Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
File: AS38482.roa (raw, json)
Hash identifier: w8pwA89FWHV5EX9UPgiOH2znfZMlzEjMKW8mwnkiCb8=
Subject key identifier: 13:2B:D0:09:2D:7F:52:5A:15:49:19:3C:37:7B:89:7B:E1:4A:2E:2A
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 7A757A32D2014256BCB0B32C432763C912CCAB72
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
Signing time: Wed 14 Oct 2026 10:48:01 +0000
ROA not before: Wed 14 Oct 2026 10:43:01 +0000
ROA not after: Wed 13 Oct 2027 10:48:01 +0000
asID: 38482
IP address blocks: 112.78.134.0/24 maxlen: 24
112.78.135.0/24 maxlen: 24
112.78.136.0/24 maxlen: 24
112.78.137.0/24 maxlen: 24
112.78.139.0/24 maxlen: 24
112.78.140.0/24 maxlen: 24
112.78.141.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.146.0/24 maxlen: 24
112.78.149.0/24 maxlen: 24
112.78.152.0/24 maxlen: 24
112.78.170.0/24 maxlen: 24
112.78.176.0/24 maxlen: 24
112.78.184.0/24 maxlen: 24
112.78.186.0/24 maxlen: 24
112.78.187.0/24 maxlen: 24
117.102.65.0/24 maxlen: 24
117.102.70.0/24 maxlen: 24
117.102.73.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.80.0/24 maxlen: 24
117.102.82.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.84.0/24 maxlen: 24
117.102.85.0/24 maxlen: 24
117.102.86.0/24 maxlen: 24
117.102.88.0/24 maxlen: 24
117.102.90.0/24 maxlen: 24
117.102.92.0/24 maxlen: 24
117.102.94.0/24 maxlen: 24
117.102.95.0/24 maxlen: 24
117.102.98.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.103.0/24 maxlen: 24
117.102.104.0/24 maxlen: 24
117.102.107.0/24 maxlen: 24
117.102.113.0/24 maxlen: 24
117.102.114.0/24 maxlen: 24
117.102.116.0/24 maxlen: 24
117.102.118.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
117.102.122.0/24 maxlen: 24
118.99.74.0/24 maxlen: 24
118.99.85.0/24 maxlen: 24
118.99.86.0/24 maxlen: 24
182.253.0.0/24 maxlen: 24
182.253.1.0/24 maxlen: 24
182.253.2.0/24 maxlen: 24
182.253.3.0/24 maxlen: 24
182.253.5.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.11.0/24 maxlen: 24
182.253.15.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.18.0/24 maxlen: 24
182.253.19.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.25.0/24 maxlen: 24
182.253.27.0/24 maxlen: 24
182.253.28.0/24 maxlen: 24
182.253.29.0/24 maxlen: 24
182.253.30.0/24 maxlen: 24
182.253.33.0/24 maxlen: 24
182.253.34.0/24 maxlen: 24
182.253.35.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.41.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.46.0/24 maxlen: 24
182.253.47.0/24 maxlen: 24
182.253.60.0/24 maxlen: 24
182.253.68.0/24 maxlen: 24
182.253.69.0/24 maxlen: 24
182.253.70.0/24 maxlen: 24
182.253.71.0/24 maxlen: 24
182.253.85.0/24 maxlen: 24
182.253.100.0/24 maxlen: 24
182.253.101.0/24 maxlen: 24
182.253.120.0/24 maxlen: 24
182.253.135.0/24 maxlen: 24
182.253.190.0/24 maxlen: 24
182.253.195.0/24 maxlen: 24
182.253.201.0/24 maxlen: 24
182.253.204.0/24 maxlen: 24
182.253.205.0/24 maxlen: 24
182.253.206.0/24 maxlen: 24
182.253.210.0/24 maxlen: 24
182.253.213.0/24 maxlen: 24
182.253.221.0/24 maxlen: 24
182.253.222.0/24 maxlen: 24
182.253.225.0/24 maxlen: 24
182.253.226.0/24 maxlen: 24
182.253.236.0/24 maxlen: 24
182.253.237.0/24 maxlen: 24
182.253.238.0/24 maxlen: 24
182.253.239.0/24 maxlen: 24
182.253.240.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.39.0/24 maxlen: 24
202.169.41.0/24 maxlen: 24
202.169.43.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.49.0/24 maxlen: 24
202.169.51.0/24 maxlen: 24
202.169.52.0/24 maxlen: 24
202.169.54.0/24 maxlen: 24
202.169.55.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
202.169.58.0/24 maxlen: 24
202.169.62.0/24 maxlen: 24
203.142.64.0/24 maxlen: 24
203.142.65.0/24 maxlen: 24
203.142.69.0/24 maxlen: 24
203.142.70.0/24 maxlen: 24
203.142.80.0/24 maxlen: 24
203.142.81.0/24 maxlen: 24
203.142.83.0/24 maxlen: 24
203.142.85.0/24 maxlen: 24
203.142.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 11:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:75:7a:32:d2:01:42:56:bc:b0:b3:2c:43:27:63:c9:12:cc:ab:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: Oct 14 10:43:01 2026 GMT
Not After : Oct 13 10:48:01 2027 GMT
Subject: CN=132BD0092D7F525A1549193C377B897BE14A2E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:20:0d:28:02:0f:8c:e1:84:e1:e1:12:d8:
5f:b4:47:3c:67:48:be:68:cf:b2:05:5c:20:df:22:
bd:d1:6b:13:70:ef:1c:10:7c:a9:42:99:15:74:a1:
6c:a5:a7:90:8a:e9:10:d3:ec:be:4e:91:67:c5:65:
17:04:07:d0:b2:c7:21:19:28:52:8d:0f:83:98:f7:
3d:4f:48:fa:4b:3b:3c:d5:b5:fc:a1:f4:c6:7b:ca:
2f:66:e8:67:1f:b3:99:bd:15:f9:55:8b:5b:98:92:
38:a9:e2:5e:59:0d:fc:c6:4c:30:37:02:16:c0:d4:
d9:39:ad:8f:97:b3:9c:ad:35:2e:01:14:32:21:9a:
80:6c:ff:f3:ad:f3:27:46:30:3d:b3:70:5f:c1:5c:
1c:1a:1e:28:3e:fd:b0:49:35:1f:0e:29:39:6b:e7:
a5:02:63:c2:9b:e9:b8:5b:2a:da:ae:0d:82:d7:1c:
2b:ff:7a:97:0c:33:47:af:c4:c9:51:58:12:b2:9d:
44:45:7e:1e:39:f0:f3:17:3b:c4:09:bd:19:8a:fa:
10:45:e8:5e:68:d6:32:6e:65:71:38:90:90:c3:5c:
f4:34:4a:a8:87:3f:a0:18:49:00:9a:a2:1e:1a:97:
5e:a5:08:45:ab:f7:f3:b4:5b:84:1a:38:d6:c8:ba:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2B:D0:09:2D:7F:52:5A:15:49:19:3C:37:7B:89:7B:E1:4A:2E:2A
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.134.0-112.78.137.255
112.78.139.0-112.78.141.255
112.78.144.0/24
112.78.146.0/24
112.78.149.0/24
112.78.152.0/24
112.78.170.0/24
112.78.176.0/24
112.78.184.0/24
112.78.186.0/23
117.102.65.0/24
117.102.70.0/24
117.102.73.0/24
117.102.79.0-117.102.80.255
117.102.82.0-117.102.86.255
117.102.88.0/24
117.102.90.0/24
117.102.92.0/24
117.102.94.0/23
117.102.98.0/24
117.102.101.0-117.102.104.255
117.102.107.0/24
117.102.113.0-117.102.114.255
117.102.116.0/24
117.102.118.0/24
117.102.120.0/24
117.102.122.0/24
118.99.74.0/24
118.99.85.0-118.99.86.255
182.253.0.0/22
182.253.5.0-182.253.6.255
182.253.11.0/24
182.253.15.0/24
182.253.17.0-182.253.19.255
182.253.23.0/24
182.253.25.0/24
182.253.27.0-182.253.30.255
182.253.33.0-182.253.35.255
182.253.40.0/23
182.253.45.0-182.253.47.255
182.253.60.0/24
182.253.68.0/22
182.253.85.0/24
182.253.100.0/23
182.253.120.0/24
182.253.135.0/24
182.253.190.0/24
182.253.195.0/24
182.253.201.0/24
182.253.204.0-182.253.206.255
182.253.210.0/24
182.253.213.0/24
182.253.221.0-182.253.222.255
182.253.225.0-182.253.226.255
182.253.236.0-182.253.240.255
202.169.38.0/23
202.169.41.0/24
202.169.43.0/24
202.169.46.0/24
202.169.49.0/24
202.169.51.0-202.169.52.255
202.169.54.0-202.169.56.255
202.169.58.0/24
202.169.62.0/24
203.142.64.0/23
203.142.69.0-203.142.70.255
203.142.80.0/23
203.142.83.0/24
203.142.85.0-203.142.86.255
Signature Algorithm: sha256WithRSAEncryption
21:08:c3:09:4b:c9:cc:aa:01:b3:99:a3:ff:fb:51:c8:dd:d7:
05:31:d5:06:78:90:ed:04:11:52:9a:ff:fa:a1:88:4a:6c:09:
1e:f5:b6:f2:38:2f:0c:37:31:3c:0e:79:a8:32:57:f0:00:93:
10:e8:83:cc:8b:00:44:7d:17:99:16:7c:3c:e7:7c:c7:e4:fc:
36:87:cc:2c:43:75:e7:f7:7a:5f:a9:aa:8f:64:f6:56:d9:d5:
fc:ab:98:a1:cb:7c:1c:57:71:a9:21:60:c8:d7:6c:36:23:45:
0e:5f:7a:0c:f5:88:4f:35:93:21:d4:85:13:23:3d:e9:c4:f4:
37:e6:5e:f3:66:5a:d8:8a:30:f0:d0:a2:ba:ac:74:e7:ca:ae:
80:aa:97:4d:cf:27:fb:dc:9e:bb:bb:56:97:c2:9e:48:3b:7b:
71:a3:c1:5e:d3:10:0c:a8:2a:1f:79:c2:ad:1f:1f:a9:73:ab:
68:5f:2c:fc:96:43:d1:ce:be:86:f8:45:8e:d6:dd:20:d3:99:
62:65:1e:e9:27:fe:f2:ef:03:5e:a2:2d:5a:6c:cd:70:1e:40:
4d:73:45:89:2d:4a:00:49:14:dd:70:27:f6:63:ca:3b:37:bb:
56:25:bf:7b:ec:cb:97:b0:55:cd:66:12:27:a6:e8:e0:81:6d:
13:99:c1:10
-----BEGIN CERTIFICATE-----
MIIHNjCCBh6gAwIBAgIUenV6MtIBQla8sLMsQydjyRLMq3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU0NDhGNkMxRjQ0ODEwQ0YzOTQ2OTBGMUIyODMxQjlF
NkU0QTkyRTAeFw0yNjEwMTQxMDQzMDFaFw0yNzEwMTMxMDQ4MDFaMDMxMTAvBgNV
BAMTKDEzMkJEMDA5MkQ3RjUyNUExNTQ5MTkzQzM3N0I4OTdCRTE0QTJFMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjyANKAIPjOGE4eES2F+0Rzxn
SL5oz7IFXCDfIr3RaxNw7xwQfKlCmRV0oWylp5CK6RDT7L5OkWfFZRcEB9CyxyEZ
KFKND4OY9z1PSPpLOzzVtfyh9MZ7yi9m6Gcfs5m9FflVi1uYkjip4l5ZDfzGTDA3
AhbA1Nk5rY+Xs5ytNS4BFDIhmoBs//Ot8ydGMD2zcF/BXBwaHig+/bBJNR8OKTlr
56UCY8Kb6bhbKtquDYLXHCv/epcMM0evxMlRWBKynURFfh458PMXO8QJvRmK+hBF
6F5o1jJuZXE4kJDDXPQ0SqiHP6AYSQCaoh4al16lCEWr9/O0W4QaONbIuuQbAgMB
AAGjggRAMIIEPDAdBgNVHQ4EFgQUEyvQCS1/UloVSRk8N3uJe+FKLiowHwYDVR0j
BBgwFoAU9USPbB9EgQzzlGkPGygxuebkqS4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzk5M2YzNTAtYjc1Ni00OTE2LThkODQtNDg0ZjAyNWRmZmNjLzAvRjU0NDhGNkMx
RjQ0ODEwQ0YzOTQ2OTBGMUIyODMxQjlFNkU0QTkyRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNTQ0OEY2QzFGNDQ4MTBDRjM5NDY5MEYxQjI4MzFCOUU2RTRB
OTJFLmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBr
aS1yc3luYy5pZG5pYy5uZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00
ODRmMDI1ZGZmY2MvMC9BUzM4NDgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMIICXwYIKwYBBQUHAQcBAf8EggJOMIICSjCCAkYEAgABMIICPjAMAwQBcE6G
AwQBcE6IMAwDBABwTosDBAFwTowDBABwTpADBABwTpIDBABwTpUDBABwTpgDBABw
TqoDBABwTrADBABwTrgDBAFwTroDBAB1ZkEDBAB1ZkYDBAB1ZkkwDAMEAHVmTwME
AHVmUDAMAwQBdWZSAwQAdWZWAwQAdWZYAwQAdWZaAwQAdWZcAwQBdWZeAwQAdWZi
MAwDBAB1ZmUDBAB1ZmgDBAB1ZmswDAMEAHVmcQMEAHVmcgMEAHVmdAMEAHVmdgME
AHVmeAMEAHVmegMEAHZjSjAMAwQAdmNVAwQAdmNWAwQCtv0AMAwDBAC2/QUDBAC2
/QYDBAC2/QsDBAC2/Q8wDAMEALb9EQMEArb9EAMEALb9FwMEALb9GTAMAwQAtv0b
AwQAtv0eMAwDBAC2/SEDBAK2/SADBAG2/SgwDAMEALb9LQMEBLb9IAMEALb9PAME
Arb9RAMEALb9VQMEAbb9ZAMEALb9eAMEALb9hwMEALb9vgMEALb9wwMEALb9yTAM
AwQCtv3MAwQAtv3OAwQAtv3SAwQAtv3VMAwDBAC2/d0DBAC2/d4wDAMEALb94QME
ALb94jAMAwQCtv3sAwQAtv3wAwQByqkmAwQAyqkpAwQAyqkrAwQAyqkuAwQAyqkx
MAwDBADKqTMDBADKqTQwDAMEAcqpNgMEAMqpOAMEAMqpOgMEAMqpPgMEAcuOQDAM
AwQAy45FAwQAy45GAwQBy45QAwQAy45TMAwDBADLjlUDBADLjlYwDQYJKoZIhvcN
AQELBQADggEBACEIwwlLycyqAbOZo//7Ucjd1wUx1QZ4kO0EEVKa//qhiEpsCR71
tvI4Lww3MTwOeagyV/AAkxDog8yLAER9F5kWfDznfMfk/DaHzCxDdef3el+pqo9k
9lbZ1fyrmKHLfBxXcakhYMjXbDYjRQ5fegz1iE81kyHUhRMjPenE9DfmXvNmWtiK
MPDQorqsdOfKroCql03PJ/vcnru7VpfCnkg7e3GjwV7TEAyoKh95wq0fH6lzq2hf
LPyWQ9HOvob4RY7W3SDTmWJlHukn/vLvA16iLVpszXAeQE1zRYktSgBJFN1wJ/Zj
yjs3u1Ylv3vsy5ewVc1mEiem6OCBbROZwRA=
-----END CERTIFICATE-----
Generated at Wed Oct 14 15:08:08 2026 by rpki-client