Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
File: AS38482.roa (raw, json)
Hash identifier: 12/Au5ktDjPZHc9Iz0qq8PY1HbxHsUIh8x0RMTJueEA=
Subject key identifier: BB:5B:90:AE:79:B4:AD:F7:4C:F7:A9:E5:6D:39:94:C5:CF:CF:D0:EB
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 5A5FD3358621CD7EF77BA0BE7B8BC55A118D9917
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
Signing time: Mon 17 Feb 2025 04:30:53 +0000
ROA not before: Mon 17 Feb 2025 04:25:53 +0000
ROA not after: Mon 16 Feb 2026 04:30:53 +0000
asID: 38482
IP address blocks: 112.78.135.0/24 maxlen: 24
112.78.136.0/24 maxlen: 24
112.78.137.0/24 maxlen: 24
112.78.139.0/24 maxlen: 24
112.78.141.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.146.0/24 maxlen: 24
112.78.149.0/24 maxlen: 24
112.78.152.0/24 maxlen: 24
112.78.170.0/24 maxlen: 24
112.78.176.0/24 maxlen: 24
112.78.186.0/24 maxlen: 24
112.78.187.0/24 maxlen: 24
117.102.65.0/24 maxlen: 24
117.102.70.0/24 maxlen: 24
117.102.73.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.80.0/24 maxlen: 24
117.102.82.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.84.0/24 maxlen: 24
117.102.85.0/24 maxlen: 24
117.102.86.0/24 maxlen: 24
117.102.88.0/24 maxlen: 24
117.102.90.0/24 maxlen: 24
117.102.92.0/24 maxlen: 24
117.102.94.0/24 maxlen: 24
117.102.95.0/24 maxlen: 24
117.102.98.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.103.0/24 maxlen: 24
117.102.104.0/24 maxlen: 24
117.102.107.0/24 maxlen: 24
117.102.113.0/24 maxlen: 24
117.102.114.0/24 maxlen: 24
117.102.116.0/24 maxlen: 24
117.102.118.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
117.102.122.0/24 maxlen: 24
118.99.74.0/24 maxlen: 24
118.99.85.0/24 maxlen: 24
118.99.86.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
182.253.0.0/24 maxlen: 24
182.253.1.0/24 maxlen: 24
182.253.2.0/24 maxlen: 24
182.253.3.0/24 maxlen: 24
182.253.5.0/24 maxlen: 24
182.253.6.0/24 maxlen: 24
182.253.11.0/24 maxlen: 24
182.253.15.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.18.0/24 maxlen: 24
182.253.19.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.25.0/24 maxlen: 24
182.253.27.0/24 maxlen: 24
182.253.28.0/24 maxlen: 24
182.253.29.0/24 maxlen: 24
182.253.30.0/24 maxlen: 24
182.253.34.0/24 maxlen: 24
182.253.35.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.41.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.46.0/24 maxlen: 24
182.253.47.0/24 maxlen: 24
182.253.60.0/24 maxlen: 24
182.253.68.0/24 maxlen: 24
182.253.70.0/24 maxlen: 24
182.253.71.0/24 maxlen: 24
182.253.85.0/24 maxlen: 24
182.253.100.0/24 maxlen: 24
182.253.101.0/24 maxlen: 24
182.253.120.0/24 maxlen: 24
182.253.190.0/24 maxlen: 24
182.253.195.0/24 maxlen: 24
182.253.201.0/24 maxlen: 24
182.253.204.0/24 maxlen: 24
182.253.205.0/24 maxlen: 24
182.253.210.0/24 maxlen: 24
182.253.213.0/24 maxlen: 24
182.253.221.0/24 maxlen: 24
182.253.222.0/24 maxlen: 24
182.253.226.0/24 maxlen: 24
182.253.236.0/24 maxlen: 24
182.253.237.0/24 maxlen: 24
182.253.238.0/24 maxlen: 24
182.253.239.0/24 maxlen: 24
182.253.240.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.39.0/24 maxlen: 24
202.169.41.0/24 maxlen: 24
202.169.43.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.49.0/24 maxlen: 24
202.169.51.0/24 maxlen: 24
202.169.52.0/24 maxlen: 24
202.169.54.0/24 maxlen: 24
202.169.55.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
202.169.58.0/24 maxlen: 24
202.169.62.0/24 maxlen: 24
203.142.64.0/24 maxlen: 24
203.142.65.0/24 maxlen: 24
203.142.69.0/24 maxlen: 24
203.142.70.0/24 maxlen: 24
203.142.80.0/24 maxlen: 24
203.142.81.0/24 maxlen: 24
203.142.85.0/24 maxlen: 24
203.142.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Apr 2025 10:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5f:d3:35:86:21:cd:7e:f7:7b:a0:be:7b:8b:c5:5a:11:8d:99:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Feb 17 04:25:53 2025 GMT
Not After : Feb 16 04:30:53 2026 GMT
Subject: CN=BB5B90AE79B4ADF74CF7A9E56D3994C5CFCFD0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:16:59:f3:8d:09:a6:5b:1f:6a:09:a5:5a:
6b:9f:54:fd:bc:41:a1:36:be:aa:89:95:87:c2:60:
28:b9:06:7d:2d:cf:50:19:94:49:79:3f:51:8a:30:
23:76:64:af:c1:18:7a:a4:1d:e5:38:65:9f:c3:48:
93:e7:6e:36:ac:6a:09:8c:df:81:ab:cc:b8:88:1e:
91:74:90:66:fc:8b:e8:4d:32:2b:aa:20:2d:df:b6:
85:e8:34:a6:ea:91:db:cf:25:c3:e7:2f:bf:75:b3:
65:65:f6:4b:8c:c1:b5:68:d8:cf:d5:88:0d:c4:30:
10:c8:4d:8e:0f:7b:1a:7a:6b:ee:0b:b6:26:c8:75:
65:b5:5a:04:73:d1:7d:13:b8:38:71:99:c5:ed:25:
09:74:a2:f5:ce:b6:97:ba:a5:72:08:65:91:08:3f:
47:bc:2c:ff:19:0d:4b:be:27:1f:c0:8c:35:12:2b:
b1:46:6c:4a:3f:27:eb:4f:ef:40:63:27:de:94:1e:
70:65:07:de:db:f7:ab:ea:6a:e2:62:4a:39:d9:f7:
bc:18:82:4f:fd:e5:46:d5:97:2d:5d:64:4c:6b:2a:
3d:8f:29:e2:22:f9:9e:ab:74:70:6f:4e:58:0d:45:
68:27:07:d5:83:85:f1:36:11:14:7c:38:08:cf:0b:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:90:AE:79:B4:AD:F7:4C:F7:A9:E5:6D:39:94:C5:CF:CF:D0:EB
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.135.0-112.78.137.255
112.78.139.0/24
112.78.141.0/24
112.78.144.0/24
112.78.146.0/24
112.78.149.0/24
112.78.152.0/24
112.78.170.0/24
112.78.176.0/24
112.78.186.0/23
117.102.65.0/24
117.102.70.0/24
117.102.73.0/24
117.102.79.0-117.102.80.255
117.102.82.0-117.102.86.255
117.102.88.0/24
117.102.90.0/24
117.102.92.0/24
117.102.94.0/23
117.102.98.0/24
117.102.101.0-117.102.104.255
117.102.107.0/24
117.102.113.0-117.102.114.255
117.102.116.0/24
117.102.118.0/24
117.102.120.0/24
117.102.122.0/24
118.99.74.0/24
118.99.85.0-118.99.86.255
118.99.116.0/24
182.253.0.0/22
182.253.5.0-182.253.6.255
182.253.11.0/24
182.253.15.0/24
182.253.17.0-182.253.19.255
182.253.23.0/24
182.253.25.0/24
182.253.27.0-182.253.30.255
182.253.34.0/23
182.253.40.0/23
182.253.45.0-182.253.47.255
182.253.60.0/24
182.253.68.0/24
182.253.70.0/23
182.253.85.0/24
182.253.100.0/23
182.253.120.0/24
182.253.190.0/24
182.253.195.0/24
182.253.201.0/24
182.253.204.0/23
182.253.210.0/24
182.253.213.0/24
182.253.221.0-182.253.222.255
182.253.226.0/24
182.253.236.0-182.253.240.255
202.169.38.0/23
202.169.41.0/24
202.169.43.0/24
202.169.46.0/24
202.169.49.0/24
202.169.51.0-202.169.52.255
202.169.54.0-202.169.56.255
202.169.58.0/24
202.169.62.0/24
203.142.64.0/23
203.142.69.0-203.142.70.255
203.142.80.0/23
203.142.85.0-203.142.86.255
Signature Algorithm: sha256WithRSAEncryption
56:8a:d4:b2:ea:b8:92:d9:4a:e6:46:71:4e:7c:98:84:dd:cd:
c8:a4:b9:0a:0b:d9:14:ae:24:2f:26:62:b9:e5:fb:9b:72:04:
5a:4f:8e:7e:18:e4:32:1d:7c:69:41:16:de:3d:c7:d5:08:f8:
37:65:32:d3:70:44:5d:b9:d2:ed:b1:a8:0f:a2:b2:e4:b4:31:
56:8f:38:8f:06:26:a1:b4:f2:f0:36:61:81:f6:5a:34:66:38:
d9:d5:63:05:6a:1a:0e:73:5b:45:d8:eb:98:b7:22:1a:33:ca:
ab:5f:d7:70:3a:ba:e8:6a:2c:d3:1f:81:36:db:ab:6d:24:b5:
4b:c4:db:a8:12:3a:22:3b:93:50:e7:81:a7:e1:a4:c2:45:e1:
4f:c0:8c:ef:4a:89:b0:ac:45:60:69:9c:82:8d:42:e3:4d:7b:
8e:6a:17:98:87:9f:f6:a1:0e:d4:1a:d6:a4:68:fe:19:68:38:
40:ae:c2:6b:fe:69:8b:12:92:c0:d8:f6:a4:c4:8b:ea:a1:fd:
11:1d:33:dd:84:01:6f:03:88:fb:a9:20:35:56:c3:bd:3e:0e:
3f:78:30:0e:6d:04:c4:ea:f5:65:dc:b1:85:ad:66:e5:0c:a5:
b1:9a:a4:8f:45:b0:70:89:a6:11:9a:ae:3a:c7:cf:a3:cc:74:
29:ac:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:03:13 2025 by rpki-client