Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
File: AS38060.roa (raw, json)
Hash identifier: Wf9II+3chZpjeoMAYg7p3bWObyALbv2w7S9wNvGAMzw=
Subject key identifier: B2:E6:57:1D:96:A5:E8:84:3F:35:20:49:E9:7C:E8:AB:11:93:70:AB
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 64CD4589FA8A9D2689896AEDC1DF399347EC4952
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
Signing time: Thu 29 Oct 2026 06:35:34 +0000
ROA not before: Thu 29 Oct 2026 06:30:34 +0000
ROA not after: Thu 28 Oct 2027 06:35:34 +0000
asID: 38060
IP address blocks: 112.78.132.0/24 maxlen: 24
112.78.134.0/24 maxlen: 24
112.78.140.0/24 maxlen: 24
112.78.142.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.150.0/24 maxlen: 24
112.78.151.0/24 maxlen: 24
112.78.153.0/24 maxlen: 24
112.78.173.0/24 maxlen: 24
112.78.177.0/24 maxlen: 24
112.78.178.0/24 maxlen: 24
112.78.191.0/24 maxlen: 24
117.102.66.0/24 maxlen: 24
117.102.68.0/24 maxlen: 24
117.102.72.0/24 maxlen: 24
117.102.75.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.81.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.97.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
118.99.67.0/24 maxlen: 24
118.99.72.0/24 maxlen: 24
118.99.107.0/24 maxlen: 24
118.99.109.0/24 maxlen: 24
118.99.110.0/24 maxlen: 24
118.99.112.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
118.99.123.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.13.0/24 maxlen: 24
182.253.14.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.36.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.42.0/24 maxlen: 24
182.253.44.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.61.0/24 maxlen: 24
182.253.62.0/24 maxlen: 24
182.253.87.0/24 maxlen: 24
182.253.98.0/24 maxlen: 24
182.253.106.0/24 maxlen: 24
182.253.116.0/24 maxlen: 24
182.253.122.0/24 maxlen: 24
182.253.123.0/24 maxlen: 24
182.253.124.0/24 maxlen: 24
182.253.127.0/24 maxlen: 24
182.253.131.0/24 maxlen: 24
182.253.133.0/24 maxlen: 24
182.253.137.0/24 maxlen: 24
182.253.139.0/24 maxlen: 24
182.253.151.0/24 maxlen: 24
182.253.176.0/22 maxlen: 22
182.253.185.0/24 maxlen: 24
182.253.186.0/24 maxlen: 24
182.253.192.0/24 maxlen: 24
182.253.194.0/24 maxlen: 24
182.253.203.0/24 maxlen: 24
182.253.215.0/24 maxlen: 24
182.253.217.0/24 maxlen: 24
182.253.228.0/24 maxlen: 24
182.253.242.0/24 maxlen: 24
182.253.243.0/24 maxlen: 24
182.253.244.0/24 maxlen: 24
182.253.245.0/24 maxlen: 24
182.253.250.0/24 maxlen: 24
182.253.251.0/24 maxlen: 24
202.169.37.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
203.142.72.0/24 maxlen: 24
203.142.74.0/24 maxlen: 24
203.142.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:cd:45:89:fa:8a:9d:26:89:89:6a:ed:c1:df:39:93:47:ec:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: Oct 29 06:30:34 2026 GMT
Not After : Oct 28 06:35:34 2027 GMT
Subject: CN=B2E6571D96A5E8843F352049E97CE8AB119370AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:1f:50:58:61:82:0b:b3:da:ea:49:b3:b3:
25:4a:fa:94:d2:06:80:2b:61:12:da:98:75:cb:98:
3f:ed:8e:dd:96:70:80:43:81:be:ce:f7:00:1a:11:
06:c7:62:2b:d7:03:e9:7a:d7:b7:11:04:0f:10:1d:
53:6e:be:27:29:ad:2d:fc:95:aa:2b:f6:f1:81:06:
c7:c4:6a:68:f8:99:3d:00:ef:d1:0f:1d:29:c0:40:
c2:c2:0d:36:09:9f:2d:77:47:1a:fc:b8:1b:4e:ab:
1f:a5:c0:5e:d3:d2:6f:b0:99:ce:f9:73:5c:9c:38:
6e:d5:d7:bc:31:0c:79:e9:9a:44:c2:a3:16:2c:57:
33:d4:83:14:ab:ba:ce:9e:f2:20:cd:9f:fb:08:ae:
6d:14:ee:c4:ce:f1:c8:19:2f:b6:a3:9f:62:25:de:
0c:92:4a:1a:38:69:af:ae:63:38:e7:dc:1c:da:34:
c4:93:2c:86:a6:1b:97:b5:f8:bd:82:0a:d3:55:5c:
47:b6:b5:c1:a9:83:a1:7a:82:13:fe:3f:8d:1b:5d:
a6:46:22:e9:32:04:2d:00:0b:34:6d:46:d7:8d:2b:
80:32:b7:46:fd:ce:8c:90:35:6d:86:0a:94:49:cd:
9b:08:8c:ca:72:18:86:76:c6:54:0b:1e:3d:51:0d:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E6:57:1D:96:A5:E8:84:3F:35:20:49:E9:7C:E8:AB:11:93:70:AB
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.132.0/24
112.78.134.0/24
112.78.140.0/24
112.78.142.0/24
112.78.144.0/24
112.78.150.0/23
112.78.153.0/24
112.78.173.0/24
112.78.177.0-112.78.178.255
112.78.191.0/24
117.102.66.0/24
117.102.68.0/24
117.102.72.0/24
117.102.75.0/24
117.102.79.0/24
117.102.81.0/24
117.102.83.0/24
117.102.97.0/24
117.102.101.0-117.102.102.255
117.102.120.0/24
118.99.67.0/24
118.99.72.0/24
118.99.107.0/24
118.99.109.0-118.99.110.255
118.99.112.0/24
118.99.116.0/24
118.99.123.0/24
182.253.6.0/24
182.253.13.0-182.253.14.255
182.253.17.0/24
182.253.23.0/24
182.253.36.0/24
182.253.40.0/24
182.253.42.0/24
182.253.44.0/23
182.253.61.0-182.253.62.255
182.253.87.0/24
182.253.98.0/24
182.253.106.0/24
182.253.116.0/24
182.253.122.0-182.253.124.255
182.253.127.0/24
182.253.131.0/24
182.253.133.0/24
182.253.137.0/24
182.253.139.0/24
182.253.151.0/24
182.253.176.0/22
182.253.185.0-182.253.186.255
182.253.192.0/24
182.253.194.0/24
182.253.203.0/24
182.253.215.0/24
182.253.217.0/24
182.253.228.0/24
182.253.242.0-182.253.245.255
182.253.250.0/23
202.169.37.0-202.169.38.255
202.169.46.0/24
202.169.56.0/24
203.142.72.0/24
203.142.74.0/24
203.142.76.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1a:25:42:dc:ab:2e:aa:7a:ad:16:eb:bc:19:53:4d:de:1f:
e7:79:0e:f0:43:94:b8:95:ef:30:64:ed:84:f2:d1:db:84:d6:
7d:d0:74:93:9b:c8:2b:92:e1:9b:80:db:d4:c1:17:5e:95:eb:
1c:37:fc:2f:3b:e0:58:67:8b:51:bf:2a:b8:4b:00:fc:4c:72:
d3:a0:63:71:34:45:31:07:a8:b0:3c:ff:da:29:05:8c:22:0b:
1d:91:cc:45:29:9f:1e:b2:e1:d2:90:e1:48:92:75:17:ec:bc:
fd:19:93:7a:a2:f4:2b:b5:28:f6:27:7d:b5:7b:ce:d9:d0:e6:
44:c7:7c:3b:05:64:15:80:c7:0d:fb:0f:5b:84:fa:31:63:a7:
02:4b:cf:84:31:fc:63:ec:25:7e:83:8a:10:10:98:fe:9b:41:
9a:ad:db:e6:3b:ef:db:78:9f:76:bd:4a:07:2e:cc:07:25:ae:
fe:aa:c0:27:65:00:b5:40:fc:61:be:84:07:bf:03:36:71:a5:
6d:12:31:be:9d:aa:d2:93:40:d1:b4:eb:02:78:4b:46:3e:b0:
84:cf:de:80:91:05:93:c3:74:b7:9c:9d:51:8b:30:1f:ce:4a:
30:a2:9f:9c:f5:5a:9e:a7:62:c7:4c:dc:c7:66:77:2b:4a:6d:
ff:b0:14:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 9 17:16:58 2026 by rpki-client