Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS17885.roa
File: AS17885.roa (raw, json)
Hash identifier: ftTJD6/4ZLsrqw8WV48bbUpUfhrhOTVsj58ntA/Ghzs=
Subject key identifier: FE:24:B6:A9:DB:77:40:58:7A:60:51:AC:F2:A3:E5:71:19:6E:8E:8B
Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Certificate serial: 649DF431786A09307AC766C6F9C6B1BC88241BFE
Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS17885.roa
Signing time: Thu 12 Nov 2026 18:09:11 +0000
ROA not before: Thu 12 Nov 2026 18:04:11 +0000
ROA not after: Thu 11 Nov 2027 18:09:11 +0000
asID: 17885
IP address blocks: 112.215.6.0/24 maxlen: 24
112.215.7.0/24 maxlen: 24
112.215.10.0/24 maxlen: 24
112.215.11.0/24 maxlen: 24
112.215.18.0/24 maxlen: 24
112.215.21.0/24 maxlen: 24
112.215.22.0/24 maxlen: 24
112.215.26.0/24 maxlen: 24
112.215.30.0/24 maxlen: 24
112.215.33.0/24 maxlen: 24
112.215.34.0/24 maxlen: 24
112.215.37.0/24 maxlen: 24
112.215.40.0/24 maxlen: 24
112.215.41.0/24 maxlen: 24
112.215.42.0/24 maxlen: 24
112.215.46.0/24 maxlen: 24
112.215.49.0/24 maxlen: 24
112.215.62.0/24 maxlen: 24
112.215.68.0/24 maxlen: 24
112.215.69.0/24 maxlen: 24
112.215.73.0/24 maxlen: 24
112.215.77.0/24 maxlen: 24
112.215.78.0/24 maxlen: 24
112.215.81.0/24 maxlen: 24
112.215.87.0/24 maxlen: 24
112.215.89.0/24 maxlen: 24
112.215.94.0/24 maxlen: 24
112.215.96.0/24 maxlen: 24
112.215.97.0/24 maxlen: 24
112.215.98.0/24 maxlen: 24
112.215.100.0/24 maxlen: 24
112.215.105.0/24 maxlen: 24
112.215.106.0/24 maxlen: 24
112.215.107.0/24 maxlen: 24
112.215.108.0/24 maxlen: 24
112.215.112.0/24 maxlen: 24
112.215.113.0/24 maxlen: 24
112.215.114.0/24 maxlen: 24
112.215.116.0/24 maxlen: 24
112.215.118.0/24 maxlen: 24
112.215.119.0/24 maxlen: 24
112.215.121.0/24 maxlen: 24
112.215.125.0/24 maxlen: 24
112.215.129.0/24 maxlen: 24
112.215.131.0/24 maxlen: 24
112.215.132.0/24 maxlen: 24
112.215.137.0/24 maxlen: 24
112.215.141.0/24 maxlen: 24
112.215.143.0/24 maxlen: 24
112.215.159.0/24 maxlen: 24
112.215.176.0/24 maxlen: 24
112.215.177.0/24 maxlen: 24
112.215.178.0/24 maxlen: 24
112.215.190.0/24 maxlen: 24
112.215.191.0/24 maxlen: 24
112.215.192.0/24 maxlen: 24
112.215.193.0/24 maxlen: 24
112.215.194.0/24 maxlen: 24
112.215.195.0/24 maxlen: 24
112.215.196.0/24 maxlen: 24
112.215.197.0/24 maxlen: 24
112.215.205.0/24 maxlen: 24
112.215.248.0/24 maxlen: 24
112.215.255.0/24 maxlen: 24
121.52.0.0/17 maxlen: 17
121.52.25.0/24 maxlen: 24
121.52.26.0/24 maxlen: 24
121.52.29.0/24 maxlen: 24
121.52.35.0/24 maxlen: 24
121.52.36.0/24 maxlen: 24
121.52.37.0/24 maxlen: 24
121.52.38.0/24 maxlen: 24
121.52.40.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
121.52.42.0/24 maxlen: 24
121.52.43.0/24 maxlen: 24
121.52.44.0/24 maxlen: 24
121.52.45.0/24 maxlen: 24
121.52.46.0/24 maxlen: 24
121.52.48.0/24 maxlen: 24
121.52.49.0/24 maxlen: 24
121.52.50.0/24 maxlen: 24
121.52.51.0/24 maxlen: 24
121.52.52.0/24 maxlen: 24
121.52.53.0/24 maxlen: 24
121.52.54.0/24 maxlen: 24
121.52.55.0/24 maxlen: 24
121.52.58.0/24 maxlen: 24
121.52.59.0/24 maxlen: 24
121.52.60.0/24 maxlen: 24
121.52.61.0/24 maxlen: 24
121.52.62.0/24 maxlen: 24
121.52.64.0/24 maxlen: 24
121.52.65.0/24 maxlen: 24
121.52.66.0/24 maxlen: 24
121.52.67.0/24 maxlen: 24
121.52.68.0/24 maxlen: 24
121.52.69.0/24 maxlen: 24
121.52.70.0/24 maxlen: 24
121.52.71.0/24 maxlen: 24
121.52.72.0/24 maxlen: 24
121.52.73.0/24 maxlen: 24
121.52.74.0/24 maxlen: 24
121.52.75.0/24 maxlen: 24
121.52.76.0/24 maxlen: 24
121.52.77.0/24 maxlen: 24
121.52.78.0/24 maxlen: 24
121.52.79.0/24 maxlen: 24
121.52.80.0/24 maxlen: 24
121.52.81.0/24 maxlen: 24
121.52.82.0/24 maxlen: 24
121.52.83.0/24 maxlen: 24
121.52.84.0/24 maxlen: 24
121.52.85.0/24 maxlen: 24
121.52.86.0/24 maxlen: 24
121.52.87.0/24 maxlen: 24
121.52.88.0/24 maxlen: 24
121.52.89.0/24 maxlen: 24
121.52.90.0/24 maxlen: 24
121.52.91.0/24 maxlen: 24
121.52.92.0/24 maxlen: 24
121.52.93.0/24 maxlen: 24
121.52.94.0/24 maxlen: 24
121.52.95.0/24 maxlen: 24
202.152.224.0/19 maxlen: 19
202.152.224.0/24 maxlen: 24
202.152.225.0/24 maxlen: 24
202.152.230.0/24 maxlen: 24
202.152.233.0/24 maxlen: 24
202.152.237.0/24 maxlen: 24
202.152.244.0/24 maxlen: 24
202.152.248.0/24 maxlen: 24
202.152.249.0/24 maxlen: 24
202.152.251.0/24 maxlen: 24
202.152.252.0/24 maxlen: 24
202.152.253.0/24 maxlen: 24
202.152.254.0/24 maxlen: 24
202.152.255.0/24 maxlen: 24
2400:9800:2010::/48 maxlen: 48
2400:9800:2011::/48 maxlen: 48
2400:9800:2012::/48 maxlen: 48
2400:9800:3000::/48 maxlen: 48
2400:9800:3001::/48 maxlen: 48
2400:9800:3002::/48 maxlen: 48
2400:9800:3003::/48 maxlen: 48
2400:9800:3004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 11:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:9d:f4:31:78:6a:09:30:7a:c7:66:c6:f9:c6:b1:bc:88:24:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Validity
Not Before: Nov 12 18:04:11 2026 GMT
Not After : Nov 11 18:09:11 2027 GMT
Subject: CN=FE24B6A9DB7740587A6051ACF2A3E571196E8E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:09:14:b3:bc:01:23:38:46:41:06:2e:26:1d:
bd:01:36:40:0b:bb:2d:5f:b2:f1:a2:69:8a:8b:a7:
27:6f:48:13:85:39:bd:19:79:e3:dc:bb:bc:9f:ad:
9a:00:1a:f2:52:cb:1f:ab:e3:96:2e:e6:93:14:a5:
34:de:ae:c7:26:c9:5e:de:76:90:11:59:b2:b2:d3:
2a:5f:9a:77:08:c2:fd:38:40:a1:46:0c:23:14:86:
25:ce:94:ff:08:8a:6d:31:0a:34:d6:4a:4a:59:be:
ff:8b:8c:07:39:99:ff:84:62:0f:12:a3:2e:a4:a9:
f9:64:e4:c1:cf:2c:db:47:d6:bb:8c:33:7b:29:80:
5a:34:6f:d3:aa:d1:87:87:a1:86:92:94:ac:39:24:
d7:8b:45:24:67:64:76:54:ba:b8:3f:15:43:31:4d:
7e:58:2b:63:f3:99:54:54:a2:5f:15:8b:fa:35:db:
49:d6:00:d1:d0:d9:62:bd:f5:62:87:14:ea:24:3b:
fd:aa:58:9b:f4:54:0a:c9:98:ca:1c:21:87:09:18:
9e:1d:47:c5:bf:be:6c:e4:af:84:ac:95:bc:85:d4:
2b:c8:e2:ff:2f:1e:5f:4d:e4:a1:1f:d0:7e:08:6e:
bd:cb:e3:eb:9d:49:8d:8b:6c:66:98:13:82:24:39:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:24:B6:A9:DB:77:40:58:7A:60:51:AC:F2:A3:E5:71:19:6E:8E:8B
X509v3 Authority Key Identifier:
keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS17885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.6.0/23
112.215.10.0/23
112.215.18.0/24
112.215.21.0-112.215.22.255
112.215.26.0/24
112.215.30.0/24
112.215.33.0-112.215.34.255
112.215.37.0/24
112.215.40.0-112.215.42.255
112.215.46.0/24
112.215.49.0/24
112.215.62.0/24
112.215.68.0/23
112.215.73.0/24
112.215.77.0-112.215.78.255
112.215.81.0/24
112.215.87.0/24
112.215.89.0/24
112.215.94.0/24
112.215.96.0-112.215.98.255
112.215.100.0/24
112.215.105.0-112.215.108.255
112.215.112.0-112.215.114.255
112.215.116.0/24
112.215.118.0/23
112.215.121.0/24
112.215.125.0/24
112.215.129.0/24
112.215.131.0-112.215.132.255
112.215.137.0/24
112.215.141.0/24
112.215.143.0/24
112.215.159.0/24
112.215.176.0-112.215.178.255
112.215.190.0-112.215.197.255
112.215.205.0/24
112.215.248.0/24
112.215.255.0/24
121.52.0.0/17
202.152.224.0/19
IPv6:
2400:9800:2010::-2400:9800:2012:ffff:ffff:ffff:ffff:ffff
2400:9800:3000::-2400:9800:3004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:56:2d:4e:7d:5b:74:71:fb:12:54:12:dc:99:45:4a:23:8a:
e6:90:33:e3:6f:8f:fb:e8:c4:3c:e0:d4:dd:3f:67:6b:74:24:
e1:4c:a8:78:8e:57:34:21:28:49:92:77:0c:53:5c:b9:0b:c5:
a7:81:52:90:8a:7a:af:32:4e:f7:02:44:2a:b7:31:03:58:09:
2f:d2:99:95:d7:74:aa:23:d2:19:0e:28:9a:76:ac:05:50:e6:
f0:f7:d2:1f:1d:94:47:52:fe:dc:ef:31:a6:f3:eb:7d:98:99:
62:b9:0e:5d:11:11:81:3f:77:83:51:f3:11:46:9a:43:9a:43:
48:e0:ba:07:36:2f:b8:3e:f8:89:fd:d7:22:c1:ad:e3:5b:25:
3e:e1:e3:c1:6f:0f:6e:68:d1:45:43:12:51:ba:28:f4:45:c8:
13:93:e7:87:14:53:89:fe:97:79:09:44:8c:04:a3:33:86:84:
16:c2:5f:d9:22:57:9a:7d:99:df:cc:04:55:c1:01:00:83:0c:
55:3b:91:fe:5e:2b:d9:34:e0:57:9a:19:88:f5:d8:c2:71:04:
47:af:f4:89:0b:6b:e3:1c:4b:dc:dc:c4:32:5e:48:1a:66:0c:
71:73:bb:a6:95:49:c1:e9:86:80:f6:96:4e:20:93:54:15:0d:
5b:4d:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:01:37 2026 by rpki-client