Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
File: AS38482.roa (raw, json)
Hash identifier: N/OlXz8sd/GVdv+lf2D/n/ORr9Z1KnMPOsIfMP5+Q1E=
Subject key identifier: FB:59:1A:07:E0:B7:1A:75:A4:A0:67:95:86:E6:B7:84:01:B1:A4:6A
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 55BAFB8B53F7664F2684F168D68451FCF30BFCEC
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
Signing time: Thu 17 Sep 2026 23:08:12 +0000
ROA not before: Thu 17 Sep 2026 23:03:12 +0000
ROA not after: Thu 16 Sep 2027 23:08:12 +0000
asID: 38482
IP address blocks: 112.78.134.0/24 maxlen: 24
112.78.135.0/24 maxlen: 24
112.78.136.0/24 maxlen: 24
112.78.137.0/24 maxlen: 24
112.78.139.0/24 maxlen: 24
112.78.140.0/24 maxlen: 24
112.78.141.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.146.0/24 maxlen: 24
112.78.149.0/24 maxlen: 24
112.78.152.0/24 maxlen: 24
112.78.170.0/24 maxlen: 24
112.78.176.0/24 maxlen: 24
112.78.184.0/24 maxlen: 24
112.78.186.0/24 maxlen: 24
112.78.187.0/24 maxlen: 24
117.102.65.0/24 maxlen: 24
117.102.70.0/24 maxlen: 24
117.102.73.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.80.0/24 maxlen: 24
117.102.82.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.84.0/24 maxlen: 24
117.102.85.0/24 maxlen: 24
117.102.86.0/24 maxlen: 24
117.102.88.0/24 maxlen: 24
117.102.90.0/24 maxlen: 24
117.102.92.0/24 maxlen: 24
117.102.94.0/24 maxlen: 24
117.102.95.0/24 maxlen: 24
117.102.98.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.103.0/24 maxlen: 24
117.102.104.0/24 maxlen: 24
117.102.107.0/24 maxlen: 24
117.102.113.0/24 maxlen: 24
117.102.114.0/24 maxlen: 24
117.102.116.0/24 maxlen: 24
117.102.118.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
117.102.122.0/24 maxlen: 24
118.99.74.0/24 maxlen: 24
118.99.85.0/24 maxlen: 24
118.99.86.0/24 maxlen: 24
182.253.0.0/24 maxlen: 24
182.253.1.0/24 maxlen: 24
182.253.2.0/24 maxlen: 24
182.253.3.0/24 maxlen: 24
182.253.5.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.11.0/24 maxlen: 24
182.253.15.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.18.0/24 maxlen: 24
182.253.19.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.25.0/24 maxlen: 24
182.253.27.0/24 maxlen: 24
182.253.28.0/24 maxlen: 24
182.253.29.0/24 maxlen: 24
182.253.30.0/24 maxlen: 24
182.253.33.0/24 maxlen: 24
182.253.34.0/24 maxlen: 24
182.253.35.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.41.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.46.0/24 maxlen: 24
182.253.47.0/24 maxlen: 24
182.253.60.0/24 maxlen: 24
182.253.68.0/24 maxlen: 24
182.253.69.0/24 maxlen: 24
182.253.70.0/24 maxlen: 24
182.253.71.0/24 maxlen: 24
182.253.85.0/24 maxlen: 24
182.253.100.0/24 maxlen: 24
182.253.101.0/24 maxlen: 24
182.253.120.0/24 maxlen: 24
182.253.190.0/24 maxlen: 24
182.253.195.0/24 maxlen: 24
182.253.201.0/24 maxlen: 24
182.253.204.0/24 maxlen: 24
182.253.205.0/24 maxlen: 24
182.253.206.0/24 maxlen: 24
182.253.210.0/24 maxlen: 24
182.253.213.0/24 maxlen: 24
182.253.221.0/24 maxlen: 24
182.253.222.0/24 maxlen: 24
182.253.225.0/24 maxlen: 24
182.253.226.0/24 maxlen: 24
182.253.236.0/24 maxlen: 24
182.253.237.0/24 maxlen: 24
182.253.238.0/24 maxlen: 24
182.253.239.0/24 maxlen: 24
182.253.240.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.39.0/24 maxlen: 24
202.169.41.0/24 maxlen: 24
202.169.43.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.49.0/24 maxlen: 24
202.169.51.0/24 maxlen: 24
202.169.52.0/24 maxlen: 24
202.169.54.0/24 maxlen: 24
202.169.55.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
202.169.58.0/24 maxlen: 24
202.169.62.0/24 maxlen: 24
203.142.64.0/24 maxlen: 24
203.142.65.0/24 maxlen: 24
203.142.69.0/24 maxlen: 24
203.142.70.0/24 maxlen: 24
203.142.80.0/24 maxlen: 24
203.142.81.0/24 maxlen: 24
203.142.83.0/24 maxlen: 24
203.142.85.0/24 maxlen: 24
203.142.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ba:fb:8b:53:f7:66:4f:26:84:f1:68:d6:84:51:fc:f3:0b:fc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: Sep 17 23:03:12 2026 GMT
Not After : Sep 16 23:08:12 2027 GMT
Subject: CN=FB591A07E0B71A75A4A0679586E6B78401B1A46A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:9f:74:7c:b9:63:5f:5f:5d:fc:cd:7a:cd:
32:ad:19:20:42:0e:6b:0e:8c:29:1d:33:a9:13:3c:
ea:d4:18:65:2e:94:ec:5f:66:ff:02:62:1c:91:77:
14:44:0a:e3:bf:97:3c:68:f2:d4:ef:58:71:bd:31:
5a:31:2d:7f:7c:e3:bc:51:fc:1c:c9:76:33:5f:8e:
a6:f7:61:96:b0:de:3b:b7:1c:c9:be:f5:ba:91:66:
56:48:eb:32:f9:4c:ce:20:dd:f8:62:cc:d1:3a:ad:
3f:66:28:49:25:af:3f:3f:a0:81:a4:d0:f8:44:76:
6a:e8:46:65:08:9b:6b:e0:c2:9b:6a:fa:81:0c:01:
7b:45:4d:4d:7a:f1:db:50:31:df:36:1d:2e:02:97:
3f:39:ef:fc:a4:7b:6a:ea:f9:6a:71:18:3c:49:86:
10:da:e0:fd:05:70:36:33:bb:da:62:49:9c:3e:08:
e9:55:0c:3a:81:16:bb:8d:93:82:14:bc:91:42:a9:
e4:f3:4a:83:52:20:5f:20:f6:06:12:7f:c9:bd:fe:
38:e5:fc:08:04:09:b6:39:ed:ba:3d:2d:90:12:5f:
ba:6b:40:19:3c:b9:55:98:68:3b:14:86:5a:28:8d:
a1:61:7f:12:67:15:9d:e6:b3:db:fd:fb:f4:c8:0b:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:59:1A:07:E0:B7:1A:75:A4:A0:67:95:86:E6:B7:84:01:B1:A4:6A
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.134.0-112.78.137.255
112.78.139.0-112.78.141.255
112.78.144.0/24
112.78.146.0/24
112.78.149.0/24
112.78.152.0/24
112.78.170.0/24
112.78.176.0/24
112.78.184.0/24
112.78.186.0/23
117.102.65.0/24
117.102.70.0/24
117.102.73.0/24
117.102.79.0-117.102.80.255
117.102.82.0-117.102.86.255
117.102.88.0/24
117.102.90.0/24
117.102.92.0/24
117.102.94.0/23
117.102.98.0/24
117.102.101.0-117.102.104.255
117.102.107.0/24
117.102.113.0-117.102.114.255
117.102.116.0/24
117.102.118.0/24
117.102.120.0/24
117.102.122.0/24
118.99.74.0/24
118.99.85.0-118.99.86.255
182.253.0.0/22
182.253.5.0-182.253.6.255
182.253.11.0/24
182.253.15.0/24
182.253.17.0-182.253.19.255
182.253.23.0/24
182.253.25.0/24
182.253.27.0-182.253.30.255
182.253.33.0-182.253.35.255
182.253.40.0/23
182.253.45.0-182.253.47.255
182.253.60.0/24
182.253.68.0/22
182.253.85.0/24
182.253.100.0/23
182.253.120.0/24
182.253.190.0/24
182.253.195.0/24
182.253.201.0/24
182.253.204.0-182.253.206.255
182.253.210.0/24
182.253.213.0/24
182.253.221.0-182.253.222.255
182.253.225.0-182.253.226.255
182.253.236.0-182.253.240.255
202.169.38.0/23
202.169.41.0/24
202.169.43.0/24
202.169.46.0/24
202.169.49.0/24
202.169.51.0-202.169.52.255
202.169.54.0-202.169.56.255
202.169.58.0/24
202.169.62.0/24
203.142.64.0/23
203.142.69.0-203.142.70.255
203.142.80.0/23
203.142.83.0/24
203.142.85.0-203.142.86.255
Signature Algorithm: sha256WithRSAEncryption
9b:4d:5d:8a:1f:76:6c:b6:7e:33:18:d4:0a:08:09:82:60:f5:
78:5b:16:9f:cc:90:e3:d6:b0:1a:4d:43:0d:f0:88:ae:d1:c8:
12:6c:58:a1:91:07:a8:bc:4f:a3:b4:ca:98:84:8d:8c:6f:40:
e8:6f:e4:98:11:a3:c6:5b:7a:d9:0e:c0:d5:8b:2e:b6:41:df:
62:f3:e5:3a:e8:b1:cd:bf:1a:ae:00:b1:86:9c:74:7d:76:54:
7c:05:5f:05:34:5a:0d:8e:c9:10:f5:c4:81:2c:e6:44:cb:aa:
bc:5e:bc:02:b4:ee:da:49:af:30:f7:c9:e6:1a:d0:d1:6d:df:
1c:12:ba:f3:11:c5:81:db:0a:d3:5a:24:66:25:e3:c1:d5:c4:
e1:00:0b:30:a7:66:c9:95:09:6f:ad:7c:82:30:b4:c9:2d:c1:
1b:25:5d:b3:68:fb:15:24:42:a3:93:72:b1:f0:e3:1a:a6:2c:
b0:3f:b7:7d:9d:3f:86:42:90:5e:54:7f:e9:32:08:9d:71:6b:
b0:2d:1d:17:7e:32:db:2d:ff:3d:b9:09:a0:03:11:bb:ee:86:
ab:1d:c3:3b:08:b7:81:a8:d2:0d:ce:bf:04:52:39:84:5c:77:
ec:74:94:5d:03:1d:45:89:31:10:2c:85:73:25:f2:21:37:17:
07:e9:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:00:51 2026 by rpki-client