117.102.98.0/24
117.102.101.0-117.102.104.255
117.102.107.0/24
117.102.113.0-117.102.114.255
117.102.116.0/24
117.102.118.0/24
117.102.120.0/24
117.102.122.0/24
118.99.74.0/24
118.99.85.0-118.99.86.255
118.99.116.0/24
182.253.0.0/22
182.253.5.0-182.253.6.255
182.253.11.0/24
182.253.15.0/24
182.253.17.0-182.253.19.255
182.253.23.0/24
182.253.25.0/24
182.253.27.0-182.253.30.255
182.253.34.0/23
182.253.40.0/23
182.253.45.0-182.253.47.255
182.253.60.0/24
182.253.68.0/22
182.253.85.0/24
182.253.100.0/23
182.253.120.0/24
182.253.190.0/24
182.253.195.0/24
182.253.201.0/24
182.253.204.0/23
182.253.210.0/24
182.253.213.0/24
182.253.221.0-182.253.222.255
182.253.226.0/24
182.253.236.0-182.253.240.255
202.169.38.0/23
202.169.41.0/24
202.169.43.0/24
202.169.46.0/24
202.169.49.0/24
202.169.51.0-202.169.52.255
202.169.54.0-202.169.56.255
202.169.58.0/24
202.169.62.0/24
203.142.64.0/23
203.142.69.0-203.142.70.255
203.142.80.0/23
203.142.83.0/24
203.142.85.0-203.142.86.255
Signature Algorithm: sha256WithRSAEncryption
5e:5c:83:e8:7f:d0:6b:f4:4c:ec:b5:0d:d8:26:c4:10:b7:39:
ec:a6:7b:02:c0:04:51:78:d8:77:46:5b:b1:ec:b4:9f:3f:ba:
73:43:88:dd:f1:85:62:27:86:2d:ab:8b:ae:3c:ab:06:a8:4f:
ed:ef:23:97:ef:b5:35:37:26:c6:11:a4:75:92:0b:ad:21:08:
bf:db:1d:45:4e:d0:6a:92:c0:8b:92:e9:1e:e6:00:53:7c:f1:
6b:31:12:cb:08:ad:7d:e9:5e:66:b4:76:97:4d:59:b5:26:f8:
90:dd:21:8c:42:62:d7:2b:e7:d5:6b:30:77:f7:29:6c:29:e3:
4d:a4:39:68:df:55:73:76:69:ac:fe:d7:de:5c:1b:21:39:dd:
91:da:90:09:6f:33:50:ad:e7:06:13:16:d4:5e:5e:3a:5d:08:
71:f4:f6:dd:8e:c7:cf:ab:19:70:8e:25:af:e2:b0:fd:ab:66:
c7:54:c6:9e:05:7c:df:2b:9e:73:db:7c:1b:a8:06:b6:d0:d4:
de:74:d4:35:87:0a:43:67:95:a2:8d:f4:c3:a0:6b:2c:a8:88:
f5:70:88:0c:c1:38:50:76:8c:0c:c1:55:99:fa:89:1d:75:03:
cd:0d:09:01:cb:f3:ce:9e:56:d9:9f:35:60:c7:b2:db:8b:8b:
4e:ba:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:06:15 2025 by rpki-client