Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
File: AS38511.roa (raw, json)
Hash identifier: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=
Subject key identifier: 2F:0C:93:B8:FD:35:34:D4:59:19:9D:C2:A4:87:9A:05:5D:95:63:A1
Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88
Certificate serial: 40843D6BA3B6453EC8F7BA86041410F32E0BC986
Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
Signing time: Sun 03 May 2026 02:48:58 +0000
ROA not before: Sun 03 May 2026 02:43:58 +0000
ROA not after: Sun 02 May 2027 02:48:58 +0000
asID: 38511
IP address blocks: 45.251.4.0/22 maxlen: 24
101.255.0.0/16 maxlen: 16
101.255.0.0/16 maxlen: 24
101.255.0.0/17 maxlen: 17
101.255.0.0/18 maxlen: 18
101.255.0.0/22 maxlen: 22
101.255.0.0/24 maxlen: 24
101.255.1.0/24 maxlen: 24
101.255.2.0/24 maxlen: 24
101.255.3.0/24 maxlen: 24
101.255.4.0/24 maxlen: 24
101.255.5.0/24 maxlen: 24
101.255.6.0/24 maxlen: 24
101.255.7.0/24 maxlen: 24
101.255.8.0/24 maxlen: 24
101.255.9.0/24 maxlen: 24
101.255.10.0/24 maxlen: 24
101.255.11.0/24 maxlen: 24
101.255.12.0/24 maxlen: 24
101.255.13.0/24 maxlen: 24
101.255.14.0/24 maxlen: 24
101.255.15.0/24 maxlen: 24
101.255.16.0/24 maxlen: 24
101.255.17.0/24 maxlen: 24
101.255.18.0/24 maxlen: 24
101.255.19.0/24 maxlen: 24
101.255.20.0/24 maxlen: 24
101.255.21.0/24 maxlen: 24
101.255.22.0/24 maxlen: 24
101.255.25.0/24 maxlen: 24
101.255.26.0/24 maxlen: 24
101.255.27.0/24 maxlen: 24
101.255.28.0/24 maxlen: 24
101.255.29.0/24 maxlen: 24
101.255.30.0/24 maxlen: 24
101.255.31.0/24 maxlen: 24
101.255.32.0/24 maxlen: 24
101.255.33.0/24 maxlen: 24
101.255.34.0/24 maxlen: 24
101.255.35.0/24 maxlen: 24
101.255.36.0/24 maxlen: 24
101.255.37.0/24 maxlen: 24
101.255.64.0/18 maxlen: 18
101.255.96.0/20 maxlen: 20
101.255.99.0/24 maxlen: 24
101.255.100.0/22 maxlen: 22
101.255.100.0/23 maxlen: 23
101.255.124.0/24 maxlen: 24
101.255.128.0/20 maxlen: 20
101.255.144.0/20 maxlen: 20
101.255.156.0/22 maxlen: 22
101.255.160.0/21 maxlen: 21
101.255.164.0/22 maxlen: 22
101.255.173.0/24 maxlen: 24
101.255.176.0/22 maxlen: 22
103.15.172.0/22 maxlen: 24
103.15.173.0/24 maxlen: 24
103.15.174.0/24 maxlen: 24
103.15.175.0/24 maxlen: 24
115.124.64.0/19 maxlen: 24
115.124.64.0/22 maxlen: 22
115.124.64.0/24 maxlen: 24
115.124.65.0/24 maxlen: 24
115.124.66.0/24 maxlen: 24
115.124.67.0/24 maxlen: 24
115.124.68.0/23 maxlen: 23
115.124.68.0/24 maxlen: 24
115.124.69.0/24 maxlen: 24
115.124.72.0/21 maxlen: 21
115.124.72.0/24 maxlen: 24
115.124.73.0/24 maxlen: 24
115.124.74.0/24 maxlen: 24
115.124.75.0/24 maxlen: 24
115.124.76.0/24 maxlen: 24
115.124.77.0/24 maxlen: 24
115.124.78.0/24 maxlen: 24
115.124.79.0/24 maxlen: 24
115.124.80.0/22 maxlen: 22
115.124.80.0/24 maxlen: 24
115.124.81.0/24 maxlen: 24
115.124.82.0/24 maxlen: 24
115.124.83.0/24 maxlen: 24
115.124.84.0/23 maxlen: 23
115.124.84.0/24 maxlen: 24
115.124.85.0/24 maxlen: 24
115.124.86.0/23 maxlen: 23
115.124.86.0/24 maxlen: 24
115.124.87.0/24 maxlen: 24
115.124.88.0/21 maxlen: 21
115.124.88.0/24 maxlen: 24
115.124.89.0/24 maxlen: 24
115.124.90.0/24 maxlen: 24
115.124.91.0/24 maxlen: 24
115.124.92.0/24 maxlen: 24
115.124.94.0/24 maxlen: 24
115.124.95.0/24 maxlen: 24
202.182.48.0/21 maxlen: 24
2404:cf00::/32 maxlen: 48
2404:cf00:efa::/48 maxlen: 48
2404:cf00:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl
rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:84:3d:6b:a3:b6:45:3e:c8:f7:ba:86:04:14:10:f3:2e:0b:c9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88
Validity
Not Before: May 3 02:43:58 2026 GMT
Not After : May 2 02:48:58 2027 GMT
Subject: CN=2F0C93B8FD3534D459199DC2A4879A055D9563A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:67:6e:73:14:ae:24:4e:a4:3b:aa:1f:35:
c1:a9:61:4f:a8:2f:16:d2:90:61:9c:61:4b:69:a7:
29:b6:a3:c6:87:43:f5:3c:78:0d:56:7f:d5:b9:e6:
21:ae:df:2f:91:fe:08:1e:df:1c:24:3d:6d:79:88:
ec:80:de:3a:18:92:09:02:f6:1a:cd:17:a3:29:b1:
41:b9:c5:e8:3d:3c:98:f1:80:5e:9b:b3:7c:08:ce:
96:79:c4:a1:e9:e8:17:a0:fb:9c:b1:dc:34:cb:1c:
ac:43:06:77:e5:ee:6e:87:94:0c:2b:f4:e8:c7:57:
53:77:e5:bf:f0:67:3e:7c:64:16:a8:1f:a7:82:66:
cf:8d:2b:d7:b7:36:fa:3a:ca:15:b6:3d:01:d7:1e:
fb:44:10:41:53:22:09:9c:fc:eb:b4:76:d7:10:fd:
6d:67:07:1a:dc:6f:bd:8e:fc:0f:09:f2:ed:6c:80:
7f:69:10:93:5a:7d:0f:c3:15:fe:0d:34:cf:ab:b4:
a3:73:52:b6:9e:b4:9f:96:3d:fe:f4:90:38:d8:85:
8f:4b:5b:b2:2e:2a:cf:f5:f7:18:a7:1d:55:75:da:
d5:4f:71:52:a3:12:f6:2a:04:85:91:50:9a:76:ea:
e2:1d:70:bb:27:cb:60:6c:c8:16:4f:bd:f3:06:43:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0C:93:B8:FD:35:34:D4:59:19:9D:C2:A4:87:9A:05:5D:95:63:A1
X509v3 Authority Key Identifier:
keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.4.0/22
101.255.0.0/16
103.15.172.0/22
115.124.64.0/19
202.182.48.0/21
IPv6:
2404:cf00::/32
Signature Algorithm: sha256WithRSAEncryption
2a:f1:89:e4:14:92:33:bb:33:26:65:8b:9e:be:09:4f:3d:25:
fe:67:cb:e5:14:ed:b9:fa:17:be:7c:ca:20:d4:f7:02:82:83:
95:b2:bf:ac:d4:95:ed:8b:68:ec:44:7c:1c:60:1a:13:06:25:
33:06:18:6c:a1:06:73:42:6c:cd:8b:7e:8f:5c:43:41:66:4a:
81:15:9a:db:f5:fb:20:7d:3a:22:61:96:7e:d1:7e:2b:5e:6c:
28:eb:69:66:25:46:a7:22:9d:08:c4:ba:ba:10:08:c1:42:32:
a9:04:80:fe:11:03:88:ff:6b:4f:bc:e1:94:0d:13:d5:e0:7c:
42:7c:55:a7:8c:fe:f2:fa:d9:1b:27:69:46:fa:8f:8e:aa:a7:
ee:76:11:3c:1f:8d:e9:e1:01:cd:40:ca:9b:bc:ad:f7:51:94:
14:d2:c3:99:e0:00:96:61:e5:2e:e8:d6:b8:a2:09:3d:bf:36:
f7:08:e9:8c:dc:3e:b4:b9:ec:72:bc:aa:bd:f7:7c:ab:2c:99:
37:3d:a1:3c:97:cc:2b:ff:97:a8:3c:ec:bb:7c:53:e6:b4:c9:
d4:72:bf:30:5e:d3:3d:5d:ad:98:e4:20:7e:64:08:25:6b:79:
5e:14:5c:2c:2b:5b:32:cc:11:f2:fe:a9:3f:d0:6d:24:7a:70:
42:14:a5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:56 2026 by rpki-client