Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
File: AS24203.roa (raw, json)
Hash identifier: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=
Subject key identifier: D9:B4:03:63:E3:A3:D8:03:2B:E0:A9:1A:F7:46:F1:A0:1B:CC:C3:7E
Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071
Certificate serial: 26D11465BA23D17133CF34EF7E28614D69560999
Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
Signing time: Sun 03 May 2026 02:31:47 +0000
ROA not before: Sun 03 May 2026 02:26:47 +0000
ROA not after: Sun 02 May 2027 02:31:47 +0000
asID: 24203
IP address blocks: 140.213.0.0/16 maxlen: 16
140.213.0.0/24 maxlen: 24
140.213.2.0/24 maxlen: 24
140.213.4.0/24 maxlen: 24
140.213.5.0/24 maxlen: 24
140.213.6.0/24 maxlen: 24
140.213.7.0/24 maxlen: 24
140.213.9.0/24 maxlen: 24
140.213.11.0/24 maxlen: 24
140.213.13.0/24 maxlen: 24
140.213.14.0/24 maxlen: 24
140.213.15.0/24 maxlen: 24
140.213.16.0/24 maxlen: 24
140.213.17.0/24 maxlen: 24
140.213.18.0/24 maxlen: 24
140.213.19.0/24 maxlen: 24
140.213.20.0/24 maxlen: 24
140.213.21.0/24 maxlen: 24
140.213.22.0/24 maxlen: 24
140.213.23.0/24 maxlen: 24
140.213.24.0/24 maxlen: 24
140.213.25.0/24 maxlen: 24
140.213.26.0/24 maxlen: 24
140.213.27.0/24 maxlen: 24
140.213.28.0/24 maxlen: 24
140.213.29.0/24 maxlen: 24
140.213.30.0/24 maxlen: 24
140.213.31.0/24 maxlen: 24
140.213.32.0/24 maxlen: 24
140.213.33.0/24 maxlen: 24
140.213.34.0/24 maxlen: 24
140.213.35.0/24 maxlen: 24
140.213.36.0/24 maxlen: 24
140.213.37.0/24 maxlen: 24
140.213.38.0/24 maxlen: 24
140.213.39.0/24 maxlen: 24
140.213.40.0/24 maxlen: 24
140.213.41.0/24 maxlen: 24
140.213.42.0/24 maxlen: 24
140.213.43.0/24 maxlen: 24
140.213.44.0/24 maxlen: 24
140.213.45.0/24 maxlen: 24
140.213.46.0/24 maxlen: 24
140.213.48.0/24 maxlen: 24
140.213.49.0/24 maxlen: 24
140.213.51.0/24 maxlen: 24
140.213.52.0/24 maxlen: 24
140.213.53.0/24 maxlen: 24
140.213.55.0/24 maxlen: 24
140.213.56.0/24 maxlen: 24
140.213.57.0/24 maxlen: 24
140.213.58.0/24 maxlen: 24
140.213.59.0/24 maxlen: 24
140.213.60.0/24 maxlen: 24
140.213.61.0/24 maxlen: 24
140.213.62.0/24 maxlen: 24
140.213.63.0/24 maxlen: 24
140.213.64.0/24 maxlen: 24
140.213.65.0/24 maxlen: 24
140.213.66.0/24 maxlen: 24
140.213.67.0/24 maxlen: 24
140.213.68.0/24 maxlen: 24
140.213.69.0/24 maxlen: 24
140.213.70.0/24 maxlen: 24
140.213.71.0/24 maxlen: 24
140.213.72.0/24 maxlen: 24
140.213.73.0/24 maxlen: 24
140.213.74.0/24 maxlen: 24
140.213.75.0/24 maxlen: 24
140.213.76.0/24 maxlen: 24
140.213.78.0/24 maxlen: 24
140.213.79.0/24 maxlen: 24
140.213.80.0/24 maxlen: 24
140.213.81.0/24 maxlen: 24
140.213.82.0/24 maxlen: 24
140.213.86.0/24 maxlen: 24
140.213.87.0/24 maxlen: 24
140.213.98.0/24 maxlen: 24
140.213.99.0/24 maxlen: 24
140.213.100.0/24 maxlen: 24
140.213.101.0/24 maxlen: 24
140.213.102.0/24 maxlen: 24
140.213.103.0/24 maxlen: 24
140.213.104.0/24 maxlen: 24
140.213.105.0/24 maxlen: 24
140.213.106.0/24 maxlen: 24
140.213.107.0/24 maxlen: 24
140.213.108.0/24 maxlen: 24
140.213.109.0/24 maxlen: 24
140.213.110.0/24 maxlen: 24
140.213.111.0/24 maxlen: 24
140.213.112.0/24 maxlen: 24
140.213.113.0/24 maxlen: 24
140.213.114.0/24 maxlen: 24
140.213.115.0/24 maxlen: 24
140.213.116.0/24 maxlen: 24
140.213.117.0/24 maxlen: 24
140.213.120.0/24 maxlen: 24
140.213.121.0/24 maxlen: 24
140.213.122.0/24 maxlen: 24
140.213.123.0/24 maxlen: 24
140.213.124.0/24 maxlen: 24
140.213.125.0/24 maxlen: 24
140.213.126.0/24 maxlen: 24
140.213.127.0/24 maxlen: 24
140.213.128.0/24 maxlen: 24
140.213.129.0/24 maxlen: 24
140.213.130.0/24 maxlen: 24
140.213.131.0/24 maxlen: 24
140.213.132.0/24 maxlen: 24
140.213.133.0/24 maxlen: 24
140.213.134.0/24 maxlen: 24
140.213.135.0/24 maxlen: 24
140.213.136.0/24 maxlen: 24
140.213.137.0/24 maxlen: 24
140.213.139.0/24 maxlen: 24
140.213.140.0/24 maxlen: 24
140.213.141.0/24 maxlen: 24
140.213.142.0/24 maxlen: 24
140.213.143.0/24 maxlen: 24
140.213.144.0/24 maxlen: 24
140.213.145.0/24 maxlen: 24
140.213.146.0/24 maxlen: 24
140.213.147.0/24 maxlen: 24
140.213.148.0/24 maxlen: 24
140.213.149.0/24 maxlen: 24
140.213.150.0/24 maxlen: 24
140.213.151.0/24 maxlen: 24
140.213.153.0/24 maxlen: 24
140.213.154.0/24 maxlen: 24
140.213.155.0/24 maxlen: 24
140.213.156.0/24 maxlen: 24
140.213.157.0/24 maxlen: 24
140.213.158.0/24 maxlen: 24
140.213.159.0/24 maxlen: 24
140.213.160.0/24 maxlen: 24
140.213.161.0/24 maxlen: 24
140.213.162.0/24 maxlen: 24
140.213.163.0/24 maxlen: 24
140.213.164.0/24 maxlen: 24
140.213.165.0/24 maxlen: 24
140.213.166.0/24 maxlen: 24
140.213.167.0/24 maxlen: 24
140.213.168.0/24 maxlen: 24
140.213.169.0/24 maxlen: 24
140.213.170.0/24 maxlen: 24
140.213.171.0/24 maxlen: 24
140.213.172.0/24 maxlen: 24
140.213.173.0/24 maxlen: 24
140.213.174.0/24 maxlen: 24
140.213.175.0/24 maxlen: 24
140.213.176.0/24 maxlen: 24
140.213.177.0/24 maxlen: 24
140.213.178.0/24 maxlen: 24
140.213.179.0/24 maxlen: 24
140.213.180.0/24 maxlen: 24
140.213.181.0/24 maxlen: 24
140.213.182.0/24 maxlen: 24
140.213.183.0/24 maxlen: 24
140.213.184.0/24 maxlen: 24
140.213.185.0/24 maxlen: 24
140.213.191.0/24 maxlen: 24
140.213.204.0/24 maxlen: 24
140.213.206.0/24 maxlen: 24
140.213.207.0/24 maxlen: 24
140.213.208.0/24 maxlen: 24
140.213.209.0/24 maxlen: 24
140.213.211.0/24 maxlen: 24
140.213.218.0/24 maxlen: 24
140.213.219.0/24 maxlen: 24
140.213.220.0/24 maxlen: 24
140.213.221.0/24 maxlen: 24
140.213.222.0/24 maxlen: 24
140.213.224.0/24 maxlen: 24
140.213.226.0/24 maxlen: 24
140.213.227.0/24 maxlen: 24
140.213.228.0/24 maxlen: 24
140.213.229.0/24 maxlen: 24
140.213.230.0/24 maxlen: 24
140.213.231.0/24 maxlen: 24
140.213.232.0/24 maxlen: 24
140.213.233.0/24 maxlen: 24
140.213.237.0/24 maxlen: 24
140.213.238.0/24 maxlen: 24
140.213.239.0/24 maxlen: 24
140.213.240.0/24 maxlen: 24
140.213.241.0/24 maxlen: 24
140.213.242.0/24 maxlen: 24
140.213.243.0/24 maxlen: 24
140.213.244.0/24 maxlen: 24
140.213.245.0/24 maxlen: 24
140.213.246.0/24 maxlen: 24
140.213.247.0/24 maxlen: 24
140.213.250.0/24 maxlen: 24
140.213.251.0/24 maxlen: 24
140.213.252.0/24 maxlen: 24
140.213.253.0/24 maxlen: 24
140.213.254.0/24 maxlen: 24
140.213.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl
rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d1:14:65:ba:23:d1:71:33:cf:34:ef:7e:28:61:4d:69:56:09:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071
Validity
Not Before: May 3 02:26:47 2026 GMT
Not After : May 2 02:31:47 2027 GMT
Subject: CN=D9B40363E3A3D8032BE0A91AF746F1A01BCCC37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:1b:66:f8:1c:f5:4f:c4:5b:66:cb:f7:30:
f2:39:84:a8:91:5f:1e:b6:f7:67:84:63:51:1c:5c:
b1:e9:cd:92:d2:37:9c:4e:9f:87:f3:83:6a:ff:bf:
9c:f4:19:bf:c6:a0:f6:93:35:bd:63:f5:cb:33:42:
52:40:d9:e2:04:60:55:76:d7:7a:f2:a9:84:14:20:
87:a0:b6:0c:bb:a5:b2:7d:5e:34:47:69:17:e7:dd:
0a:74:a3:c6:9e:25:40:38:b0:fe:e4:53:2c:73:1e:
db:10:2e:d5:c9:df:7d:25:9f:46:4b:c0:a1:5c:24:
ca:49:3b:d0:e1:59:45:60:7b:ce:c2:4b:31:0b:25:
37:4e:f8:93:82:a6:ab:e8:e4:20:f0:a9:b9:e5:b9:
c8:7b:f7:59:74:9e:16:3d:8c:70:46:0c:06:10:9b:
14:87:e5:64:69:6d:f3:6f:cd:87:55:d6:9d:84:cf:
64:f7:62:2f:eb:93:b7:72:4c:cf:ee:78:e5:62:a1:
1c:dc:53:19:57:8a:66:1e:32:26:f9:42:0d:5e:f0:
3e:e8:a4:e2:ea:a3:d6:3e:c5:4e:a9:14:47:d0:11:
12:55:94:cd:0d:2b:9e:69:b4:d7:ca:d6:df:23:e1:
b8:5e:6f:1d:86:20:d1:a9:05:0b:e2:9f:3e:d3:e2:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B4:03:63:E3:A3:D8:03:2B:E0:A9:1A:F7:46:F1:A0:1B:CC:C3:7E
X509v3 Authority Key Identifier:
keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:14:98:f3:d2:00:8e:55:b6:35:52:67:0b:26:a8:03:fc:22:
59:89:ce:29:d9:5b:d7:c5:ca:51:cb:2f:67:ee:10:c1:69:68:
57:ee:06:c6:21:1b:cd:25:9e:0d:62:10:dc:6f:e0:f1:b5:5d:
37:a9:3f:23:29:d8:5d:ec:b6:f1:51:e0:01:b0:aa:e1:00:27:
47:e4:38:42:39:39:81:97:97:1b:80:db:bd:01:1a:32:84:63:
8e:ed:c0:3a:6b:28:12:74:43:e0:fc:f6:7a:bb:76:5a:52:44:
f3:97:e3:4e:28:6a:6f:6c:ca:4b:7a:4e:e8:7f:02:3e:3c:50:
08:2d:24:68:7c:d7:4a:71:0c:16:e8:b4:02:a4:a0:2a:9e:e0:
93:60:3f:cc:f3:08:56:12:06:de:0b:22:ed:ce:0b:b2:28:fe:
21:8f:f7:73:3a:34:de:33:61:64:98:27:3e:97:0a:f6:33:5a:
52:1a:92:ca:f6:2e:85:c8:99:43:55:69:9f:36:2c:9e:21:a5:
e7:21:12:75:32:29:42:85:d3:1d:69:91:7d:85:39:1d:72:df:
ab:4b:2e:b2:1a:e2:56:1f:60:1d:20:f7:d4:03:88:d8:a0:79:
5f:65:a5:ed:d7:70:d7:01:e8:33:15:38:61:f4:06:0c:d6:5f:
90:88:06:49
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUJtEUZboj0XEzzzTvfihhTWlWCZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4
RjlEMDA3MTAeFw0yNjA1MDMwMjI2NDdaFw0yNzA1MDIwMjMxNDdaMDMxMTAvBgNV
BAMTKEQ5QjQwMzYzRTNBM0Q4MDMyQkUwQTkxQUY3NDZGMUEwMUJDQ0MzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPdhtm+Bz1T8RbZsv3MPI5hKiR
Xx6292eEY1EcXLHpzZLSN5xOn4fzg2r/v5z0Gb/GoPaTNb1j9cszQlJA2eIEYFV2
13ryqYQUIIegtgy7pbJ9XjRHaRfn3Qp0o8aeJUA4sP7kUyxzHtsQLtXJ330ln0ZL
wKFcJMpJO9DhWUVge87CSzELJTdO+JOCpqvo5CDwqbnluch791l0nhY9jHBGDAYQ
mxSH5WRpbfNvzYdV1p2Ez2T3Yi/rk7dyTM/ueOVioRzcUxlXimYeMib5Qg1e8D7o
pOLqo9Y+xU6pFEfQERJVlM0NK55ptNfK1t8j4bhebx2GINGpBQvinz7T4j7vAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQU2bQDY+Oj2AMr4Kka90bxoBvMw34wHwYDVR0j
BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw
QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw
MDcxLmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBr
aS1yc3luYy5pZG5pYy5uZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04
ZDdlN2ZjMmMyMjcvMC9BUzI0MjAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjNUwDQYJKoZIhvcNAQEL
BQADggEBAFYUmPPSAI5VtjVSZwsmqAP8IlmJzinZW9fFylHLL2fuEMFpaFfuBsYh
G80lng1iENxv4PG1XTepPyMp2F3stvFR4AGwquEAJ0fkOEI5OYGXlxuA270BGjKE
Y47twDprKBJ0Q+D89nq7dlpSRPOX404oam9sykt6Tuh/Aj48UAgtJGh810pxDBbo
tAKkoCqe4JNgP8zzCFYSBt4LIu3OC7Io/iGP93M6NN4zYWSYJz6XCvYzWlIaksr2
LoXImUNVaZ82LJ4hpechEnUyKUKF0x1pkX2FOR1y36tLLrIa4lYfYB0g99QDiNig
eV9lpe3XcNcB6DMVOGH0BgzWX5CIBkk=
-----END CERTIFICATE-----
Generated at Wed May 13 00:51:55 2026 by rpki-client