Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
File: AS38482.roa (raw, json)
Hash identifier: ldVvBKxSmATb6nprzdPJ0AzN+dtU0IYW8zi8QipOrpE=
Subject key identifier: 76:A7:6D:46:EF:15:B3:5E:14:07:79:9E:11:1C:30:35:1B:63:7E:CE
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 5DEBDAE938820F2F9300F2F1F608FEA16ED21414
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
Signing time: Tue 17 Jun 2025 00:42:16 +0000
ROA not before: Tue 17 Jun 2025 00:37:16 +0000
ROA not after: Tue 16 Jun 2026 00:42:16 +0000
asID: 38482
IP address blocks: 112.78.135.0/24 maxlen: 24
112.78.136.0/24 maxlen: 24
112.78.137.0/24 maxlen: 24
112.78.139.0/24 maxlen: 24
112.78.141.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.146.0/24 maxlen: 24
112.78.149.0/24 maxlen: 24
112.78.152.0/24 maxlen: 24
112.78.170.0/24 maxlen: 24
112.78.176.0/24 maxlen: 24
112.78.186.0/24 maxlen: 24
112.78.187.0/24 maxlen: 24
117.102.65.0/24 maxlen: 24
117.102.70.0/24 maxlen: 24
117.102.73.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.80.0/24 maxlen: 24
117.102.82.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.84.0/24 maxlen: 24
117.102.85.0/24 maxlen: 24
117.102.86.0/24 maxlen: 24
117.102.88.0/24 maxlen: 24
117.102.90.0/24 maxlen: 24
117.102.92.0/24 maxlen: 24
117.102.94.0/24 maxlen: 24
117.102.95.0/24 maxlen: 24
117.102.98.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.103.0/24 maxlen: 24
117.102.104.0/24 maxlen: 24
117.102.107.0/24 maxlen: 24
117.102.113.0/24 maxlen: 24
117.102.114.0/24 maxlen: 24
117.102.116.0/24 maxlen: 24
117.102.118.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
117.102.122.0/24 maxlen: 24
118.99.74.0/24 maxlen: 24
118.99.85.0/24 maxlen: 24
118.99.86.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
182.253.0.0/24 maxlen: 24
182.253.1.0/24 maxlen: 24
182.253.2.0/24 maxlen: 24
182.253.3.0/24 maxlen: 24
182.253.5.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.11.0/24 maxlen: 24
182.253.15.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.18.0/24 maxlen: 24
182.253.19.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.25.0/24 maxlen: 24
182.253.27.0/24 maxlen: 24
182.253.28.0/24 maxlen: 24
182.253.29.0/24 maxlen: 24
182.253.30.0/24 maxlen: 24
182.253.34.0/24 maxlen: 24
182.253.35.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.41.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.46.0/24 maxlen: 24
182.253.47.0/24 maxlen: 24
182.253.60.0/24 maxlen: 24
182.253.68.0/24 maxlen: 24
182.253.70.0/24 maxlen: 24
182.253.71.0/24 maxlen: 24
182.253.85.0/24 maxlen: 24
182.253.100.0/24 maxlen: 24
182.253.101.0/24 maxlen: 24
182.253.120.0/24 maxlen: 24
182.253.190.0/24 maxlen: 24
182.253.195.0/24 maxlen: 24
182.253.201.0/24 maxlen: 24
182.253.204.0/24 maxlen: 24
182.253.205.0/24 maxlen: 24
182.253.210.0/24 maxlen: 24
182.253.213.0/24 maxlen: 24
182.253.221.0/24 maxlen: 24
182.253.222.0/24 maxlen: 24
182.253.226.0/24 maxlen: 24
182.253.236.0/24 maxlen: 24
182.253.237.0/24 maxlen: 24
182.253.238.0/24 maxlen: 24
182.253.239.0/24 maxlen: 24
182.253.240.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.39.0/24 maxlen: 24
202.169.41.0/24 maxlen: 24
202.169.43.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.49.0/24 maxlen: 24
202.169.51.0/24 maxlen: 24
202.169.52.0/24 maxlen: 24
202.169.54.0/24 maxlen: 24
202.169.55.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
202.169.58.0/24 maxlen: 24
202.169.62.0/24 maxlen: 24
203.142.64.0/24 maxlen: 24
203.142.65.0/24 maxlen: 24
203.142.69.0/24 maxlen: 24
203.142.70.0/24 maxlen: 24
203.142.80.0/24 maxlen: 24
203.142.81.0/24 maxlen: 24
203.142.85.0/24 maxlen: 24
203.142.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 10:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:eb:da:e9:38:82:0f:2f:93:00:f2:f1:f6:08:fe:a1:6e:d2:14:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Jun 17 00:37:16 2025 GMT
Not After : Jun 16 00:42:16 2026 GMT
Subject: CN=76A76D46EF15B35E1407799E111C30351B637ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:59:1b:32:ce:d7:0a:13:6f:a3:14:04:bb:
58:15:c6:04:c8:87:c9:a7:44:51:dc:93:6e:34:fc:
eb:3c:63:c4:9e:1e:4e:02:25:c4:0a:03:91:c6:e0:
63:ef:32:4b:c6:6a:0d:d8:f7:b0:01:c3:98:39:33:
4a:62:fa:9e:17:0c:38:02:69:ba:26:2e:53:c6:39:
fc:8b:64:8a:64:9f:e5:5c:63:39:13:0f:e2:d4:b4:
ce:fd:05:b4:c9:63:f8:33:d0:c0:5d:56:da:e0:bf:
0b:da:65:83:f5:3c:94:94:4b:a6:99:6e:34:f0:73:
ac:39:da:6d:88:78:82:d3:b1:b1:9e:10:dd:90:12:
ea:90:aa:a1:dc:dd:23:cc:ee:a6:b8:01:d0:c7:66:
2e:91:7a:b2:5c:79:cd:10:a4:7f:17:d1:1b:6e:34:
9b:13:dc:fc:4d:a8:f0:bf:85:27:ae:66:34:07:7e:
85:3e:5a:4b:20:fd:d3:d1:2c:1d:60:1f:14:07:d4:
93:6c:61:1c:4c:35:31:40:f1:af:17:ed:14:41:25:
98:2b:d7:15:63:e1:8e:41:4a:1d:21:0d:8a:0a:51:
34:a6:4f:c2:6d:1f:14:c4:6c:25:2f:82:17:3f:e4:
54:87:34:2d:fe:1e:d9:10:ed:65:9d:6a:df:87:ec:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A7:6D:46:EF:15:B3:5E:14:07:79:9E:11:1C:30:35:1B:63:7E:CE
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.135.0-112.78.137.255
112.78.139.0/24
112.78.141.0/24
112.78.144.0/24
112.78.146.0/24
112.78.149.0/24
112.78.152.0/24
112.78.170.0/24
112.78.176.0/24
112.78.186.0/23
117.102.65.0/24
117.102.70.0/24
117.102.73.0/24
117.102.79.0-117.102.80.255
117.102.82.0-117.102.86.255
117.102.88.0/24
117.102.90.0/24
117.102.92.0/24
117.102.94.0/23
117.102.98.0/24
117.102.101.0-117.102.104.255
117.102.107.0/24
117.102.113.0-117.102.114.255
117.102.116.0/24
117.102.118.0/24
117.102.120.0/24
117.102.122.0/24
118.99.74.0/24
118.99.85.0-118.99.86.255
118.99.116.0/24
182.253.0.0/22
182.253.5.0-182.253.6.255
182.253.11.0/24
182.253.15.0/24
182.253.17.0-182.253.19.255
182.253.23.0/24
182.253.25.0/24
182.253.27.0-182.253.30.255
182.253.34.0/23
182.253.40.0/23
182.253.45.0-182.253.47.255
182.253.60.0/24
182.253.68.0/24
182.253.70.0/23
182.253.85.0/24
182.253.100.0/23
182.253.120.0/24
182.253.190.0/24
182.253.195.0/24
182.253.201.0/24
182.253.204.0/23
182.253.210.0/24
182.253.213.0/24
182.253.221.0-182.253.222.255
182.253.226.0/24
182.253.236.0-182.253.240.255
202.169.38.0/23
202.169.41.0/24
202.169.43.0/24
202.169.46.0/24
202.169.49.0/24
202.169.51.0-202.169.52.255
202.169.54.0-202.169.56.255
202.169.58.0/24
202.169.62.0/24
203.142.64.0/23
203.142.69.0-203.142.70.255
203.142.80.0/23
203.142.85.0-203.142.86.255
Signature Algorithm: sha256WithRSAEncryption
37:44:7c:35:6e:0f:3d:61:6b:b5:09:fc:dc:48:fc:9f:94:ba:
40:d0:c5:7a:4a:be:78:60:2e:5b:66:89:ed:a6:4a:49:2c:b3:
93:1e:5a:eb:e5:0b:69:f6:b3:77:bb:8f:00:39:a9:da:c1:41:
f6:26:40:66:47:cc:92:23:3e:ef:f5:a8:81:81:6f:f5:c2:98:
f9:e7:3f:05:36:b7:13:40:4d:0e:49:4b:07:e3:b8:3e:c2:98:
54:4d:58:c2:bb:66:26:80:2a:bb:5e:ab:c7:07:3b:f5:d6:7d:
33:96:f0:bb:eb:a1:56:14:ee:a2:91:57:47:6b:ae:5b:1e:94:
fe:00:c5:fb:8c:10:c9:e4:ca:ac:e1:54:15:fc:94:2c:16:a3:
cb:43:f2:c8:dd:99:4c:07:cf:d0:6a:fb:1e:a8:88:1c:78:35:
e7:df:58:9b:8f:da:a0:2f:48:9a:e5:fd:86:a3:2d:96:d1:39:
3c:a3:c9:5a:08:48:7b:a6:00:59:77:b3:ee:2d:60:e4:7f:3c:
2c:2e:89:f3:b0:ef:75:71:ef:19:47:06:c0:25:80:ed:39:1c:
72:2c:2a:0c:0e:80:0f:cf:3b:e2:ba:ad:3e:33:62:ef:fe:68:
b2:b4:68:e4:71:1c:61:a8:24:9e:0d:46:32:67:71:da:d0:c4:
87:09:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:02:16 2025 by rpki-client