Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS17885.roa
File: AS17885.roa (raw, json)
Hash identifier: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=
Subject key identifier: BE:85:99:EB:08:2D:5D:7C:8F:E9:8D:25:E4:11:AF:C9:67:2B:D9:28
Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Certificate serial: 6D72C979EAE9F5C3D6D2AE07455AA6152D3F6C77
Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS17885.roa
Signing time: Sun 03 May 2026 02:31:46 +0000
ROA not before: Sun 03 May 2026 02:26:46 +0000
ROA not after: Sun 02 May 2027 02:31:46 +0000
asID: 17885
IP address blocks: 112.215.6.0/24 maxlen: 24
112.215.7.0/24 maxlen: 24
112.215.10.0/24 maxlen: 24
112.215.11.0/24 maxlen: 24
112.215.18.0/24 maxlen: 24
112.215.21.0/24 maxlen: 24
112.215.22.0/24 maxlen: 24
112.215.26.0/24 maxlen: 24
112.215.30.0/24 maxlen: 24
112.215.33.0/24 maxlen: 24
112.215.34.0/24 maxlen: 24
112.215.37.0/24 maxlen: 24
112.215.40.0/24 maxlen: 24
112.215.41.0/24 maxlen: 24
112.215.42.0/24 maxlen: 24
112.215.46.0/24 maxlen: 24
112.215.49.0/24 maxlen: 24
112.215.62.0/24 maxlen: 24
112.215.68.0/24 maxlen: 24
112.215.69.0/24 maxlen: 24
112.215.73.0/24 maxlen: 24
112.215.77.0/24 maxlen: 24
112.215.78.0/24 maxlen: 24
112.215.81.0/24 maxlen: 24
112.215.87.0/24 maxlen: 24
112.215.89.0/24 maxlen: 24
112.215.94.0/24 maxlen: 24
112.215.96.0/24 maxlen: 24
112.215.97.0/24 maxlen: 24
112.215.98.0/24 maxlen: 24
112.215.100.0/24 maxlen: 24
112.215.105.0/24 maxlen: 24
112.215.106.0/24 maxlen: 24
112.215.107.0/24 maxlen: 24
112.215.108.0/24 maxlen: 24
112.215.112.0/24 maxlen: 24
112.215.113.0/24 maxlen: 24
112.215.114.0/24 maxlen: 24
112.215.116.0/24 maxlen: 24
112.215.118.0/24 maxlen: 24
112.215.119.0/24 maxlen: 24
112.215.121.0/24 maxlen: 24
112.215.125.0/24 maxlen: 24
112.215.129.0/24 maxlen: 24
112.215.131.0/24 maxlen: 24
112.215.132.0/24 maxlen: 24
112.215.137.0/24 maxlen: 24
112.215.141.0/24 maxlen: 24
112.215.143.0/24 maxlen: 24
112.215.159.0/24 maxlen: 24
112.215.176.0/24 maxlen: 24
112.215.177.0/24 maxlen: 24
112.215.178.0/24 maxlen: 24
112.215.190.0/24 maxlen: 24
112.215.191.0/24 maxlen: 24
112.215.192.0/24 maxlen: 24
112.215.193.0/24 maxlen: 24
112.215.194.0/24 maxlen: 24
112.215.195.0/24 maxlen: 24
112.215.196.0/24 maxlen: 24
112.215.197.0/24 maxlen: 24
112.215.205.0/24 maxlen: 24
112.215.248.0/24 maxlen: 24
112.215.255.0/24 maxlen: 24
121.52.0.0/17 maxlen: 17
121.52.25.0/24 maxlen: 24
121.52.26.0/24 maxlen: 24
121.52.29.0/24 maxlen: 24
121.52.35.0/24 maxlen: 24
121.52.40.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
121.52.42.0/24 maxlen: 24
121.52.45.0/24 maxlen: 24
121.52.46.0/24 maxlen: 24
121.52.48.0/24 maxlen: 24
121.52.49.0/24 maxlen: 24
121.52.50.0/24 maxlen: 24
121.52.51.0/24 maxlen: 24
121.52.52.0/24 maxlen: 24
121.52.53.0/24 maxlen: 24
121.52.54.0/24 maxlen: 24
121.52.55.0/24 maxlen: 24
121.52.58.0/24 maxlen: 24
121.52.59.0/24 maxlen: 24
121.52.60.0/24 maxlen: 24
121.52.61.0/24 maxlen: 24
121.52.62.0/24 maxlen: 24
121.52.64.0/24 maxlen: 24
121.52.65.0/24 maxlen: 24
121.52.66.0/24 maxlen: 24
121.52.67.0/24 maxlen: 24
121.52.68.0/24 maxlen: 24
121.52.69.0/24 maxlen: 24
121.52.70.0/24 maxlen: 24
121.52.71.0/24 maxlen: 24
121.52.72.0/24 maxlen: 24
121.52.73.0/24 maxlen: 24
121.52.74.0/24 maxlen: 24
121.52.75.0/24 maxlen: 24
121.52.76.0/24 maxlen: 24
121.52.77.0/24 maxlen: 24
121.52.78.0/24 maxlen: 24
121.52.79.0/24 maxlen: 24
121.52.80.0/24 maxlen: 24
121.52.81.0/24 maxlen: 24
121.52.82.0/24 maxlen: 24
121.52.83.0/24 maxlen: 24
121.52.84.0/24 maxlen: 24
121.52.85.0/24 maxlen: 24
121.52.86.0/24 maxlen: 24
121.52.87.0/24 maxlen: 24
121.52.88.0/24 maxlen: 24
121.52.89.0/24 maxlen: 24
121.52.90.0/24 maxlen: 24
121.52.91.0/24 maxlen: 24
121.52.92.0/24 maxlen: 24
121.52.93.0/24 maxlen: 24
121.52.94.0/24 maxlen: 24
121.52.95.0/24 maxlen: 24
202.152.224.0/19 maxlen: 19
202.152.224.0/24 maxlen: 24
202.152.225.0/24 maxlen: 24
202.152.230.0/24 maxlen: 24
202.152.233.0/24 maxlen: 24
202.152.237.0/24 maxlen: 24
202.152.244.0/24 maxlen: 24
202.152.248.0/24 maxlen: 24
202.152.249.0/24 maxlen: 24
202.152.251.0/24 maxlen: 24
202.152.252.0/24 maxlen: 24
202.152.253.0/24 maxlen: 24
202.152.254.0/24 maxlen: 24
202.152.255.0/24 maxlen: 24
2400:9800:2010::/48 maxlen: 48
2400:9800:2011::/48 maxlen: 48
2400:9800:2012::/48 maxlen: 48
2400:9800:3000::/48 maxlen: 48
2400:9800:3001::/48 maxlen: 48
2400:9800:3002::/48 maxlen: 48
2400:9800:3003::/48 maxlen: 48
2400:9800:3004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:72:c9:79:ea:e9:f5:c3:d6:d2:ae:07:45:5a:a6:15:2d:3f:6c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Validity
Not Before: May 3 02:26:46 2026 GMT
Not After : May 2 02:31:46 2027 GMT
Subject: CN=BE8599EB082D5D7C8FE98D25E411AFC9672BD928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:6e:ae:09:21:c9:b6:02:c2:45:08:0a:c4:
be:d0:0f:da:cb:d5:07:79:b1:dc:35:5e:2d:70:af:
b6:45:79:cd:11:56:e5:88:a9:89:1a:8b:54:a2:51:
67:16:bb:96:43:4e:9c:74:f5:78:a8:e7:85:f9:98:
4a:28:9d:6b:b3:aa:bd:95:4e:e0:d2:24:96:4c:03:
73:17:9e:13:af:86:79:d4:ac:fd:8b:83:f7:dc:7f:
a5:a1:0c:ff:b3:c8:f8:aa:99:92:76:6e:09:b1:59:
76:68:9c:81:17:31:9d:02:96:09:8c:a2:39:9a:a3:
2f:aa:bc:d4:88:d0:07:7b:9a:ed:a4:35:1a:76:f6:
50:0a:23:31:b1:36:20:e5:b1:e0:f4:63:8a:01:20:
08:36:68:c4:f4:37:d0:75:47:39:31:b7:34:19:cb:
74:db:e2:69:f4:39:87:d0:c9:d1:b2:8e:14:8a:c0:
83:2a:5b:11:d5:4a:64:39:36:d3:42:0b:aa:38:b2:
c8:c1:a0:6b:f0:ab:16:85:85:d9:e7:f3:7f:71:c9:
be:c6:e8:75:1e:fe:44:f1:c6:da:cb:c1:82:16:8f:
ca:40:5f:f2:9b:af:7a:8e:85:64:bf:05:56:57:6a:
c4:8b:8e:d3:86:f7:bd:2a:34:84:a8:e4:ec:3a:df:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:99:EB:08:2D:5D:7C:8F:E9:8D:25:E4:11:AF:C9:67:2B:D9:28
X509v3 Authority Key Identifier:
keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS17885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.6.0/23
112.215.10.0/23
112.215.18.0/24
112.215.21.0-112.215.22.255
112.215.26.0/24
112.215.30.0/24
112.215.33.0-112.215.34.255
112.215.37.0/24
112.215.40.0-112.215.42.255
112.215.46.0/24
112.215.49.0/24
112.215.62.0/24
112.215.68.0/23
112.215.73.0/24
112.215.77.0-112.215.78.255
112.215.81.0/24
112.215.87.0/24
112.215.89.0/24
112.215.94.0/24
112.215.96.0-112.215.98.255
112.215.100.0/24
112.215.105.0-112.215.108.255
112.215.112.0-112.215.114.255
112.215.116.0/24
112.215.118.0/23
112.215.121.0/24
112.215.125.0/24
112.215.129.0/24
112.215.131.0-112.215.132.255
112.215.137.0/24
112.215.141.0/24
112.215.143.0/24
112.215.159.0/24
112.215.176.0-112.215.178.255
112.215.190.0-112.215.197.255
112.215.205.0/24
112.215.248.0/24
112.215.255.0/24
121.52.0.0/17
202.152.224.0/19
IPv6:
2400:9800:2010::-2400:9800:2012:ffff:ffff:ffff:ffff:ffff
2400:9800:3000::-2400:9800:3004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:74:98:31:87:fc:80:d1:50:a8:0b:4a:19:08:39:69:7b:64:
a4:9b:89:fe:5a:ee:df:f0:ff:db:b3:5f:31:a3:31:bb:f1:df:
06:30:fe:bd:a1:d7:10:5e:f5:bf:a3:06:37:7b:2e:6a:d3:fe:
d5:b2:f6:76:07:a8:92:90:30:9c:c2:14:4f:83:5a:71:6d:e5:
71:c0:e1:95:8a:bb:c5:ce:da:fe:6a:dd:d4:a4:71:22:33:1c:
45:85:09:08:4f:95:f6:b8:9e:b6:2c:2a:e3:96:78:02:cb:31:
9a:90:32:00:02:16:2e:33:e7:80:09:66:0f:e7:b9:27:ef:df:
5a:4c:46:e3:20:c7:38:2f:3d:c3:cd:ec:76:b8:89:55:35:25:
ef:a7:17:37:bf:66:45:09:23:18:37:9e:f5:77:1f:f4:6d:16:
2a:17:11:93:9d:30:63:45:b9:cb:be:2b:06:68:39:ec:35:88:
0f:29:eb:20:23:cf:91:4b:0c:ac:88:f2:11:55:21:78:03:c1:
6f:1f:f1:2e:18:ce:09:ed:17:d8:56:8b:34:74:b6:af:fe:f7:
2b:e4:fe:bf:da:0d:b2:d8:b7:b9:c5:c7:2d:4e:e1:b7:33:9c:
da:75:0c:c9:fa:c5:b1:7a:c7:b5:7c:6a:bc:ff:df:03:80:e9:
23:b0:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:51:45 2026 by rpki-client