Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38496.roa
File: AS38496.roa (raw, json)
Hash identifier: bV0ZpXzKQrTrN5AvvrLXXrbcm+ZFBPDQJ2QXdQuJYng=
Subject key identifier: 4B:C3:A6:E4:A9:22:A4:84:A6:60:6A:FF:9A:58:B5:93:5F:5F:1B:E0
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 7A103589216748BAE453275DC1E1CD62D30F6C73
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38496.roa
Signing time: Fri 11 Apr 2025 04:13:28 +0000
ROA not before: Fri 11 Apr 2025 04:08:28 +0000
ROA not after: Fri 10 Apr 2026 04:13:28 +0000
asID: 38496
IP address blocks: 103.31.156.0/22 maxlen: 24
112.78.96.0/21 maxlen: 24
114.31.240.0/24 maxlen: 24
114.31.241.0/24 maxlen: 24
114.31.242.0/24 maxlen: 24
114.31.243.0/24 maxlen: 24
114.31.244.0/24 maxlen: 24
114.31.245.0/24 maxlen: 24
114.31.246.0/24 maxlen: 24
114.31.247.0/24 maxlen: 24
114.110.40.0/21 maxlen: 24
114.134.72.0/21 maxlen: 24
115.178.120.0/21 maxlen: 24
115.178.120.0/24 maxlen: 24
115.178.121.0/24 maxlen: 24
115.178.122.0/24 maxlen: 24
115.178.123.0/24 maxlen: 24
115.178.124.0/24 maxlen: 24
116.66.200.0/21 maxlen: 21
116.66.200.0/23 maxlen: 23
116.66.200.0/24 maxlen: 24
116.66.201.0/24 maxlen: 24
116.66.202.0/23 maxlen: 24
116.66.202.0/24 maxlen: 24
116.66.203.0/24 maxlen: 24
116.66.204.0/24 maxlen: 24
116.66.206.0/23 maxlen: 23
116.66.206.0/24 maxlen: 24
116.66.207.0/24 maxlen: 24
116.254.120.0/21 maxlen: 24
117.103.8.0/24 maxlen: 24
117.103.9.0/24 maxlen: 24
117.103.10.0/24 maxlen: 24
117.103.11.0/24 maxlen: 24
117.103.12.0/24 maxlen: 24
117.103.13.0/24 maxlen: 24
117.103.14.0/24 maxlen: 24
117.103.15.0/24 maxlen: 24
182.23.160.0/24 maxlen: 24
182.23.161.0/24 maxlen: 24
182.23.163.0/24 maxlen: 24
182.23.164.0/24 maxlen: 24
182.23.165.0/24 maxlen: 24
182.23.166.0/24 maxlen: 24
182.23.167.0/24 maxlen: 24
182.23.168.0/24 maxlen: 24
182.23.169.0/24 maxlen: 24
182.23.172.0/24 maxlen: 24
182.23.173.0/24 maxlen: 24
182.23.174.0/24 maxlen: 24
202.87.176.0/24 maxlen: 24
202.87.184.0/24 maxlen: 24
202.87.188.0/24 maxlen: 24
203.191.40.0/24 maxlen: 24
203.191.41.0/24 maxlen: 24
203.191.42.0/24 maxlen: 24
203.191.43.0/24 maxlen: 24
203.191.44.0/24 maxlen: 24
203.191.45.0/24 maxlen: 24
203.191.47.0/24 maxlen: 24
223.27.144.0/24 maxlen: 24
223.27.145.0/24 maxlen: 24
223.27.146.0/24 maxlen: 24
223.27.148.0/24 maxlen: 24
223.27.149.0/24 maxlen: 24
223.27.150.0/23 maxlen: 24
223.27.150.0/24 maxlen: 24
223.27.151.0/24 maxlen: 24
223.27.152.0/24 maxlen: 24
223.27.153.0/24 maxlen: 24
223.27.154.0/23 maxlen: 24
223.27.154.0/24 maxlen: 24
223.27.156.0/24 maxlen: 24
223.27.157.0/24 maxlen: 24
223.27.158.0/24 maxlen: 24
223.27.159.0/24 maxlen: 24
2401:2400::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 20:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:10:35:89:21:67:48:ba:e4:53:27:5d:c1:e1:cd:62:d3:0f:6c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 11 04:08:28 2025 GMT
Not After : Apr 10 04:13:28 2026 GMT
Subject: CN=4BC3A6E4A922A484A6606AFF9A58B5935F5F1BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:b0:c7:d0:65:7a:22:8d:47:f8:82:bf:59:
33:f5:00:bd:34:dc:0f:64:b4:b1:95:d4:57:73:6b:
56:7b:e5:1a:b1:42:67:f7:13:58:8e:5a:a0:b3:0a:
92:ae:af:0b:9e:5a:8a:f4:1f:d9:4a:a2:6e:a6:21:
2b:16:f3:f1:a6:0e:b4:ce:5c:09:8b:a1:91:48:ff:
ea:d8:5d:4d:88:d2:2b:c9:6c:32:22:0b:c8:a4:1e:
6f:a5:5f:56:b2:20:92:d1:53:6e:f1:f0:11:23:2d:
2b:a6:d6:57:5f:5a:69:19:4d:66:a0:cc:46:8f:45:
2d:bd:34:26:f9:2e:a8:15:1d:76:17:63:c7:66:2b:
db:c8:e5:81:14:1a:28:e5:f6:9a:a2:f1:4b:a7:e6:
25:4c:40:45:2c:07:c5:69:39:67:68:45:9f:75:7c:
d5:29:c7:88:d1:96:4c:2f:17:e9:b4:be:a2:70:72:
69:8a:0a:0d:bc:29:28:29:08:5f:61:ad:70:c8:23:
cb:a1:cc:9e:ef:16:dd:8d:ef:81:11:3a:7f:ca:b4:
1a:0f:18:b2:94:75:3d:09:d9:e1:60:33:43:8c:81:
f9:a1:82:98:fa:d9:47:90:c1:a5:da:99:db:ef:8b:
96:21:b1:84:92:19:45:5c:e2:f0:bd:1e:f7:04:f1:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C3:A6:E4:A9:22:A4:84:A6:60:6A:FF:9A:58:B5:93:5F:5F:1B:E0
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38496.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.156.0/22
112.78.96.0/21
114.31.240.0/21
114.110.40.0/21
114.134.72.0/21
115.178.120.0/21
116.66.200.0/21
116.254.120.0/21
117.103.8.0/21
182.23.160.0/23
182.23.163.0-182.23.169.255
182.23.172.0-182.23.174.255
202.87.176.0/24
202.87.184.0/24
202.87.188.0/24
203.191.40.0-203.191.45.255
203.191.47.0/24
223.27.144.0-223.27.146.255
223.27.148.0-223.27.159.255
IPv6:
2401:2400::/32
Signature Algorithm: sha256WithRSAEncryption
6b:0a:89:8a:57:df:7e:90:2d:6a:a1:41:91:e3:4c:6e:66:9f:
59:13:1f:8d:c3:84:44:e7:da:55:5f:61:8b:f6:ab:91:44:6e:
34:8d:a5:ef:f7:88:5d:cf:1c:a6:d7:b2:68:18:d5:1e:00:39:
52:35:6d:d7:ad:a2:aa:6c:31:4c:0a:88:73:6b:c5:45:1a:3d:
27:56:af:1f:14:fe:bf:d0:00:a7:87:ae:9f:87:ae:71:cd:02:
44:45:f7:14:2b:5e:c2:b7:71:5e:71:a0:95:84:55:e1:18:1d:
e9:e5:20:25:ec:84:3d:59:30:c9:1b:a4:d9:2d:ef:93:bc:6f:
ed:6b:db:31:51:6a:95:68:9e:9f:fc:c1:be:01:bf:90:e0:68:
f2:f0:5e:31:1e:57:dd:56:4e:f7:9d:91:1e:51:a2:82:84:4b:
54:83:d9:b8:2e:7f:05:a3:76:10:98:ab:30:ba:0e:2a:ac:6c:
61:32:4e:c0:de:29:08:56:64:d0:2e:ad:75:61:90:f6:97:52:
91:85:e5:28:b6:7f:f5:16:26:f0:c4:15:7b:66:c6:a3:70:85:
cf:0c:da:68:97:fb:da:32:a5:a6:81:9e:7b:2c:d1:83:9b:35:
38:6d:31:44:18:ea:96:d0:af:ca:e6:ad:38:a9:ac:3e:b5:7f:
c7:55:81:16
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUehA1iSFnSLrkUyddweHNYtMPbHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNTA0MTEwNDA4MjhaFw0yNjA0MTAwNDEzMjhaMDMxMTAvBgNV
BAMTKDRCQzNBNkU0QTkyMkE0ODRBNjYwNkFGRjlBNThCNTkzNUY1RjFCRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YrDH0GV6Io1H+IK/WTP1AL00
3A9ktLGV1Fdza1Z75RqxQmf3E1iOWqCzCpKurwueWor0H9lKom6mISsW8/GmDrTO
XAmLoZFI/+rYXU2I0ivJbDIiC8ikHm+lX1ayIJLRU27x8BEjLSum1ldfWmkZTWag
zEaPRS29NCb5LqgVHXYXY8dmK9vI5YEUGijl9pqi8Uun5iVMQEUsB8VpOWdoRZ91
fNUpx4jRlkwvF+m0vqJwcmmKCg28KSgpCF9hrXDII8uhzJ7vFt2N74EROn/KtBoP
GLKUdT0J2eFgM0OMgfmhgpj62UeQwaXamdvvi5YhsYSSGUVc4vC9HvcE8Vs9AgMB
AAGjggKmMIICojAdBgNVHQ4EFgQUS8Om5KkipISmYGr/mli1k19fG+AwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl
cG8tcnBraS5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05
MGU5MzliY2IwZmIvMC9BUzM4NDk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBoQQCAAEwgZoDBAJnH5wDBANwTmAD
BANyH/ADBANybigDBANyhkgDBANzsngDBAN0QsgDBAN0/ngDBAN1ZwgDBAG2F6Aw
DAMEALYXowMEAbYXqDAMAwQCthesAwQAtheuAwQAylewAwQAyle4AwQAyle8MAwD
BAPLvygDBAHLvywDBADLvy8wDAMEBN8bkAMEAN8bkjAMAwQC3xuUAwQF3xuAMA0E
AgACMAcDBQAkASQAMA0GCSqGSIb3DQEBCwUAA4IBAQBrComKV99+kC1qoUGR40xu
Zp9ZEx+Nw4RE59pVX2GL9quRRG40jaXv94hdzxym17JoGNUeADlSNW3XraKqbDFM
Cohza8VFGj0nVq8fFP6/0ACnh66fh65xzQJERfcUK17Ct3FecaCVhFXhGB3p5SAl
7IQ9WTDJG6TZLe+TvG/ta9sxUWqVaJ6f/MG+Ab+Q4Gjy8F4xHlfdVk73nZEeUaKC
hEtUg9m4Ln8Fo3YQmKswug4qrGxhMk7A3ikIVmTQLq11YZD2l1KRheUotn/1Fibw
xBV7ZsajcIXPDNpol/vaMqWmgZ57LNGDmzU4bTFEGOqW0K/K5q04qaw+tX/HVYEW
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net