Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
File: AS38060.roa (raw, json)
Hash identifier: A0KYFK4TwsmDw8b6GKQn8OvUOFe7f3kGRjMilxy0IaA=
Subject key identifier: E8:EF:04:CA:5D:AB:BD:FA:77:9D:FA:A3:38:23:81:44:A5:C7:FA:CB
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 3E75C019878C740944DD4C2B410F4802C6A091CB
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
Signing time: Sun 03 May 2026 02:26:24 +0000
ROA not before: Sun 03 May 2026 02:21:24 +0000
ROA not after: Sun 02 May 2027 02:26:24 +0000
asID: 38060
IP address blocks: 112.78.132.0/24 maxlen: 24
112.78.134.0/24 maxlen: 24
112.78.142.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.150.0/24 maxlen: 24
112.78.151.0/24 maxlen: 24
112.78.153.0/24 maxlen: 24
112.78.177.0/24 maxlen: 24
112.78.178.0/24 maxlen: 24
112.78.191.0/24 maxlen: 24
117.102.66.0/24 maxlen: 24
117.102.72.0/24 maxlen: 24
117.102.75.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.81.0/24 maxlen: 24
117.102.97.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
118.99.67.0/24 maxlen: 24
118.99.72.0/24 maxlen: 24
118.99.107.0/24 maxlen: 24
118.99.109.0/24 maxlen: 24
118.99.110.0/24 maxlen: 24
118.99.112.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
118.99.123.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.13.0/24 maxlen: 24
182.253.14.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.36.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.42.0/24 maxlen: 24
182.253.44.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.62.0/24 maxlen: 24
182.253.87.0/24 maxlen: 24
182.253.98.0/24 maxlen: 24
182.253.106.0/24 maxlen: 24
182.253.116.0/24 maxlen: 24
182.253.122.0/24 maxlen: 24
182.253.123.0/24 maxlen: 24
182.253.124.0/24 maxlen: 24
182.253.127.0/24 maxlen: 24
182.253.131.0/24 maxlen: 24
182.253.133.0/24 maxlen: 24
182.253.137.0/24 maxlen: 24
182.253.139.0/24 maxlen: 24
182.253.151.0/24 maxlen: 24
182.253.176.0/22 maxlen: 22
182.253.185.0/24 maxlen: 24
182.253.186.0/24 maxlen: 24
182.253.192.0/24 maxlen: 24
182.253.194.0/24 maxlen: 24
182.253.203.0/24 maxlen: 24
182.253.215.0/24 maxlen: 24
182.253.217.0/24 maxlen: 24
182.253.228.0/24 maxlen: 24
182.253.242.0/24 maxlen: 24
182.253.243.0/24 maxlen: 24
182.253.244.0/24 maxlen: 24
182.253.245.0/24 maxlen: 24
182.253.250.0/24 maxlen: 24
182.253.251.0/24 maxlen: 24
202.169.37.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
203.142.72.0/24 maxlen: 24
203.142.74.0/24 maxlen: 24
203.142.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 12:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:75:c0:19:87:8c:74:09:44:dd:4c:2b:41:0f:48:02:c6:a0:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: May 3 02:21:24 2026 GMT
Not After : May 2 02:26:24 2027 GMT
Subject: CN=E8EF04CA5DABBDFA779DFAA338238144A5C7FACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:5d:ed:09:0b:64:0c:72:33:92:94:81:29:
d8:ae:25:ec:39:2e:cb:53:3d:23:15:3e:1a:da:dd:
8d:0e:58:c6:25:80:37:08:a8:73:dd:62:04:56:bd:
4d:96:ee:12:72:51:97:aa:fd:db:13:c9:eb:c5:23:
19:6c:28:18:a2:1e:be:17:86:4e:5d:bc:e7:f4:31:
4d:8f:3b:ce:72:d5:d1:28:09:87:b5:cc:e5:23:4d:
ea:2d:b6:2f:3c:ec:cb:6d:97:03:47:96:32:f0:71:
be:a2:5a:db:51:a4:0d:6d:28:0e:43:fa:36:9a:fc:
e7:17:37:86:c0:29:af:de:8a:55:fb:0d:60:a5:2f:
64:36:43:28:89:90:50:db:d3:05:b7:6c:58:0a:af:
c9:2f:ae:c1:cd:b0:97:e2:44:6f:42:19:0a:d0:23:
c8:bb:f0:1c:4d:6e:2e:45:ca:09:b4:f4:40:f1:bd:
d5:af:4b:bb:66:c1:c8:bb:93:ff:d7:21:b6:2f:b4:
77:1e:4e:c7:36:b8:61:6b:05:d4:c8:a4:29:d9:3e:
04:d8:fe:8d:fd:f3:7b:2a:11:16:b0:03:3a:b9:8e:
56:02:f6:35:85:b2:55:1a:e0:0b:6a:a6:41:68:17:
f8:f1:31:d2:5c:04:a7:ce:c7:b9:76:56:5b:0e:47:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:04:CA:5D:AB:BD:FA:77:9D:FA:A3:38:23:81:44:A5:C7:FA:CB
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.132.0/24
112.78.134.0/24
112.78.142.0/24
112.78.144.0/24
112.78.150.0/23
112.78.153.0/24
112.78.177.0-112.78.178.255
112.78.191.0/24
117.102.66.0/24
117.102.72.0/24
117.102.75.0/24
117.102.79.0/24
117.102.81.0/24
117.102.97.0/24
117.102.120.0/24
118.99.67.0/24
118.99.72.0/24
118.99.107.0/24
118.99.109.0-118.99.110.255
118.99.112.0/24
118.99.116.0/24
118.99.123.0/24
182.253.6.0/24
182.253.13.0-182.253.14.255
182.253.23.0/24
182.253.36.0/24
182.253.40.0/24
182.253.42.0/24
182.253.44.0/23
182.253.62.0/24
182.253.87.0/24
182.253.98.0/24
182.253.106.0/24
182.253.116.0/24
182.253.122.0-182.253.124.255
182.253.127.0/24
182.253.131.0/24
182.253.133.0/24
182.253.137.0/24
182.253.139.0/24
182.253.151.0/24
182.253.176.0/22
182.253.185.0-182.253.186.255
182.253.192.0/24
182.253.194.0/24
182.253.203.0/24
182.253.215.0/24
182.253.217.0/24
182.253.228.0/24
182.253.242.0-182.253.245.255
182.253.250.0/23
202.169.37.0-202.169.38.255
202.169.46.0/24
202.169.56.0/24
203.142.72.0/24
203.142.74.0/24
203.142.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:42:5e:8d:f2:32:cd:7e:46:c6:16:d1:bc:be:87:76:11:49:
66:3d:81:fd:91:61:63:d0:3f:1e:d1:7d:4c:9f:03:1d:5a:75:
cf:82:7f:19:b9:30:7b:04:67:2a:01:05:e0:33:92:56:2f:d8:
40:ba:d7:c1:89:df:66:6f:ca:1d:d0:20:75:df:41:a9:68:5f:
6f:bc:52:19:d8:f1:b7:23:ea:53:40:02:3c:d0:25:3d:9a:95:
90:9c:e5:c0:c7:9d:35:1f:58:76:68:7d:d5:36:54:57:3f:a9:
16:84:e3:fd:ee:ba:34:0a:71:74:fe:9c:ba:ec:7d:ed:c9:d9:
bc:40:27:d5:61:41:d5:d8:3c:36:21:fc:4a:05:69:f0:ca:fa:
23:d5:bc:00:b3:5f:81:6e:ce:cc:9d:74:f0:a0:90:f8:e1:e6:
31:92:1e:86:e9:96:bc:07:9f:90:49:a3:bd:d1:9a:97:f1:1e:
07:dd:12:90:61:d2:22:8c:f7:0b:a6:02:b5:94:69:d3:9d:fb:
68:0c:91:23:26:38:d0:82:73:36:eb:a7:be:2b:c8:ea:e6:fb:
ce:6f:4e:ba:7d:35:6b:b3:22:2a:e2:8d:d9:4e:07:55:6e:a6:
1b:82:b8:4b:57:62:d5:45:63:41:fc:30:f8:39:ed:dc:ae:09:
67:ef:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 23:38:54 2026 by rpki-client