Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
File: AS38060.roa (raw, json)
Hash identifier: he8AkwXB89cL1S/UajglYczYBduvpg4/k4s2MR40F+k=
Subject key identifier: 9B:93:1C:E5:53:10:0A:65:29:39:CB:23:8C:AB:40:64:F1:CD:5C:4B
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 2BF6BEDAD4B2C77AA12EAB0E7EAE9686452EE24F
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
Signing time: Mon 21 Sep 2026 05:07:56 +0000
ROA not before: Mon 21 Sep 2026 05:02:56 +0000
ROA not after: Mon 20 Sep 2027 05:07:56 +0000
asID: 38060
IP address blocks: 112.78.132.0/24 maxlen: 24
112.78.140.0/24 maxlen: 24
112.78.142.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.150.0/24 maxlen: 24
112.78.151.0/24 maxlen: 24
112.78.153.0/24 maxlen: 24
112.78.173.0/24 maxlen: 24
112.78.177.0/24 maxlen: 24
112.78.178.0/24 maxlen: 24
112.78.191.0/24 maxlen: 24
117.102.66.0/24 maxlen: 24
117.102.72.0/24 maxlen: 24
117.102.75.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.81.0/24 maxlen: 24
117.102.97.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
118.99.67.0/24 maxlen: 24
118.99.72.0/24 maxlen: 24
118.99.107.0/24 maxlen: 24
118.99.109.0/24 maxlen: 24
118.99.110.0/24 maxlen: 24
118.99.112.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
118.99.123.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.13.0/24 maxlen: 24
182.253.14.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.36.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.42.0/24 maxlen: 24
182.253.44.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.61.0/24 maxlen: 24
182.253.62.0/24 maxlen: 24
182.253.87.0/24 maxlen: 24
182.253.98.0/24 maxlen: 24
182.253.106.0/24 maxlen: 24
182.253.116.0/24 maxlen: 24
182.253.122.0/24 maxlen: 24
182.253.123.0/24 maxlen: 24
182.253.124.0/24 maxlen: 24
182.253.127.0/24 maxlen: 24
182.253.131.0/24 maxlen: 24
182.253.133.0/24 maxlen: 24
182.253.137.0/24 maxlen: 24
182.253.139.0/24 maxlen: 24
182.253.151.0/24 maxlen: 24
182.253.176.0/22 maxlen: 22
182.253.185.0/24 maxlen: 24
182.253.186.0/24 maxlen: 24
182.253.192.0/24 maxlen: 24
182.253.194.0/24 maxlen: 24
182.253.203.0/24 maxlen: 24
182.253.215.0/24 maxlen: 24
182.253.217.0/24 maxlen: 24
182.253.228.0/24 maxlen: 24
182.253.242.0/24 maxlen: 24
182.253.243.0/24 maxlen: 24
182.253.244.0/24 maxlen: 24
182.253.245.0/24 maxlen: 24
182.253.250.0/24 maxlen: 24
182.253.251.0/24 maxlen: 24
202.169.37.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
203.142.72.0/24 maxlen: 24
203.142.74.0/24 maxlen: 24
203.142.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f6:be:da:d4:b2:c7:7a:a1:2e:ab:0e:7e:ae:96:86:45:2e:e2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: Sep 21 05:02:56 2026 GMT
Not After : Sep 20 05:07:56 2027 GMT
Subject: CN=9B931CE553100A652939CB238CAB4064F1CD5C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:2f:d7:07:a0:59:85:c9:89:cd:e7:bf:a2:
b0:be:64:0d:96:07:e2:9c:fd:fb:56:5a:56:2b:82:
64:64:19:1d:4a:54:91:12:50:ef:7e:35:59:a4:a3:
aa:be:e4:ba:d9:44:05:49:57:14:ae:57:2e:70:a0:
6f:f9:ab:1d:dd:38:22:4d:0a:50:1f:22:71:b7:02:
59:17:2d:99:b7:c7:33:a7:20:8c:61:cf:11:f1:9f:
95:95:5f:ba:53:88:15:b6:f8:7f:30:01:4c:4c:f7:
45:f7:73:54:02:db:6a:4c:77:4c:ef:30:74:c1:f3:
5b:6b:15:4a:87:15:f5:3e:70:ee:f1:c3:f6:bf:cc:
36:c6:8a:ac:79:b5:14:96:9d:d1:d0:e8:62:7f:15:
0c:cb:a1:ce:89:42:5f:43:1b:6e:70:90:20:d1:85:
6e:bf:23:5a:1e:7b:82:b1:95:36:38:b0:14:a8:45:
a5:c3:31:a7:24:d3:f6:04:8a:66:34:c9:1e:c1:63:
ff:50:ee:25:36:5a:cb:81:44:1b:27:f7:c9:39:e3:
76:4f:58:28:f4:66:45:18:60:a2:cf:6b:ef:ee:73:
1d:35:4d:36:19:8a:fe:fe:42:5c:28:96:32:2a:a1:
9d:18:8e:9a:86:a0:05:96:c8:73:01:73:c0:05:75:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:93:1C:E5:53:10:0A:65:29:39:CB:23:8C:AB:40:64:F1:CD:5C:4B
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.132.0/24
112.78.140.0/24
112.78.142.0/24
112.78.144.0/24
112.78.150.0/23
112.78.153.0/24
112.78.173.0/24
112.78.177.0-112.78.178.255
112.78.191.0/24
117.102.66.0/24
117.102.72.0/24
117.102.75.0/24
117.102.79.0/24
117.102.81.0/24
117.102.97.0/24
117.102.120.0/24
118.99.67.0/24
118.99.72.0/24
118.99.107.0/24
118.99.109.0-118.99.110.255
118.99.112.0/24
118.99.116.0/24
118.99.123.0/24
182.253.6.0/24
182.253.13.0-182.253.14.255
182.253.23.0/24
182.253.36.0/24
182.253.40.0/24
182.253.42.0/24
182.253.44.0/23
182.253.61.0-182.253.62.255
182.253.87.0/24
182.253.98.0/24
182.253.106.0/24
182.253.116.0/24
182.253.122.0-182.253.124.255
182.253.127.0/24
182.253.131.0/24
182.253.133.0/24
182.253.137.0/24
182.253.139.0/24
182.253.151.0/24
182.253.176.0/22
182.253.185.0-182.253.186.255
182.253.192.0/24
182.253.194.0/24
182.253.203.0/24
182.253.215.0/24
182.253.217.0/24
182.253.228.0/24
182.253.242.0-182.253.245.255
182.253.250.0/23
202.169.37.0-202.169.38.255
202.169.46.0/24
202.169.56.0/24
203.142.72.0/24
203.142.74.0/24
203.142.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:20:5f:5d:db:9d:e1:a6:f1:50:a9:56:da:88:29:46:33:88:
c6:5f:7b:33:03:07:2a:77:44:26:3b:7c:35:ca:5d:61:fd:7c:
fd:d2:d8:97:d5:98:c8:82:33:f0:59:0a:06:e1:7d:c8:86:5b:
37:27:a6:8c:ce:4a:20:2d:6c:20:5a:1f:ff:ad:a4:5f:59:d7:
7c:dd:eb:ee:8c:81:a4:c8:c5:ce:55:30:41:85:7e:9e:f3:18:
5d:e7:bc:a4:bc:66:50:85:f5:09:98:1d:d0:82:9a:36:9f:19:
c9:71:b2:91:bb:f3:2a:1d:e5:6b:38:b9:8f:83:12:d6:d1:a4:
9f:0c:82:b5:cc:d2:07:11:a3:46:c2:42:64:35:a2:d7:2f:ce:
69:61:fc:00:97:30:8f:d3:c2:88:e5:14:c2:0d:c8:2c:89:30:
09:5c:f2:42:8f:ff:5c:1c:9b:57:9f:50:0d:be:a7:bf:af:2c:
2d:95:39:af:ec:be:cb:c8:80:d6:4c:7f:43:c6:15:cb:fc:0a:
bc:af:42:57:27:b8:8e:7b:e1:9c:80:17:d2:70:0e:63:53:2a:
c8:6a:de:12:b6:20:24:e2:38:ea:c2:03:fa:dd:46:b8:65:36:
75:44:47:0f:a6:f7:51:53:5d:45:95:b2:72:a0:42:d7:f7:2e:
52:64:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:03:53 2026 by rpki-client