Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
File: AS17885.roa (raw, json)
Hash identifier: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=
Subject key identifier: 7E:84:F9:68:B4:A1:A1:B0:3C:53:8A:BA:75:11:C9:5C:74:B7:AE:4D
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 18D5DA63C597336816ED5012B20FA9ED578F2081
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
Signing time: Mon 11 Aug 2025 09:15:54 +0000
ROA not before: Mon 11 Aug 2025 09:10:54 +0000
ROA not after: Mon 10 Aug 2026 09:15:54 +0000
asID: 17885
IP address blocks: 112.215.6.0/24 maxlen: 24
112.215.7.0/24 maxlen: 24
112.215.10.0/24 maxlen: 24
112.215.11.0/24 maxlen: 24
112.215.18.0/24 maxlen: 24
112.215.21.0/24 maxlen: 24
112.215.22.0/24 maxlen: 24
112.215.26.0/24 maxlen: 24
112.215.30.0/24 maxlen: 24
112.215.33.0/24 maxlen: 24
112.215.34.0/24 maxlen: 24
112.215.37.0/24 maxlen: 24
112.215.40.0/24 maxlen: 24
112.215.41.0/24 maxlen: 24
112.215.42.0/24 maxlen: 24
112.215.46.0/24 maxlen: 24
112.215.49.0/24 maxlen: 24
112.215.62.0/24 maxlen: 24
112.215.68.0/24 maxlen: 24
112.215.69.0/24 maxlen: 24
112.215.73.0/24 maxlen: 24
112.215.77.0/24 maxlen: 24
112.215.78.0/24 maxlen: 24
112.215.81.0/24 maxlen: 24
112.215.87.0/24 maxlen: 24
112.215.89.0/24 maxlen: 24
112.215.94.0/24 maxlen: 24
112.215.96.0/24 maxlen: 24
112.215.97.0/24 maxlen: 24
112.215.98.0/24 maxlen: 24
112.215.100.0/24 maxlen: 24
112.215.105.0/24 maxlen: 24
112.215.106.0/24 maxlen: 24
112.215.107.0/24 maxlen: 24
112.215.108.0/24 maxlen: 24
112.215.112.0/24 maxlen: 24
112.215.113.0/24 maxlen: 24
112.215.114.0/24 maxlen: 24
112.215.116.0/24 maxlen: 24
112.215.118.0/24 maxlen: 24
112.215.119.0/24 maxlen: 24
112.215.121.0/24 maxlen: 24
112.215.125.0/24 maxlen: 24
112.215.129.0/24 maxlen: 24
112.215.131.0/24 maxlen: 24
112.215.132.0/24 maxlen: 24
112.215.137.0/24 maxlen: 24
112.215.141.0/24 maxlen: 24
112.215.143.0/24 maxlen: 24
112.215.159.0/24 maxlen: 24
112.215.176.0/24 maxlen: 24
112.215.177.0/24 maxlen: 24
112.215.178.0/24 maxlen: 24
112.215.190.0/24 maxlen: 24
112.215.191.0/24 maxlen: 24
112.215.192.0/24 maxlen: 24
112.215.193.0/24 maxlen: 24
112.215.194.0/24 maxlen: 24
112.215.195.0/24 maxlen: 24
112.215.196.0/24 maxlen: 24
112.215.197.0/24 maxlen: 24
112.215.205.0/24 maxlen: 24
112.215.248.0/24 maxlen: 24
112.215.255.0/24 maxlen: 24
121.52.0.0/17 maxlen: 17
121.52.25.0/24 maxlen: 24
121.52.26.0/24 maxlen: 24
121.52.29.0/24 maxlen: 24
121.52.35.0/24 maxlen: 24
121.52.40.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
121.52.42.0/24 maxlen: 24
121.52.45.0/24 maxlen: 24
121.52.46.0/24 maxlen: 24
121.52.48.0/24 maxlen: 24
121.52.49.0/24 maxlen: 24
121.52.50.0/24 maxlen: 24
121.52.51.0/24 maxlen: 24
121.52.52.0/24 maxlen: 24
121.52.53.0/24 maxlen: 24
121.52.54.0/24 maxlen: 24
121.52.55.0/24 maxlen: 24
121.52.58.0/24 maxlen: 24
121.52.59.0/24 maxlen: 24
121.52.60.0/24 maxlen: 24
121.52.61.0/24 maxlen: 24
121.52.62.0/24 maxlen: 24
121.52.64.0/24 maxlen: 24
121.52.65.0/24 maxlen: 24
121.52.66.0/24 maxlen: 24
121.52.67.0/24 maxlen: 24
121.52.68.0/24 maxlen: 24
121.52.69.0/24 maxlen: 24
121.52.70.0/24 maxlen: 24
121.52.71.0/24 maxlen: 24
121.52.72.0/24 maxlen: 24
121.52.73.0/24 maxlen: 24
121.52.74.0/24 maxlen: 24
121.52.75.0/24 maxlen: 24
121.52.76.0/24 maxlen: 24
121.52.77.0/24 maxlen: 24
121.52.78.0/24 maxlen: 24
121.52.79.0/24 maxlen: 24
121.52.80.0/24 maxlen: 24
121.52.81.0/24 maxlen: 24
121.52.82.0/24 maxlen: 24
121.52.83.0/24 maxlen: 24
121.52.84.0/24 maxlen: 24
121.52.85.0/24 maxlen: 24
121.52.86.0/24 maxlen: 24
121.52.87.0/24 maxlen: 24
121.52.88.0/24 maxlen: 24
121.52.89.0/24 maxlen: 24
121.52.90.0/24 maxlen: 24
121.52.91.0/24 maxlen: 24
121.52.92.0/24 maxlen: 24
121.52.93.0/24 maxlen: 24
121.52.94.0/24 maxlen: 24
121.52.95.0/24 maxlen: 24
202.152.224.0/19 maxlen: 19
202.152.224.0/24 maxlen: 24
202.152.225.0/24 maxlen: 24
202.152.230.0/24 maxlen: 24
202.152.233.0/24 maxlen: 24
202.152.237.0/24 maxlen: 24
202.152.244.0/24 maxlen: 24
202.152.248.0/24 maxlen: 24
202.152.249.0/24 maxlen: 24
202.152.251.0/24 maxlen: 24
202.152.252.0/24 maxlen: 24
202.152.253.0/24 maxlen: 24
202.152.254.0/24 maxlen: 24
202.152.255.0/24 maxlen: 24
2400:9800:2010::/48 maxlen: 48
2400:9800:2011::/48 maxlen: 48
2400:9800:2012::/48 maxlen: 48
2400:9800:3000::/48 maxlen: 48
2400:9800:3001::/48 maxlen: 48
2400:9800:3002::/48 maxlen: 48
2400:9800:3003::/48 maxlen: 48
2400:9800:3004::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 Aug 2025 00:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d5:da:63:c5:97:33:68:16:ed:50:12:b2:0f:a9:ed:57:8f:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Aug 11 09:10:54 2025 GMT
Not After : Aug 10 09:15:54 2026 GMT
Subject: CN=7E84F968B4A1A1B03C538ABA7511C95C74B7AE4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:d0:c5:90:a1:05:7a:66:05:40:92:53:8f:
bf:95:2e:68:0f:3a:84:c9:a0:84:32:0c:2c:16:80:
d3:fb:b2:e4:3a:e9:81:b9:50:c1:52:70:1d:20:b0:
1a:f6:d8:c3:37:8a:ce:88:0d:a1:2f:e1:4e:a3:83:
b6:0f:93:21:d3:ac:5e:dd:8b:39:3e:44:fd:bb:ab:
69:76:55:2a:59:51:a0:3f:f2:81:ac:2d:0f:21:ba:
81:f0:b2:84:f4:a6:e0:77:65:e4:75:70:22:94:3a:
66:85:4e:ae:bd:e3:f1:f1:2d:20:b3:c7:f0:28:e0:
86:69:d4:63:d3:4d:6a:70:d9:f3:12:67:51:52:8b:
86:99:6d:f5:98:1a:62:f5:12:a0:a7:2b:07:16:b7:
61:50:be:be:da:a0:3a:a9:e2:2c:9f:c4:f0:85:ad:
94:ed:63:0b:5d:c9:85:36:32:bd:1d:25:4c:2d:45:
00:d3:d2:b5:35:db:bd:bd:41:a6:0a:29:04:6e:89:
37:fc:42:92:ae:8f:03:d0:83:fd:de:8b:38:25:a1:
74:93:0c:18:c0:36:7c:5c:8f:ed:ba:6b:83:91:7a:
fe:ff:2e:78:1c:50:ff:d3:6d:e2:3a:b8:c1:51:3e:
3e:cc:f4:61:23:d1:85:f6:c6:73:d6:55:2b:b7:17:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:84:F9:68:B4:A1:A1:B0:3C:53:8A:BA:75:11:C9:5C:74:B7:AE:4D
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.6.0/23
112.215.10.0/23
112.215.18.0/24
112.215.21.0-112.215.22.255
112.215.26.0/24
112.215.30.0/24
112.215.33.0-112.215.34.255
112.215.37.0/24
112.215.40.0-112.215.42.255
112.215.46.0/24
112.215.49.0/24
112.215.62.0/24
112.215.68.0/23
112.215.73.0/24
112.215.77.0-112.215.78.255
112.215.81.0/24
112.215.87.0/24
112.215.89.0/24
112.215.94.0/24
112.215.96.0-112.215.98.255
112.215.100.0/24
112.215.105.0-112.215.108.255
112.215.112.0-112.215.114.255
112.215.116.0/24
112.215.118.0/23
112.215.121.0/24
112.215.125.0/24
112.215.129.0/24
112.215.131.0-112.215.132.255
112.215.137.0/24
112.215.141.0/24
112.215.143.0/24
112.215.159.0/24
112.215.176.0-112.215.178.255
112.215.190.0-112.215.197.255
112.215.205.0/24
112.215.248.0/24
112.215.255.0/24
121.52.0.0/17
202.152.224.0/19
IPv6:
2400:9800:2010::-2400:9800:2012:ffff:ffff:ffff:ffff:ffff
2400:9800:3000::-2400:9800:3004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:f6:b7:8c:39:f0:37:d6:c5:28:54:87:9d:65:6a:b8:04:0d:
fe:09:c7:41:db:dc:2b:0b:19:b9:71:0a:af:8e:b1:e5:7e:94:
88:fe:06:5e:72:e6:b4:f0:a1:15:0a:fe:7a:ce:87:7f:f1:26:
dd:c4:77:1e:d2:ef:f4:e5:69:11:22:28:d5:89:83:83:44:41:
50:ba:02:44:12:01:ad:e1:3d:d8:c9:7c:86:a6:51:19:f7:60:
b1:a2:e3:67:bd:b2:74:6c:b8:b1:96:83:90:db:a3:de:f7:b0:
6d:f0:5c:91:51:8d:9a:51:c0:f9:7a:d1:50:bd:80:b3:74:54:
52:a7:f4:0b:75:11:5d:cc:47:f5:28:b0:52:d2:b2:a3:7b:d0:
70:a9:db:cb:c0:d2:0e:f1:f8:20:27:43:1a:08:27:86:c6:16:
35:b9:4d:86:94:a6:7f:ac:c0:4e:bf:e9:54:1c:22:d9:f0:d4:
20:13:09:1c:cd:18:1c:1a:03:b2:b1:2e:ef:89:62:47:bf:44:
d8:7f:ba:e9:18:e3:e4:10:d3:2b:7b:85:64:6a:52:79:e5:ac:
66:8b:bf:40:a2:fb:30:56:54:c6:e6:54:d0:2f:ec:1f:78:6f:
7e:c3:17:ed:bc:60:3d:34:e9:74:91:b8:2e:02:e1:0e:e8:41:
9d:5c:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:30:21 2025 by rpki-client