Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
File: AS38060.roa (raw, json)
Hash identifier: uX76dUcPbHdVdZY5rbgISedxmdgl9ygBYE6D1Y3a5xs=
Subject key identifier: FC:24:34:92:C9:6E:7B:9E:0F:3F:AC:B2:19:35:84:59:A0:92:F6:4A
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 04D7373D6D347824247AD93A4C6C499BAF59E3C2
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
Signing time: Wed 14 Oct 2026 03:43:00 +0000
ROA not before: Wed 14 Oct 2026 03:38:00 +0000
ROA not after: Wed 13 Oct 2027 03:43:00 +0000
asID: 38060
IP address blocks: 112.78.132.0/24 maxlen: 24
112.78.134.0/24 maxlen: 24
112.78.140.0/24 maxlen: 24
112.78.142.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.150.0/24 maxlen: 24
112.78.151.0/24 maxlen: 24
112.78.153.0/24 maxlen: 24
112.78.173.0/24 maxlen: 24
112.78.177.0/24 maxlen: 24
112.78.178.0/24 maxlen: 24
112.78.191.0/24 maxlen: 24
117.102.66.0/24 maxlen: 24
117.102.72.0/24 maxlen: 24
117.102.75.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.81.0/24 maxlen: 24
117.102.97.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
118.99.67.0/24 maxlen: 24
118.99.72.0/24 maxlen: 24
118.99.107.0/24 maxlen: 24
118.99.109.0/24 maxlen: 24
118.99.110.0/24 maxlen: 24
118.99.112.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
118.99.123.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.13.0/24 maxlen: 24
182.253.14.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.36.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.42.0/24 maxlen: 24
182.253.44.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.61.0/24 maxlen: 24
182.253.62.0/24 maxlen: 24
182.253.87.0/24 maxlen: 24
182.253.98.0/24 maxlen: 24
182.253.106.0/24 maxlen: 24
182.253.116.0/24 maxlen: 24
182.253.122.0/24 maxlen: 24
182.253.123.0/24 maxlen: 24
182.253.124.0/24 maxlen: 24
182.253.127.0/24 maxlen: 24
182.253.131.0/24 maxlen: 24
182.253.133.0/24 maxlen: 24
182.253.137.0/24 maxlen: 24
182.253.139.0/24 maxlen: 24
182.253.151.0/24 maxlen: 24
182.253.176.0/22 maxlen: 22
182.253.185.0/24 maxlen: 24
182.253.186.0/24 maxlen: 24
182.253.192.0/24 maxlen: 24
182.253.194.0/24 maxlen: 24
182.253.203.0/24 maxlen: 24
182.253.215.0/24 maxlen: 24
182.253.217.0/24 maxlen: 24
182.253.228.0/24 maxlen: 24
182.253.242.0/24 maxlen: 24
182.253.243.0/24 maxlen: 24
182.253.244.0/24 maxlen: 24
182.253.245.0/24 maxlen: 24
182.253.250.0/24 maxlen: 24
182.253.251.0/24 maxlen: 24
202.169.37.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
203.142.72.0/24 maxlen: 24
203.142.74.0/24 maxlen: 24
203.142.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 13:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d7:37:3d:6d:34:78:24:24:7a:d9:3a:4c:6c:49:9b:af:59:e3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: Oct 14 03:38:00 2026 GMT
Not After : Oct 13 03:43:00 2027 GMT
Subject: CN=FC243492C96E7B9E0F3FACB219358459A092F64A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:43:83:38:c3:a7:c8:c7:a1:00:b8:a6:90:
63:b2:5b:15:9f:fd:1e:64:95:39:e0:c3:b5:a0:12:
f2:4c:b1:86:19:d3:f0:68:0a:aa:3f:76:3e:aa:52:
32:f9:64:54:09:58:b4:2c:49:f1:c9:43:9f:35:58:
25:fe:65:87:05:ef:f4:d8:bd:d8:c5:45:f7:ae:c1:
fe:14:89:ee:b3:24:e0:39:3f:97:1d:c4:ec:46:25:
ef:45:e6:f2:32:a7:cf:e7:f1:e2:03:16:fa:31:88:
d0:d4:7e:a2:9f:a6:a8:44:55:fd:1e:41:38:78:19:
1c:7b:6a:09:f9:44:2d:cf:46:61:0a:a6:1c:f7:e0:
cf:cb:89:2f:c4:bf:01:af:5e:98:ce:1f:7c:e4:2f:
21:70:2d:4a:32:37:16:0b:d9:d3:35:a7:f8:e2:3d:
12:c9:48:fb:a1:06:03:6a:c3:5f:9c:8b:1a:0d:f4:
1c:e8:3a:7f:e2:a3:49:36:b6:06:87:53:c2:96:f0:
ff:4b:74:24:47:b7:87:4b:cb:67:b5:c7:8d:74:b1:
65:0c:e1:94:54:8d:aa:d2:5d:63:af:1a:99:df:52:
06:c9:7a:fa:1a:1a:fe:dc:8e:6e:58:c3:ca:dd:27:
d2:5d:f0:e5:f9:fb:b3:34:7d:e6:c9:b4:23:77:43:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:24:34:92:C9:6E:7B:9E:0F:3F:AC:B2:19:35:84:59:A0:92:F6:4A
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.132.0/24
112.78.134.0/24
112.78.140.0/24
112.78.142.0/24
112.78.144.0/24
112.78.150.0/23
112.78.153.0/24
112.78.173.0/24
112.78.177.0-112.78.178.255
112.78.191.0/24
117.102.66.0/24
117.102.72.0/24
117.102.75.0/24
117.102.79.0/24
117.102.81.0/24
117.102.97.0/24
117.102.101.0-117.102.102.255
117.102.120.0/24
118.99.67.0/24
118.99.72.0/24
118.99.107.0/24
118.99.109.0-118.99.110.255
118.99.112.0/24
118.99.116.0/24
118.99.123.0/24
182.253.6.0/24
182.253.13.0-182.253.14.255
182.253.23.0/24
182.253.36.0/24
182.253.40.0/24
182.253.42.0/24
182.253.44.0/23
182.253.61.0-182.253.62.255
182.253.87.0/24
182.253.98.0/24
182.253.106.0/24
182.253.116.0/24
182.253.122.0-182.253.124.255
182.253.127.0/24
182.253.131.0/24
182.253.133.0/24
182.253.137.0/24
182.253.139.0/24
182.253.151.0/24
182.253.176.0/22
182.253.185.0-182.253.186.255
182.253.192.0/24
182.253.194.0/24
182.253.203.0/24
182.253.215.0/24
182.253.217.0/24
182.253.228.0/24
182.253.242.0-182.253.245.255
182.253.250.0/23
202.169.37.0-202.169.38.255
202.169.46.0/24
202.169.56.0/24
203.142.72.0/24
203.142.74.0/24
203.142.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b1:50:e5:90:12:d4:b5:39:c6:83:ae:61:7b:4a:48:6a:77:
65:4c:74:44:d2:1d:36:e4:6a:04:47:62:e9:41:8c:a9:0a:08:
90:df:ad:0f:c9:d0:ae:79:b2:87:27:34:b8:03:8f:3f:2c:15:
58:68:c0:a1:31:7e:9c:6f:cd:64:31:22:94:e0:66:91:dc:b6:
72:0b:01:aa:e7:c8:ae:19:2d:af:d4:fe:bc:27:3a:5a:74:5d:
6c:a5:01:eb:04:ac:fa:29:98:45:6a:89:d1:e0:f7:68:28:94:
2e:bc:b1:b7:12:fe:6e:51:f8:11:1a:55:4f:6c:89:56:95:fe:
35:fa:58:fe:b8:17:1d:d4:04:36:3b:fb:75:f7:3a:6e:67:cd:
4a:5f:bd:32:8c:3a:42:9f:48:22:79:ff:48:95:31:be:b5:a0:
12:49:e4:fb:53:a7:28:42:8f:c2:2e:2f:5e:f6:f5:f0:73:43:
3c:42:04:b2:9a:8e:72:fb:a1:fa:8d:a9:5c:05:37:76:77:c6:
08:2f:c6:41:92:f0:92:aa:c9:21:1b:f1:11:9e:a4:6a:55:04:
f5:58:91:18:5a:b2:a4:d2:54:69:63:0e:cc:40:b8:0b:05:f8:
4f:eb:c0:92:f6:31:65:c1:47:fa:d3:1f:d0:70:98:80:d1:cc:
81:00:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:25:42 2026 by rpki-client