Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
File: AS38511.roa (raw, json)
Hash identifier: CIv/i7xPYbJ0vBSE+S0q40zqNWuAE/NaWTjEBBuHqEE=
Subject key identifier: 61:41:C8:F2:BA:16:8A:75:7B:05:31:BC:CC:22:20:BE:72:B2:42:20
Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial: 14B2ADA0D46B008EA08020F126534402AC98ABE6
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
Signing time: Fri 29 Aug 2025 19:00:36 +0000
ROA not before: Fri 29 Aug 2025 18:55:36 +0000
ROA not after: Fri 28 Aug 2026 19:00:36 +0000
asID: 38511
IP address blocks: 45.251.4.0/22 maxlen: 24
101.255.0.0/16 maxlen: 16
101.255.0.0/16 maxlen: 24
101.255.0.0/17 maxlen: 17
101.255.0.0/18 maxlen: 18
101.255.0.0/22 maxlen: 22
101.255.0.0/24 maxlen: 24
101.255.1.0/24 maxlen: 24
101.255.2.0/24 maxlen: 24
101.255.3.0/24 maxlen: 24
101.255.4.0/24 maxlen: 24
101.255.5.0/24 maxlen: 24
101.255.6.0/24 maxlen: 24
101.255.7.0/24 maxlen: 24
101.255.8.0/24 maxlen: 24
101.255.9.0/24 maxlen: 24
101.255.10.0/24 maxlen: 24
101.255.11.0/24 maxlen: 24
101.255.12.0/24 maxlen: 24
101.255.13.0/24 maxlen: 24
101.255.14.0/24 maxlen: 24
101.255.15.0/24 maxlen: 24
101.255.16.0/24 maxlen: 24
101.255.17.0/24 maxlen: 24
101.255.18.0/24 maxlen: 24
101.255.19.0/24 maxlen: 24
101.255.20.0/24 maxlen: 24
101.255.21.0/24 maxlen: 24
101.255.22.0/24 maxlen: 24
101.255.25.0/24 maxlen: 24
101.255.26.0/24 maxlen: 24
101.255.27.0/24 maxlen: 24
101.255.28.0/24 maxlen: 24
101.255.29.0/24 maxlen: 24
101.255.30.0/24 maxlen: 24
101.255.31.0/24 maxlen: 24
101.255.32.0/24 maxlen: 24
101.255.33.0/24 maxlen: 24
101.255.34.0/24 maxlen: 24
101.255.35.0/24 maxlen: 24
101.255.36.0/24 maxlen: 24
101.255.37.0/24 maxlen: 24
101.255.64.0/18 maxlen: 18
101.255.96.0/20 maxlen: 20
101.255.99.0/24 maxlen: 24
101.255.100.0/22 maxlen: 22
101.255.100.0/23 maxlen: 23
101.255.124.0/24 maxlen: 24
101.255.128.0/20 maxlen: 20
101.255.144.0/20 maxlen: 20
101.255.156.0/22 maxlen: 22
101.255.160.0/21 maxlen: 21
101.255.164.0/22 maxlen: 22
101.255.173.0/24 maxlen: 24
101.255.176.0/22 maxlen: 22
103.15.172.0/22 maxlen: 24
103.15.173.0/24 maxlen: 24
103.15.174.0/24 maxlen: 24
103.15.175.0/24 maxlen: 24
115.124.64.0/19 maxlen: 24
115.124.64.0/22 maxlen: 22
115.124.64.0/24 maxlen: 24
115.124.65.0/24 maxlen: 24
115.124.66.0/24 maxlen: 24
115.124.67.0/24 maxlen: 24
115.124.68.0/23 maxlen: 23
115.124.68.0/24 maxlen: 24
115.124.69.0/24 maxlen: 24
115.124.72.0/21 maxlen: 21
115.124.72.0/24 maxlen: 24
115.124.73.0/24 maxlen: 24
115.124.74.0/24 maxlen: 24
115.124.75.0/24 maxlen: 24
115.124.76.0/24 maxlen: 24
115.124.77.0/24 maxlen: 24
115.124.78.0/24 maxlen: 24
115.124.79.0/24 maxlen: 24
115.124.80.0/22 maxlen: 22
115.124.80.0/24 maxlen: 24
115.124.81.0/24 maxlen: 24
115.124.82.0/24 maxlen: 24
115.124.83.0/24 maxlen: 24
115.124.84.0/23 maxlen: 23
115.124.84.0/24 maxlen: 24
115.124.85.0/24 maxlen: 24
115.124.86.0/23 maxlen: 23
115.124.86.0/24 maxlen: 24
115.124.87.0/24 maxlen: 24
115.124.88.0/21 maxlen: 21
115.124.88.0/24 maxlen: 24
115.124.89.0/24 maxlen: 24
115.124.90.0/24 maxlen: 24
115.124.91.0/24 maxlen: 24
115.124.92.0/24 maxlen: 24
115.124.94.0/24 maxlen: 24
115.124.95.0/24 maxlen: 24
202.182.48.0/21 maxlen: 24
2404:cf00::/32 maxlen: 48
2404:cf00:efa::/48 maxlen: 48
2404:cf00:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Oct 2025 19:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b2:ad:a0:d4:6b:00:8e:a0:80:20:f1:26:53:44:02:ac:98:ab:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Validity
Not Before: Aug 29 18:55:36 2025 GMT
Not After : Aug 28 19:00:36 2026 GMT
Subject: CN=6141C8F2BA168A757B0531BCCC2220BE72B24220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:15:06:5c:10:9b:66:78:b2:99:4a:1d:28:
b8:6e:6c:11:34:40:8f:51:9f:64:c5:ef:1f:7f:28:
9c:d5:8f:b6:92:09:09:73:ff:2c:aa:55:3f:98:21:
c0:73:18:db:78:05:b6:b6:11:52:6e:fe:fa:b6:64:
d4:8d:b3:d4:c7:98:c1:47:78:36:d2:38:6a:a4:ab:
36:c6:60:79:b0:62:0c:55:7d:8f:58:9a:1a:fb:21:
83:f8:bc:d5:08:08:12:03:f8:9d:db:bb:59:e4:56:
e5:fd:3f:1a:ef:36:24:44:fc:86:31:51:81:6a:87:
71:d5:b3:07:40:79:ce:a8:09:88:e8:dd:2d:f9:48:
c0:a7:23:79:c1:65:d9:ad:83:6f:cf:c6:94:66:52:
2e:3d:28:0e:57:73:0a:a7:76:3b:ee:2f:af:85:31:
00:6c:79:46:cc:3b:e0:90:d1:04:92:83:e4:88:43:
32:f5:54:63:40:8d:e9:5c:e6:b6:13:b1:ac:81:1e:
50:8a:46:e4:c7:ed:51:d9:9d:0b:92:6f:73:d5:a5:
8c:1d:82:a3:e6:65:a1:45:14:9f:1b:31:f1:fd:e3:
c4:a4:59:3c:99:f6:3c:5d:17:da:0f:97:cc:93:2a:
18:f9:e2:64:28:c5:21:0f:ae:30:74:63:7e:66:ea:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:41:C8:F2:BA:16:8A:75:7B:05:31:BC:CC:22:20:BE:72:B2:42:20
X509v3 Authority Key Identifier:
keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.4.0/22
101.255.0.0/16
103.15.172.0/22
115.124.64.0/19
202.182.48.0/21
IPv6:
2404:cf00::/32
Signature Algorithm: sha256WithRSAEncryption
2f:71:ba:9b:ef:b7:b2:9f:dc:ea:45:9d:52:65:e4:18:71:4e:
fc:3d:be:de:f8:42:6d:8c:7e:bc:87:7b:51:5d:01:2f:ee:20:
24:85:d0:1c:5a:ef:47:78:4d:d7:6e:07:cf:48:e6:9b:96:b7:
50:79:1a:09:71:00:7a:56:af:06:64:75:ac:0c:30:18:b5:e4:
f6:c6:58:d1:a7:b3:5d:22:ab:4c:fc:47:be:71:37:c9:ae:42:
d2:f2:73:ef:b0:47:26:9b:0d:1e:ea:7c:09:6e:d7:67:e1:b3:
f5:4d:c2:25:58:af:6f:dd:ee:f0:c2:47:43:a0:c6:8f:5b:6c:
3d:2c:32:31:ef:af:3c:0f:ff:8a:c6:4b:f1:c4:38:68:31:d6:
70:f9:38:ad:d3:61:d9:da:81:f2:8c:03:10:5a:a5:5f:b1:07:
63:60:2a:63:51:b8:a3:8d:ac:d8:7c:69:f9:49:0a:91:e4:52:
3d:26:59:c8:7e:f4:a8:a0:02:0f:11:95:e8:10:f0:5e:1e:29:
a8:fe:ef:b7:92:59:bf:7e:2c:53:10:8f:20:32:fd:34:24:ad:
d0:9f:f4:fe:23:23:72:6d:b3:da:ed:50:eb:da:44:1d:93:da:
b2:b7:54:31:66:7b:8d:32:ec:83:53:b5:ae:42:07:b6:b8:e8:
79:b1:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:29:35 2025 by rpki-client