Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
File: AS38482.roa (raw, json)
Hash identifier: Z5T34hUG9DPEbhFsZ1d7bfb7habQ4GAs/XvpAFOHhKk=
Subject key identifier: BE:AF:F9:1D:F3:0D:6A:14:B7:F5:8E:05:9A:3D:C0:72:FE:FC:A7:43
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 75CD8CD674C4D3D7FD28D5F71772B7E4076FC572
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
Signing time: Mon 09 Feb 2026 05:27:27 +0000
ROA not before: Mon 09 Feb 2026 05:22:27 +0000
ROA not after: Mon 08 Feb 2027 05:27:27 +0000
asID: 38482
IP address blocks: 112.78.135.0/24 maxlen: 24
112.78.136.0/24 maxlen: 24
112.78.137.0/24 maxlen: 24
112.78.139.0/24 maxlen: 24
112.78.141.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.146.0/24 maxlen: 24
112.78.149.0/24 maxlen: 24
112.78.152.0/24 maxlen: 24
112.78.170.0/24 maxlen: 24
112.78.176.0/24 maxlen: 24
112.78.186.0/24 maxlen: 24
112.78.187.0/24 maxlen: 24
117.102.65.0/24 maxlen: 24
117.102.70.0/24 maxlen: 24
117.102.73.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.80.0/24 maxlen: 24
117.102.82.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.84.0/24 maxlen: 24
117.102.85.0/24 maxlen: 24
117.102.86.0/24 maxlen: 24
117.102.88.0/24 maxlen: 24
117.102.90.0/24 maxlen: 24
117.102.92.0/24 maxlen: 24
117.102.94.0/24 maxlen: 24
117.102.95.0/24 maxlen: 24
117.102.98.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.103.0/24 maxlen: 24
117.102.104.0/24 maxlen: 24
117.102.107.0/24 maxlen: 24
117.102.113.0/24 maxlen: 24
117.102.114.0/24 maxlen: 24
117.102.116.0/24 maxlen: 24
117.102.118.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
117.102.122.0/24 maxlen: 24
118.99.74.0/24 maxlen: 24
118.99.85.0/24 maxlen: 24
118.99.86.0/24 maxlen: 24
182.253.0.0/24 maxlen: 24
182.253.1.0/24 maxlen: 24
182.253.2.0/24 maxlen: 24
182.253.3.0/24 maxlen: 24
182.253.5.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.11.0/24 maxlen: 24
182.253.15.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.18.0/24 maxlen: 24
182.253.19.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.25.0/24 maxlen: 24
182.253.27.0/24 maxlen: 24
182.253.28.0/24 maxlen: 24
182.253.29.0/24 maxlen: 24
182.253.30.0/24 maxlen: 24
182.253.33.0/24 maxlen: 24
182.253.34.0/24 maxlen: 24
182.253.35.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.41.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.46.0/24 maxlen: 24
182.253.47.0/24 maxlen: 24
182.253.60.0/24 maxlen: 24
182.253.68.0/24 maxlen: 24
182.253.69.0/24 maxlen: 24
182.253.70.0/24 maxlen: 24
182.253.71.0/24 maxlen: 24
182.253.85.0/24 maxlen: 24
182.253.100.0/24 maxlen: 24
182.253.101.0/24 maxlen: 24
182.253.120.0/24 maxlen: 24
182.253.190.0/24 maxlen: 24
182.253.195.0/24 maxlen: 24
182.253.201.0/24 maxlen: 24
182.253.204.0/24 maxlen: 24
182.253.205.0/24 maxlen: 24
182.253.210.0/24 maxlen: 24
182.253.213.0/24 maxlen: 24
182.253.221.0/24 maxlen: 24
182.253.222.0/24 maxlen: 24
182.253.225.0/24 maxlen: 24
182.253.226.0/24 maxlen: 24
182.253.236.0/24 maxlen: 24
182.253.237.0/24 maxlen: 24
182.253.238.0/24 maxlen: 24
182.253.239.0/24 maxlen: 24
182.253.240.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.39.0/24 maxlen: 24
202.169.41.0/24 maxlen: 24
202.169.43.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.49.0/24 maxlen: 24
202.169.51.0/24 maxlen: 24
202.169.52.0/24 maxlen: 24
202.169.54.0/24 maxlen: 24
202.169.55.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
202.169.58.0/24 maxlen: 24
202.169.62.0/24 maxlen: 24
203.142.64.0/24 maxlen: 24
203.142.65.0/24 maxlen: 24
203.142.69.0/24 maxlen: 24
203.142.70.0/24 maxlen: 24
203.142.80.0/24 maxlen: 24
203.142.81.0/24 maxlen: 24
203.142.83.0/24 maxlen: 24
203.142.85.0/24 maxlen: 24
203.142.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:cd:8c:d6:74:c4:d3:d7:fd:28:d5:f7:17:72:b7:e4:07:6f:c5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Feb 9 05:22:27 2026 GMT
Not After : Feb 8 05:27:27 2027 GMT
Subject: CN=BEAFF91DF30D6A14B7F58E059A3DC072FEFCA743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6e:25:88:30:c5:da:f4:fd:bd:39:75:e2:5f:
31:9b:0f:1a:63:51:09:67:df:c8:04:a0:ba:28:ff:
b0:86:5f:d7:e7:b2:60:ae:cc:6d:1e:e4:c5:13:fc:
6e:1a:9c:5f:d7:d1:fe:b0:15:c7:81:ea:7e:0c:86:
21:29:0b:d7:94:75:a7:e0:35:dd:6b:6f:ff:5a:ae:
3e:b4:54:10:27:cb:8c:8f:6d:5b:dd:55:ce:2d:73:
ef:f8:9a:34:a7:6e:59:93:f7:87:60:f2:80:fd:fd:
ee:6b:8e:4a:99:56:e9:e2:67:ad:af:dc:4f:69:5c:
2a:a7:be:98:5f:d0:23:33:e3:76:35:4a:36:73:46:
29:80:89:e8:af:4e:8f:c4:69:fa:3b:6e:1d:f5:36:
f6:df:26:f0:3e:81:2e:4a:ce:00:51:18:a3:7b:ab:
0c:ec:33:a3:a8:e7:68:af:8e:1f:f0:71:09:2e:0a:
f4:8f:7c:58:5a:33:49:b3:c4:9c:8b:87:c6:a5:b6:
2d:da:fd:ec:77:32:1c:65:bc:62:06:c8:dc:af:4b:
26:3d:6e:e6:22:c6:a1:91:45:3e:6f:54:18:fd:29:
e9:65:dc:c8:23:6d:56:84:9d:12:46:49:1b:1a:fc:
cd:a8:73:2b:b5:bc:49:ab:da:72:3e:b3:55:95:2a:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:F9:1D:F3:0D:6A:14:B7:F5:8E:05:9A:3D:C0:72:FE:FC:A7:43
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.135.0-112.78.137.255
112.78.139.0/24
112.78.141.0/24
112.78.144.0/24
112.78.146.0/24
112.78.149.0/24
112.78.152.0/24
112.78.170.0/24
112.78.176.0/24
112.78.186.0/23
117.102.65.0/24
117.102.70.0/24
117.102.73.0/24
117.102.79.0-117.102.80.255
117.102.82.0-117.102.86.255
117.102.88.0/24
117.102.90.0/24
117.102.92.0/24
117.102.94.0/23
117.102.98.0/24
117.102.101.0-117.102.104.255
117.102.107.0/24
117.102.113.0-117.102.114.255
117.102.116.0/24
117.102.118.0/24
117.102.120.0/24
117.102.122.0/24
118.99.74.0/24
118.99.85.0-118.99.86.255
182.253.0.0/22
182.253.5.0-182.253.6.255
182.253.11.0/24
182.253.15.0/24
182.253.17.0-182.253.19.255
182.253.23.0/24
182.253.25.0/24
182.253.27.0-182.253.30.255
182.253.33.0-182.253.35.255
182.253.40.0/23
182.253.45.0-182.253.47.255
182.253.60.0/24
182.253.68.0/22
182.253.85.0/24
182.253.100.0/23
182.253.120.0/24
182.253.190.0/24
182.253.195.0/24
182.253.201.0/24
182.253.204.0/23
182.253.210.0/24
182.253.213.0/24
182.253.221.0-182.253.222.255
182.253.225.0-182.253.226.255
182.253.236.0-182.253.240.255
202.169.38.0/23
202.169.41.0/24
202.169.43.0/24
202.169.46.0/24
202.169.49.0/24
202.169.51.0-202.169.52.255
202.169.54.0-202.169.56.255
202.169.58.0/24
202.169.62.0/24
203.142.64.0/23
203.142.69.0-203.142.70.255
203.142.80.0/23
203.142.83.0/24
203.142.85.0-203.142.86.255
Signature Algorithm: sha256WithRSAEncryption
08:a3:f8:8c:f7:e6:0c:b6:a0:d1:9c:c5:82:53:34:d3:dd:f6:
a5:94:c0:63:97:10:36:70:92:4f:c9:82:2d:17:42:33:c2:92:
1a:49:0e:d0:ca:0e:2a:0d:d9:55:e8:79:ef:8d:8a:5c:c5:50:
40:cd:68:c7:dd:b2:2f:50:ff:0c:a2:b8:91:db:d9:44:bb:19:
45:56:cc:e9:8a:08:57:69:c1:31:a7:29:76:dd:bf:ae:74:ac:
6f:a7:8e:10:e7:be:93:52:44:fa:f8:e7:5c:26:52:a4:f9:fb:
59:c7:b8:0e:10:3a:54:c8:74:bb:bf:3e:79:c5:3d:d1:e0:d0:
b4:f5:4e:53:37:1d:79:06:3b:94:17:03:66:6c:7f:3c:5e:ed:
7b:f1:c9:ce:4f:e9:51:8d:ef:21:67:e5:98:89:e3:ff:06:48:
36:1e:2d:85:a7:3b:fc:dc:91:8d:50:96:6f:64:24:5b:c9:03:
a3:5d:a0:d0:a2:e2:a5:84:e9:b5:c2:a0:fb:0c:ac:40:39:ab:
03:56:b8:d8:8f:30:e8:94:20:28:64:5c:b7:bd:35:53:ec:de:
08:2f:37:e6:e9:0e:83:58:52:e0:7c:d1:1b:18:e1:54:2d:92:
97:3d:ce:bd:f3:ad:da:f8:13:5b:45:e5:66:ec:2e:d9:f8:78:
a7:a0:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:20 2026 by rpki-client