Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
File: AS38060.roa (raw, json)
Hash identifier: 1IXq4jc1HO5ig714zBEw9ikfHk5alhGdvuka1TRwl+A=
Subject key identifier: E7:93:47:0E:68:0C:86:B0:8B:55:96:A3:18:BB:AB:E4:D0:21:F6:47
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 1424FA78F79791E125C685E91A97886471667CD1
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
Signing time: Mon 09 Feb 2026 05:34:31 +0000
ROA not before: Mon 09 Feb 2026 05:29:31 +0000
ROA not after: Mon 08 Feb 2027 05:34:31 +0000
asID: 38060
IP address blocks: 112.78.132.0/24 maxlen: 24
112.78.134.0/24 maxlen: 24
112.78.142.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.150.0/24 maxlen: 24
112.78.151.0/24 maxlen: 24
112.78.153.0/24 maxlen: 24
112.78.178.0/24 maxlen: 24
112.78.191.0/24 maxlen: 24
117.102.66.0/24 maxlen: 24
117.102.72.0/24 maxlen: 24
117.102.75.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.81.0/24 maxlen: 24
117.102.97.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
118.99.67.0/24 maxlen: 24
118.99.72.0/24 maxlen: 24
118.99.107.0/24 maxlen: 24
118.99.109.0/24 maxlen: 24
118.99.110.0/24 maxlen: 24
118.99.112.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
118.99.123.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.13.0/24 maxlen: 24
182.253.14.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.36.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.42.0/24 maxlen: 24
182.253.44.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.62.0/24 maxlen: 24
182.253.87.0/24 maxlen: 24
182.253.98.0/24 maxlen: 24
182.253.106.0/24 maxlen: 24
182.253.116.0/24 maxlen: 24
182.253.122.0/24 maxlen: 24
182.253.123.0/24 maxlen: 24
182.253.124.0/24 maxlen: 24
182.253.127.0/24 maxlen: 24
182.253.131.0/24 maxlen: 24
182.253.133.0/24 maxlen: 24
182.253.137.0/24 maxlen: 24
182.253.139.0/24 maxlen: 24
182.253.151.0/24 maxlen: 24
182.253.185.0/24 maxlen: 24
182.253.186.0/24 maxlen: 24
182.253.192.0/24 maxlen: 24
182.253.194.0/24 maxlen: 24
182.253.203.0/24 maxlen: 24
182.253.215.0/24 maxlen: 24
182.253.217.0/24 maxlen: 24
182.253.228.0/24 maxlen: 24
182.253.242.0/24 maxlen: 24
182.253.243.0/24 maxlen: 24
182.253.244.0/24 maxlen: 24
182.253.245.0/24 maxlen: 24
182.253.250.0/24 maxlen: 24
182.253.251.0/24 maxlen: 24
202.169.37.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
203.142.74.0/24 maxlen: 24
203.142.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:24:fa:78:f7:97:91:e1:25:c6:85:e9:1a:97:88:64:71:66:7c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Feb 9 05:29:31 2026 GMT
Not After : Feb 8 05:34:31 2027 GMT
Subject: CN=E793470E680C86B08B5596A318BBABE4D021F647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:9b:df:9a:a0:f6:ed:a1:4d:9b:d9:07:74:
ee:ed:54:a0:e5:24:c2:30:0b:f9:0b:0e:b6:af:9e:
d7:7e:26:65:ca:f6:24:48:e9:a2:a1:f3:32:a9:2b:
ad:8d:7b:9a:9c:c8:d8:48:2a:d1:37:71:d7:0b:92:
45:cf:3b:b6:0e:4e:2f:06:df:93:8d:38:d9:5b:47:
b0:b6:22:f5:ec:ab:bf:16:da:76:25:e4:e5:81:78:
5e:25:10:77:18:f4:5a:84:70:10:86:84:2d:86:f7:
c2:c6:22:38:e1:e5:4e:ff:21:46:22:bb:65:d4:c3:
82:dd:fe:4a:7e:8c:97:8e:88:c8:25:0a:8f:d3:ee:
69:81:f2:f8:33:8e:1e:ed:d9:3a:f3:b5:94:9a:39:
9c:a4:63:a8:a6:c8:d1:8e:38:88:59:c3:2b:95:7d:
0e:08:01:a7:1d:17:71:49:37:26:5c:7a:81:63:59:
12:d8:3b:92:ec:d3:8f:61:87:4d:92:55:e8:ff:48:
1f:21:65:ed:ca:47:9f:7c:9b:2b:d5:5f:09:47:a0:
31:be:c5:10:91:de:81:c6:8a:8b:5c:5e:c8:ac:9e:
f4:f1:e6:11:5a:67:e6:77:67:f1:99:40:f0:5f:d8:
94:8f:db:8b:32:12:06:ba:bd:a3:42:c8:15:03:39:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:93:47:0E:68:0C:86:B0:8B:55:96:A3:18:BB:AB:E4:D0:21:F6:47
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.132.0/24
112.78.134.0/24
112.78.142.0/24
112.78.144.0/24
112.78.150.0/23
112.78.153.0/24
112.78.178.0/24
112.78.191.0/24
117.102.66.0/24
117.102.72.0/24
117.102.75.0/24
117.102.79.0/24
117.102.81.0/24
117.102.97.0/24
117.102.120.0/24
118.99.67.0/24
118.99.72.0/24
118.99.107.0/24
118.99.109.0-118.99.110.255
118.99.112.0/24
118.99.116.0/24
118.99.123.0/24
182.253.6.0/24
182.253.13.0-182.253.14.255
182.253.23.0/24
182.253.36.0/24
182.253.40.0/24
182.253.42.0/24
182.253.44.0/23
182.253.62.0/24
182.253.87.0/24
182.253.98.0/24
182.253.106.0/24
182.253.116.0/24
182.253.122.0-182.253.124.255
182.253.127.0/24
182.253.131.0/24
182.253.133.0/24
182.253.137.0/24
182.253.139.0/24
182.253.151.0/24
182.253.185.0-182.253.186.255
182.253.192.0/24
182.253.194.0/24
182.253.203.0/24
182.253.215.0/24
182.253.217.0/24
182.253.228.0/24
182.253.242.0-182.253.245.255
182.253.250.0/23
202.169.37.0-202.169.38.255
202.169.46.0/24
202.169.56.0/24
203.142.74.0/24
203.142.76.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2e:2e:99:5b:16:e6:d6:94:ec:67:16:ae:98:2f:e4:6a:97:
24:41:8b:19:13:05:d4:65:f4:5f:a9:bc:a5:26:a1:fa:74:a3:
ac:71:0b:07:2a:58:69:26:e7:b3:5c:bb:9e:50:36:58:54:10:
d9:4c:ec:c8:e8:c5:1e:30:4a:03:7d:a4:30:9f:23:8d:ad:68:
66:23:0f:43:6f:e0:4d:8d:a5:e1:f8:93:9b:63:88:0d:d1:8f:
dc:6c:1b:35:45:cd:ca:bb:66:b0:be:45:a9:50:9b:c6:6d:57:
3e:20:87:4b:b3:8f:eb:a1:ce:34:62:31:f6:90:ab:73:20:cd:
f8:78:54:4c:47:26:f5:57:cf:5d:18:96:78:87:c6:d2:31:6f:
cb:79:d4:4f:91:45:e0:1b:94:46:8e:05:2a:bf:20:9f:83:40:
18:f7:8b:2d:08:16:fb:1d:4c:9f:b0:29:d4:c0:2f:90:c6:4d:
26:7b:53:e5:c8:b0:03:f1:b4:43:bf:db:b7:55:2a:5c:33:89:
bf:92:7f:b4:52:a3:93:cd:9f:10:9e:9f:c8:5d:91:09:70:f1:
f0:14:4b:57:d6:d2:09:47:25:bc:70:7e:19:cc:4a:cf:24:fa:
97:28:4b:30:ce:19:b8:a3:44:7d:e3:fc:1c:01:f9:02:b1:f5:
e6:24:94:ee
-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIUFCT6ePeXkeElxoXpGpeIZHFmfNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yNjAyMDkwNTI5MzFaFw0yNzAyMDgwNTM0MzFaMDMxMTAvBgNV
BAMTKEU3OTM0NzBFNjgwQzg2QjA4QjU1OTZBMzE4QkJBQkU0RDAyMUY2NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1pvfmqD27aFNm9kHdO7tVKDl
JMIwC/kLDravntd+JmXK9iRI6aKh8zKpK62Ne5qcyNhIKtE3cdcLkkXPO7YOTi8G
35ONONlbR7C2IvXsq78W2nYl5OWBeF4lEHcY9FqEcBCGhC2G98LGIjjh5U7/IUYi
u2XUw4Ld/kp+jJeOiMglCo/T7mmB8vgzjh7t2TrztZSaOZykY6imyNGOOIhZwyuV
fQ4IAacdF3FJNyZceoFjWRLYO5Ls049hh02SVej/SB8hZe3KR598myvVXwlHoDG+
xRCR3oHGiotcXsisnvTx5hFaZ+Z3Z/GZQPBf2JSP24syEga6vaNCyBUDOSANAgMB
AAGjggN8MIIDeDAdBgNVHQ4EFgQU55NHDmgMhrCLVZajGLur5NAh9kcwHwYDVR0j
BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB
NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy
OERCRi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl
cG8tcnBraS5pZG5pYy5uZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00
ODRmMDI1ZGZmY2MvMC9BUzM4MDYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMIIBmwYIKwYBBQUHAQcBAf8EggGKMIIBhjCCAYIEAgABMIIBegMEAHBOhAME
AHBOhgMEAHBOjgMEAHBOkAMEAXBOlgMEAHBOmQMEAHBOsgMEAHBOvwMEAHVmQgME
AHVmSAMEAHVmSwMEAHVmTwMEAHVmUQMEAHVmYQMEAHVmeAMEAHZjQwMEAHZjSAME
AHZjazAMAwQAdmNtAwQAdmNuAwQAdmNwAwQAdmN0AwQAdmN7AwQAtv0GMAwDBAC2
/Q0DBAC2/Q4DBAC2/RcDBAC2/SQDBAC2/SgDBAC2/SoDBAG2/SwDBAC2/T4DBAC2
/VcDBAC2/WIDBAC2/WoDBAC2/XQwDAMEAbb9egMEALb9fAMEALb9fwMEALb9gwME
ALb9hQMEALb9iQMEALb9iwMEALb9lzAMAwQAtv25AwQAtv26AwQAtv3AAwQAtv3C
AwQAtv3LAwQAtv3XAwQAtv3ZAwQAtv3kMAwDBAG2/fIDBAG2/fQDBAG2/fowDAME
AMqpJQMEAMqpJgMEAMqpLgMEAMqpOAMEAMuOSgMEAMuOTDANBgkqhkiG9w0BAQsF
AAOCAQEAIS4umVsW5taU7GcWrpgv5GqXJEGLGRMF1GX0X6m8pSah+nSjrHELBypY
aSbns1y7nlA2WFQQ2UzsyOjFHjBKA32kMJ8jja1oZiMPQ2/gTY2l4fiTm2OIDdGP
3GwbNUXNyrtmsL5FqVCbxm1XPiCHS7OP66HONGIx9pCrcyDN+HhUTEcm9VfPXRiW
eIfG0jFvy3nUT5FF4BuURo4FKr8gn4NAGPeLLQgW+x1Mn7Ap1MAvkMZNJntT5ciw
A/G0Q7/bt1UqXDOJv5J/tFKjk82fEJ6fyF2RCXDx8BRLV9bSCUclvHB+GcxKzyT6
lyhLMM4ZuKNEfeP8HAH5ArH15iSU7g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:19 2026 by rpki-client