Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
File: AS38482.roa (raw, json)
Hash identifier: imbvChEfO5qsV9AN6QHwv/pDSn5SHlJbnhb0Q5JwuLY=
Subject key identifier: 51:3B:3B:89:1B:BD:E8:09:AC:0A:0D:A0:11:39:9E:B1:8D:8D:F9:B2
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 539777D9ACA2B8D8B5C811EE6B041BA7CCEF3792
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
Signing time: Thu 31 Oct 2024 03:16:46 +0000
ROA not before: Thu 31 Oct 2024 03:11:46 +0000
ROA not after: Thu 30 Oct 2025 03:16:46 +0000
asID: 38482
IP address blocks: 112.78.135.0/24 maxlen: 24
112.78.136.0/24 maxlen: 24
112.78.137.0/24 maxlen: 24
112.78.139.0/24 maxlen: 24
112.78.141.0/24 maxlen: 24
112.78.144.0/24 maxlen: 24
112.78.146.0/24 maxlen: 24
112.78.149.0/24 maxlen: 24
112.78.152.0/24 maxlen: 24
112.78.170.0/24 maxlen: 24
112.78.176.0/24 maxlen: 24
112.78.186.0/24 maxlen: 24
117.102.65.0/24 maxlen: 24
117.102.70.0/24 maxlen: 24
117.102.73.0/24 maxlen: 24
117.102.79.0/24 maxlen: 24
117.102.80.0/24 maxlen: 24
117.102.82.0/24 maxlen: 24
117.102.83.0/24 maxlen: 24
117.102.84.0/24 maxlen: 24
117.102.85.0/24 maxlen: 24
117.102.86.0/24 maxlen: 24
117.102.88.0/24 maxlen: 24
117.102.90.0/24 maxlen: 24
117.102.92.0/24 maxlen: 24
117.102.94.0/24 maxlen: 24
117.102.95.0/24 maxlen: 24
117.102.98.0/24 maxlen: 24
117.102.101.0/24 maxlen: 24
117.102.102.0/24 maxlen: 24
117.102.103.0/24 maxlen: 24
117.102.104.0/24 maxlen: 24
117.102.107.0/24 maxlen: 24
117.102.113.0/24 maxlen: 24
117.102.114.0/24 maxlen: 24
117.102.116.0/24 maxlen: 24
117.102.118.0/24 maxlen: 24
117.102.120.0/24 maxlen: 24
117.102.122.0/24 maxlen: 24
118.99.74.0/24 maxlen: 24
118.99.85.0/24 maxlen: 24
118.99.86.0/24 maxlen: 24
118.99.116.0/24 maxlen: 24
182.253.0.0/24 maxlen: 24
182.253.1.0/24 maxlen: 24
182.253.2.0/24 maxlen: 24
182.253.3.0/24 maxlen: 24
182.253.5.0/24 maxlen: 24
182.253.11.0/24 maxlen: 24
182.253.15.0/24 maxlen: 24
182.253.17.0/24 maxlen: 24
182.253.18.0/24 maxlen: 24
182.253.19.0/24 maxlen: 24
182.253.23.0/24 maxlen: 24
182.253.25.0/24 maxlen: 24
182.253.27.0/24 maxlen: 24
182.253.28.0/24 maxlen: 24
182.253.29.0/24 maxlen: 24
182.253.30.0/24 maxlen: 24
182.253.34.0/24 maxlen: 24
182.253.35.0/24 maxlen: 24
182.253.40.0/24 maxlen: 24
182.253.41.0/24 maxlen: 24
182.253.45.0/24 maxlen: 24
182.253.46.0/24 maxlen: 24
182.253.47.0/24 maxlen: 24
182.253.60.0/24 maxlen: 24
182.253.68.0/24 maxlen: 24
182.253.70.0/24 maxlen: 24
182.253.71.0/24 maxlen: 24
182.253.85.0/24 maxlen: 24
182.253.100.0/24 maxlen: 24
182.253.101.0/24 maxlen: 24
182.253.120.0/24 maxlen: 24
182.253.190.0/24 maxlen: 24
182.253.195.0/24 maxlen: 24
182.253.201.0/24 maxlen: 24
182.253.204.0/24 maxlen: 24
182.253.205.0/24 maxlen: 24
182.253.210.0/24 maxlen: 24
182.253.213.0/24 maxlen: 24
182.253.221.0/24 maxlen: 24
182.253.222.0/24 maxlen: 24
182.253.226.0/24 maxlen: 24
182.253.236.0/24 maxlen: 24
182.253.237.0/24 maxlen: 24
182.253.238.0/24 maxlen: 24
182.253.239.0/24 maxlen: 24
182.253.240.0/24 maxlen: 24
202.169.38.0/24 maxlen: 24
202.169.39.0/24 maxlen: 24
202.169.41.0/24 maxlen: 24
202.169.43.0/24 maxlen: 24
202.169.46.0/24 maxlen: 24
202.169.49.0/24 maxlen: 24
202.169.51.0/24 maxlen: 24
202.169.52.0/24 maxlen: 24
202.169.54.0/24 maxlen: 24
202.169.55.0/24 maxlen: 24
202.169.56.0/24 maxlen: 24
202.169.58.0/24 maxlen: 24
202.169.62.0/24 maxlen: 24
203.142.64.0/24 maxlen: 24
203.142.65.0/24 maxlen: 24
203.142.69.0/24 maxlen: 24
203.142.70.0/24 maxlen: 24
203.142.80.0/24 maxlen: 24
203.142.81.0/24 maxlen: 24
203.142.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 25 Nov 2024 18:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:97:77:d9:ac:a2:b8:d8:b5:c8:11:ee:6b:04:1b:a7:cc:ef:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Oct 31 03:11:46 2024 GMT
Not After : Oct 30 03:16:46 2025 GMT
Subject: CN=513B3B891BBDE809AC0A0DA011399EB18D8DF9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:63:b7:d2:70:32:41:9f:8e:b9:d8:92:51:
bd:d8:7e:a8:66:a0:02:d7:8d:25:dc:5a:53:dd:b6:
97:e3:a9:14:84:fb:ed:d4:05:20:d6:44:94:c6:49:
b6:dc:4c:7b:1b:c9:38:7b:13:30:08:c9:51:f7:c4:
cc:5a:70:b0:4a:d1:f2:d3:39:3b:a2:32:ca:e7:47:
5e:10:37:ea:3f:9f:10:65:c2:71:0f:ab:57:e5:af:
7f:42:54:25:c2:bb:fe:79:89:e0:ec:09:d1:a2:cb:
3c:b3:2a:79:7d:f2:82:9f:7b:cc:2a:1d:61:89:c8:
fb:ab:d2:a7:17:c9:2d:7b:ae:f0:99:fe:9b:38:cf:
19:fc:c3:b5:40:9d:1b:c9:3d:6a:c0:30:c8:5e:f5:
10:bc:d8:07:59:36:41:9f:2d:6a:f9:46:66:e5:24:
30:5a:73:e4:93:c8:a0:a7:cf:4e:72:58:cd:75:51:
ec:7c:00:ab:2c:e7:02:ff:4c:45:e6:a8:7c:d5:94:
a8:07:e9:c5:1c:15:ac:db:e3:6d:6b:72:44:b2:ce:
0c:05:70:19:f6:c3:f7:f1:7b:30:90:9e:65:18:c0:
99:ca:ae:0d:3e:77:eb:d8:cb:ca:cf:30:e8:f2:5e:
6c:9a:ed:31:a6:c7:d3:00:e6:3c:2c:9e:44:ba:79:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:3B:89:1B:BD:E8:09:AC:0A:0D:A0:11:39:9E:B1:8D:8D:F9:B2
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS38482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.135.0-112.78.137.255
112.78.139.0/24
112.78.141.0/24
112.78.144.0/24
112.78.146.0/24
112.78.149.0/24
112.78.152.0/24
112.78.170.0/24
112.78.176.0/24
112.78.186.0/24
117.102.65.0/24
117.102.70.0/24
117.102.73.0/24
117.102.79.0-117.102.80.255
117.102.82.0-117.102.86.255
117.102.88.0/24
117.102.90.0/24
117.102.92.0/24
117.102.94.0/23
117.102.98.0/24
117.102.101.0-117.102.104.255
117.102.107.0/24
117.102.113.0-117.102.114.255
117.102.116.0/24
117.102.118.0/24
117.102.120.0/24
117.102.122.0/24
118.99.74.0/24
118.99.85.0-118.99.86.255
118.99.116.0/24
182.253.0.0/22
182.253.5.0/24
182.253.11.0/24
182.253.15.0/24
182.253.17.0-182.253.19.255
182.253.23.0/24
182.253.25.0/24
182.253.27.0-182.253.30.255
182.253.34.0/23
182.253.40.0/23
182.253.45.0-182.253.47.255
182.253.60.0/24
182.253.68.0/24
182.253.70.0/23
182.253.85.0/24
182.253.100.0/23
182.253.120.0/24
182.253.190.0/24
182.253.195.0/24
182.253.201.0/24
182.253.204.0/23
182.253.210.0/24
182.253.213.0/24
182.253.221.0-182.253.222.255
182.253.226.0/24
182.253.236.0-182.253.240.255
202.169.38.0/23
202.169.41.0/24
202.169.43.0/24
202.169.46.0/24
202.169.49.0/24
202.169.51.0-202.169.52.255
202.169.54.0-202.169.56.255
202.169.58.0/24
202.169.62.0/24
203.142.64.0/23
203.142.69.0-203.142.70.255
203.142.80.0/23
203.142.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6c:83:ab:c5:92:e3:a5:ef:ba:44:f2:15:a1:f8:a4:4f:c2:
91:3f:13:eb:5b:cd:db:d6:a0:0e:d2:ce:ac:8a:6c:c3:b1:b3:
4d:0d:33:51:65:f6:cd:88:1a:28:88:c2:8d:07:f9:bc:69:53:
39:3a:cd:24:ff:bd:8d:52:a3:4e:1f:87:26:08:e6:7f:2c:73:
10:1e:99:35:1c:cd:b3:be:3d:a8:c4:90:11:67:ab:c1:ce:b5:
6d:9d:a4:2e:8f:ed:25:27:4c:55:b1:8c:2d:cf:20:de:2c:69:
34:8f:ae:6e:1f:d6:9e:ef:18:35:4c:7e:5b:9f:0d:9a:c0:d0:
70:80:e1:e3:db:eb:1b:ae:1f:87:5a:ef:c2:70:27:32:05:1f:
5e:f2:4b:65:13:6f:e4:ea:6a:4b:f4:9f:0c:6a:3e:ef:c8:1e:
36:8f:11:8e:bc:94:93:a4:44:2f:0c:12:ed:3e:12:25:38:1a:
7c:4f:d3:56:ea:16:74:8b:e6:2d:a5:7b:b2:61:ba:11:ef:7d:
2d:61:fc:4c:3c:65:5e:f9:de:a9:2f:b5:1e:59:e9:97:33:f6:
85:26:cd:58:79:3b:ca:08:16:4c:8b:dd:fe:e0:bc:aa:02:9c:
c3:ac:fa:6a:05:8a:fb:cd:7b:da:26:ba:3b:13:7c:ca:11:b0:
82:9b:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org