Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
File: AS24203.roa (raw, json)
Hash identifier: QMNcFanXPPxVWcF+4Rql4rxsQFnnfy4h14su1Z09VOk=
Subject key identifier: 08:27:9C:82:0C:48:7A:7D:3F:22:67:76:80:32:A6:81:62:39:F3:7A
Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071
Certificate serial: 1E4B6E3E1CF8230FF940439E0758D093996B15
Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
Signing time: Thu 12 Nov 2026 12:27:30 +0000
ROA not before: Thu 12 Nov 2026 12:22:30 +0000
ROA not after: Thu 11 Nov 2027 12:27:30 +0000
asID: 24203
IP address blocks: 140.213.0.0/16 maxlen: 16
140.213.0.0/24 maxlen: 24
140.213.2.0/24 maxlen: 24
140.213.4.0/24 maxlen: 24
140.213.5.0/24 maxlen: 24
140.213.6.0/24 maxlen: 24
140.213.7.0/24 maxlen: 24
140.213.9.0/24 maxlen: 24
140.213.11.0/24 maxlen: 24
140.213.13.0/24 maxlen: 24
140.213.14.0/24 maxlen: 24
140.213.15.0/24 maxlen: 24
140.213.16.0/24 maxlen: 24
140.213.17.0/24 maxlen: 24
140.213.18.0/24 maxlen: 24
140.213.19.0/24 maxlen: 24
140.213.20.0/24 maxlen: 24
140.213.21.0/24 maxlen: 24
140.213.22.0/24 maxlen: 24
140.213.23.0/24 maxlen: 24
140.213.24.0/24 maxlen: 24
140.213.25.0/24 maxlen: 24
140.213.26.0/24 maxlen: 24
140.213.27.0/24 maxlen: 24
140.213.28.0/24 maxlen: 24
140.213.29.0/24 maxlen: 24
140.213.30.0/24 maxlen: 24
140.213.31.0/24 maxlen: 24
140.213.32.0/24 maxlen: 24
140.213.33.0/24 maxlen: 24
140.213.34.0/24 maxlen: 24
140.213.35.0/24 maxlen: 24
140.213.36.0/24 maxlen: 24
140.213.37.0/24 maxlen: 24
140.213.38.0/24 maxlen: 24
140.213.39.0/24 maxlen: 24
140.213.40.0/24 maxlen: 24
140.213.41.0/24 maxlen: 24
140.213.42.0/24 maxlen: 24
140.213.43.0/24 maxlen: 24
140.213.44.0/24 maxlen: 24
140.213.45.0/24 maxlen: 24
140.213.46.0/24 maxlen: 24
140.213.48.0/24 maxlen: 24
140.213.49.0/24 maxlen: 24
140.213.51.0/24 maxlen: 24
140.213.52.0/24 maxlen: 24
140.213.53.0/24 maxlen: 24
140.213.55.0/24 maxlen: 24
140.213.56.0/24 maxlen: 24
140.213.57.0/24 maxlen: 24
140.213.58.0/24 maxlen: 24
140.213.59.0/24 maxlen: 24
140.213.60.0/24 maxlen: 24
140.213.61.0/24 maxlen: 24
140.213.62.0/24 maxlen: 24
140.213.63.0/24 maxlen: 24
140.213.64.0/24 maxlen: 24
140.213.65.0/24 maxlen: 24
140.213.66.0/24 maxlen: 24
140.213.67.0/24 maxlen: 24
140.213.68.0/24 maxlen: 24
140.213.69.0/24 maxlen: 24
140.213.70.0/24 maxlen: 24
140.213.71.0/24 maxlen: 24
140.213.72.0/24 maxlen: 24
140.213.73.0/24 maxlen: 24
140.213.74.0/24 maxlen: 24
140.213.75.0/24 maxlen: 24
140.213.76.0/24 maxlen: 24
140.213.78.0/24 maxlen: 24
140.213.79.0/24 maxlen: 24
140.213.80.0/24 maxlen: 24
140.213.81.0/24 maxlen: 24
140.213.82.0/24 maxlen: 24
140.213.86.0/24 maxlen: 24
140.213.87.0/24 maxlen: 24
140.213.98.0/24 maxlen: 24
140.213.99.0/24 maxlen: 24
140.213.100.0/24 maxlen: 24
140.213.101.0/24 maxlen: 24
140.213.102.0/24 maxlen: 24
140.213.103.0/24 maxlen: 24
140.213.104.0/24 maxlen: 24
140.213.105.0/24 maxlen: 24
140.213.106.0/24 maxlen: 24
140.213.107.0/24 maxlen: 24
140.213.108.0/24 maxlen: 24
140.213.109.0/24 maxlen: 24
140.213.110.0/24 maxlen: 24
140.213.111.0/24 maxlen: 24
140.213.112.0/24 maxlen: 24
140.213.113.0/24 maxlen: 24
140.213.114.0/24 maxlen: 24
140.213.115.0/24 maxlen: 24
140.213.116.0/24 maxlen: 24
140.213.117.0/24 maxlen: 24
140.213.120.0/24 maxlen: 24
140.213.121.0/24 maxlen: 24
140.213.122.0/24 maxlen: 24
140.213.123.0/24 maxlen: 24
140.213.124.0/24 maxlen: 24
140.213.125.0/24 maxlen: 24
140.213.126.0/24 maxlen: 24
140.213.127.0/24 maxlen: 24
140.213.128.0/24 maxlen: 24
140.213.129.0/24 maxlen: 24
140.213.130.0/24 maxlen: 24
140.213.131.0/24 maxlen: 24
140.213.132.0/24 maxlen: 24
140.213.133.0/24 maxlen: 24
140.213.134.0/24 maxlen: 24
140.213.135.0/24 maxlen: 24
140.213.136.0/24 maxlen: 24
140.213.137.0/24 maxlen: 24
140.213.139.0/24 maxlen: 24
140.213.140.0/24 maxlen: 24
140.213.141.0/24 maxlen: 24
140.213.142.0/24 maxlen: 24
140.213.143.0/24 maxlen: 24
140.213.144.0/24 maxlen: 24
140.213.145.0/24 maxlen: 24
140.213.146.0/24 maxlen: 24
140.213.147.0/24 maxlen: 24
140.213.148.0/24 maxlen: 24
140.213.149.0/24 maxlen: 24
140.213.150.0/24 maxlen: 24
140.213.151.0/24 maxlen: 24
140.213.153.0/24 maxlen: 24
140.213.154.0/24 maxlen: 24
140.213.155.0/24 maxlen: 24
140.213.156.0/24 maxlen: 24
140.213.157.0/24 maxlen: 24
140.213.158.0/24 maxlen: 24
140.213.159.0/24 maxlen: 24
140.213.160.0/24 maxlen: 24
140.213.161.0/24 maxlen: 24
140.213.162.0/24 maxlen: 24
140.213.163.0/24 maxlen: 24
140.213.164.0/24 maxlen: 24
140.213.165.0/24 maxlen: 24
140.213.166.0/24 maxlen: 24
140.213.167.0/24 maxlen: 24
140.213.168.0/24 maxlen: 24
140.213.169.0/24 maxlen: 24
140.213.170.0/24 maxlen: 24
140.213.171.0/24 maxlen: 24
140.213.172.0/24 maxlen: 24
140.213.173.0/24 maxlen: 24
140.213.174.0/24 maxlen: 24
140.213.175.0/24 maxlen: 24
140.213.176.0/24 maxlen: 24
140.213.177.0/24 maxlen: 24
140.213.178.0/24 maxlen: 24
140.213.179.0/24 maxlen: 24
140.213.180.0/24 maxlen: 24
140.213.181.0/24 maxlen: 24
140.213.182.0/24 maxlen: 24
140.213.183.0/24 maxlen: 24
140.213.184.0/24 maxlen: 24
140.213.185.0/24 maxlen: 24
140.213.191.0/24 maxlen: 24
140.213.192.0/24 maxlen: 24
140.213.193.0/24 maxlen: 24
140.213.194.0/24 maxlen: 24
140.213.195.0/24 maxlen: 24
140.213.196.0/24 maxlen: 24
140.213.197.0/24 maxlen: 24
140.213.198.0/24 maxlen: 24
140.213.199.0/24 maxlen: 24
140.213.204.0/24 maxlen: 24
140.213.206.0/24 maxlen: 24
140.213.207.0/24 maxlen: 24
140.213.208.0/24 maxlen: 24
140.213.209.0/24 maxlen: 24
140.213.211.0/24 maxlen: 24
140.213.212.0/24 maxlen: 24
140.213.213.0/24 maxlen: 24
140.213.214.0/24 maxlen: 24
140.213.215.0/24 maxlen: 24
140.213.218.0/24 maxlen: 24
140.213.219.0/24 maxlen: 24
140.213.220.0/24 maxlen: 24
140.213.221.0/24 maxlen: 24
140.213.222.0/24 maxlen: 24
140.213.223.0/24 maxlen: 24
140.213.224.0/24 maxlen: 24
140.213.226.0/24 maxlen: 24
140.213.227.0/24 maxlen: 24
140.213.228.0/24 maxlen: 24
140.213.229.0/24 maxlen: 24
140.213.230.0/24 maxlen: 24
140.213.231.0/24 maxlen: 24
140.213.232.0/24 maxlen: 24
140.213.233.0/24 maxlen: 24
140.213.237.0/24 maxlen: 24
140.213.238.0/24 maxlen: 24
140.213.239.0/24 maxlen: 24
140.213.240.0/24 maxlen: 24
140.213.241.0/24 maxlen: 24
140.213.242.0/24 maxlen: 24
140.213.243.0/24 maxlen: 24
140.213.244.0/24 maxlen: 24
140.213.245.0/24 maxlen: 24
140.213.246.0/24 maxlen: 24
140.213.247.0/24 maxlen: 24
140.213.250.0/24 maxlen: 24
140.213.251.0/24 maxlen: 24
140.213.252.0/24 maxlen: 24
140.213.253.0/24 maxlen: 24
140.213.254.0/24 maxlen: 24
140.213.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl
rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 08:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:4b:6e:3e:1c:f8:23:0f:f9:40:43:9e:07:58:d0:93:99:6b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071
Validity
Not Before: Nov 12 12:22:30 2026 GMT
Not After : Nov 11 12:27:30 2027 GMT
Subject: CN=08279C820C487A7D3F2267768032A6816239F37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:67:19:fe:b9:24:00:6c:5e:3d:e5:2b:2d:
a9:e2:17:1d:7e:6a:77:eb:27:24:a7:4d:03:e4:de:
29:cf:7b:68:e4:66:07:0b:3d:6f:0f:a0:39:4c:b0:
ea:34:c5:e0:41:88:d6:fc:22:01:3c:a6:a1:f4:ba:
9b:26:c7:61:a4:01:34:10:a5:5c:68:14:53:7f:87:
b8:f2:12:82:96:f5:c1:c5:2c:5e:80:65:16:9f:29:
6f:1c:f2:f6:6e:90:da:22:18:63:9d:8b:bf:97:52:
c7:e3:bc:94:f2:3d:39:d4:ee:e1:85:56:31:5d:f3:
58:cd:d3:61:95:db:5f:0a:05:e2:28:9e:53:c4:6c:
d2:35:eb:5f:d2:25:f1:00:27:86:81:85:97:0a:14:
a6:3a:93:2b:1b:db:0f:3f:11:38:09:af:14:05:ed:
31:fe:f3:d5:da:a3:06:5b:d5:f9:4e:66:be:42:e0:
6b:83:f2:bc:bd:7a:76:ba:0a:76:d4:23:f5:18:f0:
50:45:4e:6c:1e:b9:37:f2:ff:c5:7a:e1:ce:6d:b1:
91:59:58:7d:6e:9f:ba:db:11:f5:0d:29:f5:2c:24:
85:9e:10:bb:58:4e:52:7c:ca:8c:c7:1c:8c:36:0b:
a1:cb:d3:8d:8a:3f:ed:8e:0a:ef:82:fe:cf:fa:c9:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:9C:82:0C:48:7A:7D:3F:22:67:76:80:32:A6:81:62:39:F3:7A
X509v3 Authority Key Identifier:
keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:3b:c8:d5:b8:88:f2:92:23:13:77:72:bb:88:f4:c2:53:a7:
05:3f:3f:ff:19:29:58:72:98:78:9a:b5:96:74:0d:b0:b0:8b:
ed:11:75:1c:03:09:cb:20:67:de:71:39:d9:10:f6:0f:53:19:
e6:76:39:20:7f:61:8a:07:1f:60:b2:5f:9e:1a:1e:33:b8:94:
67:30:f4:9b:f6:b9:e1:ed:b7:6d:18:d4:03:38:b6:8b:f6:b0:
ea:38:d6:6c:46:85:20:cc:69:25:fb:7c:6a:15:35:42:3f:7f:
04:8c:62:92:3e:15:dc:8c:7e:4a:b8:c4:16:57:dc:06:85:92:
8b:39:18:8d:8d:e9:2e:43:fc:fa:95:21:2b:9f:b3:84:da:03:
d4:31:7d:b0:eb:87:f6:68:c6:3f:35:b6:12:b6:cf:f8:ab:b9:
f1:63:bb:ae:46:d9:bb:f3:6e:f0:50:20:c7:bb:7b:23:b7:b4:
33:01:70:82:fb:b5:98:72:7f:c8:9e:b9:16:de:5a:51:57:09:
1c:7f:15:b4:c2:ed:3e:e0:9e:a2:0e:3e:5f:af:1c:95:b5:0f:
4b:e4:a1:57:28:06:5b:71:6c:0a:cc:f0:ab:4d:dc:ee:a2:a5:
b9:b5:cc:46:e4:70:fc:91:d3:8c:56:0f:57:90:35:9f:4e:fd:
96:3e:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:28:36 2026 by rpki-client