Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
File: AS38060.roa (raw, json)
Hash identifier: CJzGjny6tGFnurwN7Wm4O9T4RPEgR9S1kqWDTurDzJc=
Subject key identifier: 78:BA:1E:80:1B:D6:43:AB:C7:38:77:81:44:5F:8B:0F:1D:40:E2:0C
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 330DF90097ED209F6E773CFE3EC8B59B5F169475
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
Signing time: Tue 22 Sep 2026 07:11:49 +0000
ROA not before: Tue 22 Sep 2026 07:06:49 +0000
ROA not after: Tue 21 Sep 2027 07:11:49 +0000
asID: 38060
IP address blocks: 112.78.132.0/24 maxlen: 24
112.78.134.0/24 maxlen: 24
112.78.140.0/24 maxlen: 24
112.78.142.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.150.0/24 maxlen: 24
112.78.151.0/24 maxlen: 24
112.78.153.0/24 maxlen: 24
112.78.173.0/24 maxlen: 24
112.78.177.0/24 maxlen: 24
112.78.178.0/24 maxlen: 24
112.78.191.0/24 maxlen: 24
117.102.66.0/24 maxlen: 24
117.102.72.0/24 maxlen: 24
117.102.75.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.81.0/24 maxlen: 24
117.102.97.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
118.99.67.0/24 maxlen: 24
118.99.72.0/24 maxlen: 24
118.99.107.0/24 maxlen: 24
118.99.109.0/24 maxlen: 24
118.99.110.0/24 maxlen: 24
118.99.112.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
118.99.123.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.13.0/24 maxlen: 24
182.253.14.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.36.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.42.0/24 maxlen: 24
182.253.44.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.61.0/24 maxlen: 24
182.253.62.0/24 maxlen: 24
182.253.87.0/24 maxlen: 24
182.253.98.0/24 maxlen: 24
182.253.106.0/24 maxlen: 24
182.253.116.0/24 maxlen: 24
182.253.122.0/24 maxlen: 24
182.253.123.0/24 maxlen: 24
182.253.124.0/24 maxlen: 24
182.253.127.0/24 maxlen: 24
182.253.131.0/24 maxlen: 24
182.253.133.0/24 maxlen: 24
182.253.137.0/24 maxlen: 24
182.253.139.0/24 maxlen: 24
182.253.151.0/24 maxlen: 24
182.253.176.0/22 maxlen: 22
182.253.185.0/24 maxlen: 24
182.253.186.0/24 maxlen: 24
182.253.192.0/24 maxlen: 24
182.253.194.0/24 maxlen: 24
182.253.203.0/24 maxlen: 24
182.253.215.0/24 maxlen: 24
182.253.217.0/24 maxlen: 24
182.253.228.0/24 maxlen: 24
182.253.242.0/24 maxlen: 24
182.253.243.0/24 maxlen: 24
182.253.244.0/24 maxlen: 24
182.253.245.0/24 maxlen: 24
182.253.250.0/24 maxlen: 24
182.253.251.0/24 maxlen: 24
202.169.37.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
203.142.72.0/24 maxlen: 24
203.142.74.0/24 maxlen: 24
203.142.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0d:f9:00:97:ed:20:9f:6e:77:3c:fe:3e:c8:b5:9b:5f:16:94:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: Sep 22 07:06:49 2026 GMT
Not After : Sep 21 07:11:49 2027 GMT
Subject: CN=78BA1E801BD643ABC7387781445F8B0F1D40E20C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:f4:ba:50:b6:d4:e2:3a:ad:0f:fa:45:6e:
70:34:17:87:40:e1:77:49:71:4b:f1:ff:4d:94:3e:
c8:51:2c:56:ed:9c:93:a1:cf:57:62:ae:99:2d:5f:
71:f8:aa:d0:b9:55:08:84:9a:30:b1:a9:69:95:2f:
eb:f4:e6:f8:02:68:98:a8:f4:82:79:05:a8:eb:3a:
6b:84:e3:26:c4:c1:f9:46:6c:0d:4b:7e:5d:3e:71:
28:cd:d2:41:78:09:89:79:35:42:be:75:f8:1b:8d:
38:77:b2:5c:5e:46:29:7c:5c:9c:72:5c:a5:cd:78:
27:32:ff:f0:d0:21:c4:60:6e:52:9a:ad:da:d6:3c:
90:3c:f0:98:40:b7:7b:3e:79:a4:69:08:c4:87:60:
93:0b:fb:cd:e8:ab:62:aa:f4:c3:52:32:f8:79:e2:
34:37:5b:4b:37:4c:9a:89:44:f7:05:d3:a1:59:2a:
ae:c1:f6:b5:f8:61:21:14:52:e1:cf:d4:78:f2:b5:
97:ab:42:28:fa:df:c4:a3:5c:fd:e1:0a:5a:00:b5:
c9:7c:2a:a6:eb:f7:bf:94:46:c8:c2:d6:1b:73:cf:
c7:f8:3a:52:9b:ab:84:aa:1e:bc:dd:23:b6:f8:44:
25:37:45:a0:bd:51:b0:a1:f8:a0:77:f3:63:a1:c0:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:1E:80:1B:D6:43:AB:C7:38:77:81:44:5F:8B:0F:1D:40:E2:0C
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.132.0/24
112.78.134.0/24
112.78.140.0/24
112.78.142.0/24
112.78.144.0/24
112.78.150.0/23
112.78.153.0/24
112.78.173.0/24
112.78.177.0-112.78.178.255
112.78.191.0/24
117.102.66.0/24
117.102.72.0/24
117.102.75.0/24
117.102.79.0/24
117.102.81.0/24
117.102.97.0/24
117.102.102.0/24
117.102.120.0/24
118.99.67.0/24
118.99.72.0/24
118.99.107.0/24
118.99.109.0-118.99.110.255
118.99.112.0/24
118.99.116.0/24
118.99.123.0/24
182.253.6.0/24
182.253.13.0-182.253.14.255
182.253.23.0/24
182.253.36.0/24
182.253.40.0/24
182.253.42.0/24
182.253.44.0/23
182.253.61.0-182.253.62.255
182.253.87.0/24
182.253.98.0/24
182.253.106.0/24
182.253.116.0/24
182.253.122.0-182.253.124.255
182.253.127.0/24
182.253.131.0/24
182.253.133.0/24
182.253.137.0/24
182.253.139.0/24
182.253.151.0/24
182.253.176.0/22
182.253.185.0-182.253.186.255
182.253.192.0/24
182.253.194.0/24
182.253.203.0/24
182.253.215.0/24
182.253.217.0/24
182.253.228.0/24
182.253.242.0-182.253.245.255
182.253.250.0/23
202.169.37.0-202.169.38.255
202.169.46.0/24
202.169.56.0/24
203.142.72.0/24
203.142.74.0/24
203.142.76.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4a:0f:35:01:54:cd:fc:9f:62:f2:97:06:28:b1:47:9c:9e:
06:24:f1:d3:23:71:29:54:a7:cb:07:e5:a0:94:85:b8:4a:e8:
4e:3b:f2:0f:09:12:d3:27:6d:54:50:d2:c9:d5:a4:36:c5:f2:
6c:7e:59:94:b7:82:e5:56:52:f6:59:57:d0:bf:66:31:aa:34:
05:0e:88:12:90:ef:f5:c0:fd:21:70:7b:fd:58:2e:a2:d9:99:
a5:76:b7:51:7c:b9:f0:9f:14:6c:48:30:50:61:11:15:d2:e1:
55:a5:7f:e2:47:e0:95:b2:69:83:9f:07:0c:a5:3f:48:ec:e7:
86:c8:f0:f1:36:02:17:66:7a:bd:86:38:b0:bf:0d:e4:44:01:
ec:c8:ba:eb:52:cf:1e:7f:4a:2b:ca:54:32:45:10:2d:64:24:
08:84:6d:3f:e8:1d:e3:81:d9:30:5a:89:a6:55:60:44:61:5a:
21:68:6e:ce:3a:5f:0d:44:1e:11:d0:7d:52:9e:e8:df:5c:f1:
42:20:2e:a8:3a:8c:27:6c:36:a5:11:55:7b:7f:99:7b:62:b8:
e4:e3:dc:3b:38:1f:02:aa:a5:55:68:8c:aa:6b:0d:80:f7:b6:
0a:a0:1e:4d:a2:55:1b:fa:4f:a4:c1:34:0c:43:87:78:54:d6:
fd:7d:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:09:47 2026 by rpki-client