Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
File: AS38482.roa (raw, json)
Hash identifier: KA9nG8aT17JSvx4ZMkbe/1LN/Gj81luh6YCCtc3PLq4=
Subject key identifier: 5B:AB:56:A4:6F:B4:D1:3B:D0:AB:4F:23:33:B8:CA:F6:03:30:C8:0E
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 1872278C217EB610A1C660D8815ECD4FBE0E5086
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
Signing time: Sun 03 May 2026 02:26:24 +0000
ROA not before: Sun 03 May 2026 02:21:24 +0000
ROA not after: Sun 02 May 2027 02:26:24 +0000
asID: 38482
IP address blocks: 112.78.135.0/24 maxlen: 24
112.78.136.0/24 maxlen: 24
112.78.137.0/24 maxlen: 24
112.78.139.0/24 maxlen: 24
112.78.141.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.146.0/24 maxlen: 24
112.78.149.0/24 maxlen: 24
112.78.152.0/24 maxlen: 24
112.78.170.0/24 maxlen: 24
112.78.176.0/24 maxlen: 24
112.78.184.0/24 maxlen: 24
112.78.186.0/24 maxlen: 24
112.78.187.0/24 maxlen: 24
117.102.65.0/24 maxlen: 24
117.102.70.0/24 maxlen: 24
117.102.73.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.80.0/24 maxlen: 24
117.102.82.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.84.0/24 maxlen: 24
117.102.85.0/24 maxlen: 24
117.102.86.0/24 maxlen: 24
117.102.88.0/24 maxlen: 24
117.102.90.0/24 maxlen: 24
117.102.92.0/24 maxlen: 24
117.102.94.0/24 maxlen: 24
117.102.95.0/24 maxlen: 24
117.102.98.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.103.0/24 maxlen: 24
117.102.104.0/24 maxlen: 24
117.102.107.0/24 maxlen: 24
117.102.113.0/24 maxlen: 24
117.102.114.0/24 maxlen: 24
117.102.116.0/24 maxlen: 24
117.102.118.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
117.102.122.0/24 maxlen: 24
118.99.74.0/24 maxlen: 24
118.99.85.0/24 maxlen: 24
118.99.86.0/24 maxlen: 24
182.253.0.0/24 maxlen: 24
182.253.1.0/24 maxlen: 24
182.253.2.0/24 maxlen: 24
182.253.3.0/24 maxlen: 24
182.253.5.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.11.0/24 maxlen: 24
182.253.15.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.18.0/24 maxlen: 24
182.253.19.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.25.0/24 maxlen: 24
182.253.27.0/24 maxlen: 24
182.253.28.0/24 maxlen: 24
182.253.29.0/24 maxlen: 24
182.253.30.0/24 maxlen: 24
182.253.33.0/24 maxlen: 24
182.253.34.0/24 maxlen: 24
182.253.35.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.41.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.46.0/24 maxlen: 24
182.253.47.0/24 maxlen: 24
182.253.60.0/24 maxlen: 24
182.253.68.0/24 maxlen: 24
182.253.69.0/24 maxlen: 24
182.253.70.0/24 maxlen: 24
182.253.71.0/24 maxlen: 24
182.253.85.0/24 maxlen: 24
182.253.100.0/24 maxlen: 24
182.253.101.0/24 maxlen: 24
182.253.120.0/24 maxlen: 24
182.253.190.0/24 maxlen: 24
182.253.195.0/24 maxlen: 24
182.253.201.0/24 maxlen: 24
182.253.204.0/24 maxlen: 24
182.253.205.0/24 maxlen: 24
182.253.210.0/24 maxlen: 24
182.253.213.0/24 maxlen: 24
182.253.221.0/24 maxlen: 24
182.253.222.0/24 maxlen: 24
182.253.225.0/24 maxlen: 24
182.253.226.0/24 maxlen: 24
182.253.236.0/24 maxlen: 24
182.253.237.0/24 maxlen: 24
182.253.238.0/24 maxlen: 24
182.253.239.0/24 maxlen: 24
182.253.240.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.39.0/24 maxlen: 24
202.169.41.0/24 maxlen: 24
202.169.43.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.49.0/24 maxlen: 24
202.169.51.0/24 maxlen: 24
202.169.52.0/24 maxlen: 24
202.169.54.0/24 maxlen: 24
202.169.55.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
202.169.58.0/24 maxlen: 24
202.169.62.0/24 maxlen: 24
203.142.64.0/24 maxlen: 24
203.142.65.0/24 maxlen: 24
203.142.69.0/24 maxlen: 24
203.142.70.0/24 maxlen: 24
203.142.80.0/24 maxlen: 24
203.142.81.0/24 maxlen: 24
203.142.83.0/24 maxlen: 24
203.142.85.0/24 maxlen: 24
203.142.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 12:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:72:27:8c:21:7e:b6:10:a1:c6:60:d8:81:5e:cd:4f:be:0e:50:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: May 3 02:21:24 2026 GMT
Not After : May 2 02:26:24 2027 GMT
Subject: CN=5BAB56A46FB4D13BD0AB4F2333B8CAF60330C80E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:0c:f0:79:3c:72:c3:14:00:d0:75:85:f6:
05:a6:9e:82:4b:58:d8:de:00:e2:f1:23:69:ed:cc:
4b:e3:0b:49:eb:94:3c:09:df:33:9b:77:d2:e1:f3:
2b:7a:e8:d7:cd:f8:6f:e6:67:f6:6a:a5:af:37:2c:
d2:4e:b3:49:a0:3b:84:36:f4:20:a4:7b:d9:c4:d2:
74:b8:95:52:e8:39:cf:30:f9:40:fa:70:ce:c6:6c:
bb:71:96:af:df:4f:d7:d8:a9:d9:ea:17:25:e1:00:
2f:99:53:67:9c:11:a2:7e:cb:68:c1:fe:09:30:94:
27:b1:a9:42:29:e3:a6:1d:42:55:ef:7b:91:6f:24:
16:19:4d:3c:a0:b9:5d:bb:fb:8f:7e:9d:77:02:c7:
e6:92:f4:18:64:eb:0f:30:99:20:e4:cc:66:c5:e7:
54:78:ed:eb:f3:b7:f3:5a:46:d2:36:f6:b6:2f:cc:
a4:bf:e9:1b:f5:e9:83:88:75:44:d9:44:be:2f:41:
05:85:8c:85:a3:93:88:41:e0:b2:4f:0f:12:54:fe:
f2:db:9d:dc:2d:c3:f4:20:cf:fe:88:8b:c2:b1:e8:
14:a9:6f:37:f2:b8:8e:37:2f:9b:04:ec:fb:2a:02:
bf:9a:81:e0:48:98:db:2e:c8:a9:58:4d:c4:ea:6d:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:56:A4:6F:B4:D1:3B:D0:AB:4F:23:33:B8:CA:F6:03:30:C8:0E
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.135.0-112.78.137.255
112.78.139.0/24
112.78.141.0/24
112.78.144.0/24
112.78.146.0/24
112.78.149.0/24
112.78.152.0/24
112.78.170.0/24
112.78.176.0/24
112.78.184.0/24
112.78.186.0/23
117.102.65.0/24
117.102.70.0/24
117.102.73.0/24
117.102.79.0-117.102.80.255
117.102.82.0-117.102.86.255
117.102.88.0/24
117.102.90.0/24
117.102.92.0/24
117.102.94.0/23
117.102.98.0/24
117.102.101.0-117.102.104.255
117.102.107.0/24
117.102.113.0-117.102.114.255
117.102.116.0/24
117.102.118.0/24
117.102.120.0/24
117.102.122.0/24
118.99.74.0/24
118.99.85.0-118.99.86.255
182.253.0.0/22
182.253.5.0-182.253.6.255
182.253.11.0/24
182.253.15.0/24
182.253.17.0-182.253.19.255
182.253.23.0/24
182.253.25.0/24
182.253.27.0-182.253.30.255
182.253.33.0-182.253.35.255
182.253.40.0/23
182.253.45.0-182.253.47.255
182.253.60.0/24
182.253.68.0/22
182.253.85.0/24
182.253.100.0/23
182.253.120.0/24
182.253.190.0/24
182.253.195.0/24
182.253.201.0/24
182.253.204.0/23
182.253.210.0/24
182.253.213.0/24
182.253.221.0-182.253.222.255
182.253.225.0-182.253.226.255
182.253.236.0-182.253.240.255
202.169.38.0/23
202.169.41.0/24
202.169.43.0/24
202.169.46.0/24
202.169.49.0/24
202.169.51.0-202.169.52.255
202.169.54.0-202.169.56.255
202.169.58.0/24
202.169.62.0/24
203.142.64.0/23
203.142.69.0-203.142.70.255
203.142.80.0/23
203.142.83.0/24
203.142.85.0-203.142.86.255
Signature Algorithm: sha256WithRSAEncryption
20:d9:12:f9:c9:8b:c3:d7:e5:ae:6d:7b:d8:01:78:4f:d5:15:
71:49:a0:c3:31:78:8a:92:d6:6e:67:e9:0a:e3:60:b6:cf:02:
f9:e4:ef:e6:a7:89:72:33:fd:2f:8e:b1:6a:ac:21:56:54:9a:
bc:76:eb:d4:2b:b4:4f:53:35:63:74:69:25:4f:fd:e2:cc:2a:
27:6f:80:d8:e3:53:86:22:2f:20:8b:43:6b:ff:e6:fe:ba:6e:
11:8a:6f:69:66:81:72:58:ee:c0:32:07:50:dd:38:e7:c0:5a:
6f:8c:4c:bf:d1:ba:d3:a2:b4:67:59:67:af:62:d2:c1:49:02:
52:9d:e5:68:3d:95:01:91:a6:22:8d:d0:0e:18:dd:f6:e9:ec:
58:3e:8b:40:ed:15:44:67:8f:72:4f:94:35:b1:5a:a9:f6:b5:
70:10:cd:78:f8:91:a8:14:c4:65:ca:56:13:6a:56:88:27:38:
ea:b6:38:7d:71:73:dc:dd:41:7c:78:8b:1a:df:e9:da:00:fb:
90:ba:4e:78:52:6e:d8:7d:8f:72:20:6f:5b:06:87:18:5c:ef:
f4:e5:b4:8d:0b:52:37:68:c3:23:9c:83:1b:dc:4e:fb:06:89:
34:b0:d2:95:bd:6f:ff:12:1b:70:0b:6c:60:86:23:d0:84:78:
76:dc:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 23:38:54 2026 by rpki-client