Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS17995.roa
File: AS17995.roa (raw, json)
Hash identifier: kvmfvdf7tof6m4AITIiMsfKnE9IhDSAGJgPc4Tj++G4=
Subject key identifier: 1A:0A:D8:82:FD:31:14:B9:EE:FC:F1:01:C4:54:80:E1:3A:67:A3:08
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3F9A130252C4305CE993F56830C9ACF54DEC878F
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17995.roa
Signing time: Sun 03 May 2026 15:10:41 +0000
ROA not before: Sun 03 May 2026 15:05:41 +0000
ROA not after: Sun 02 May 2027 15:10:41 +0000
asID: 17995
IP address blocks: 103.6.200.0/22 maxlen: 24
103.16.232.0/22 maxlen: 24
103.85.148.0/22 maxlen: 24
103.105.64.0/22 maxlen: 24
103.105.68.0/22 maxlen: 24
103.124.188.0/22 maxlen: 23
103.124.220.0/22 maxlen: 23
103.124.228.0/22 maxlen: 23
103.125.4.0/22 maxlen: 23
103.125.8.0/22 maxlen: 23
103.125.212.0/22 maxlen: 24
103.127.8.0/22 maxlen: 23
103.127.12.0/22 maxlen: 23
103.127.52.0/22 maxlen: 23
103.139.46.0/23 maxlen: 24
103.150.108.0/23 maxlen: 24
103.150.110.0/23 maxlen: 24
103.150.112.0/23 maxlen: 24
103.150.114.0/23 maxlen: 24
103.157.114.0/23 maxlen: 24
103.157.190.0/24 maxlen: 24
103.157.191.0/24 maxlen: 24
103.158.66.0/23 maxlen: 24
103.158.68.0/23 maxlen: 24
103.161.188.0/23 maxlen: 24
103.163.10.0/23 maxlen: 24
103.163.128.0/23 maxlen: 24
103.164.16.0/23 maxlen: 24
103.164.98.0/23 maxlen: 24
103.164.100.0/23 maxlen: 24
103.164.102.0/23 maxlen: 24
103.164.104.0/23 maxlen: 24
103.164.106.0/23 maxlen: 24
103.164.108.0/23 maxlen: 24
103.164.110.0/23 maxlen: 24
103.164.112.0/23 maxlen: 24
103.164.114.0/23 maxlen: 24
103.164.116.0/23 maxlen: 24
103.164.118.0/23 maxlen: 24
103.164.120.0/23 maxlen: 24
103.164.122.0/23 maxlen: 24
103.164.124.0/23 maxlen: 24
103.164.136.0/23 maxlen: 24
103.164.190.0/23 maxlen: 24
103.164.194.0/23 maxlen: 24
103.164.212.0/23 maxlen: 24
103.164.214.0/23 maxlen: 24
103.164.216.0/23 maxlen: 24
103.164.218.0/23 maxlen: 24
103.164.220.0/23 maxlen: 24
103.164.222.0/23 maxlen: 24
103.164.248.0/23 maxlen: 24
103.165.32.0/23 maxlen: 24
103.165.34.0/23 maxlen: 24
103.165.36.0/23 maxlen: 24
103.165.38.0/23 maxlen: 24
103.165.40.0/23 maxlen: 24
103.165.42.0/23 maxlen: 24
103.165.58.0/23 maxlen: 24
103.165.60.0/23 maxlen: 24
103.165.122.0/23 maxlen: 24
103.165.124.0/23 maxlen: 24
103.165.126.0/23 maxlen: 24
103.165.128.0/23 maxlen: 24
103.165.130.0/23 maxlen: 24
103.165.132.0/23 maxlen: 24
103.165.134.0/23 maxlen: 24
103.165.136.0/23 maxlen: 24
103.165.138.0/23 maxlen: 24
103.165.140.0/23 maxlen: 24
103.165.194.0/23 maxlen: 24
103.165.196.0/23 maxlen: 24
103.165.198.0/23 maxlen: 24
103.165.200.0/23 maxlen: 24
103.165.202.0/23 maxlen: 24
103.165.204.0/23 maxlen: 24
103.165.206.0/23 maxlen: 24
103.165.208.0/23 maxlen: 24
103.165.210.0/23 maxlen: 24
103.165.212.0/23 maxlen: 24
103.165.214.0/23 maxlen: 24
103.165.216.0/23 maxlen: 24
103.165.218.0/23 maxlen: 24
103.165.220.0/23 maxlen: 24
103.165.222.0/23 maxlen: 24
103.165.224.0/23 maxlen: 24
103.165.226.0/23 maxlen: 24
103.165.228.0/23 maxlen: 24
103.165.230.0/23 maxlen: 24
103.165.232.0/23 maxlen: 24
103.165.234.0/23 maxlen: 24
103.165.236.0/23 maxlen: 24
103.165.238.0/23 maxlen: 24
103.165.240.0/23 maxlen: 24
103.166.104.0/23 maxlen: 24
103.167.218.0/23 maxlen: 24
103.182.180.0/23 maxlen: 24
103.182.182.0/23 maxlen: 24
103.182.184.0/23 maxlen: 24
103.182.186.0/23 maxlen: 24
103.182.188.0/23 maxlen: 24
103.182.190.0/23 maxlen: 24
103.182.192.0/23 maxlen: 24
103.182.194.0/23 maxlen: 24
103.182.200.0/23 maxlen: 24
103.182.202.0/23 maxlen: 24
103.182.204.0/23 maxlen: 24
103.182.206.0/23 maxlen: 24
103.182.208.0/23 maxlen: 24
103.182.222.0/23 maxlen: 24
103.182.224.0/23 maxlen: 24
103.182.228.0/23 maxlen: 24
103.182.230.0/23 maxlen: 24
103.182.232.0/23 maxlen: 24
103.182.234.0/23 maxlen: 24
103.182.236.0/23 maxlen: 24
103.182.238.0/23 maxlen: 24
103.182.240.0/23 maxlen: 24
103.182.242.0/23 maxlen: 24
103.182.244.0/23 maxlen: 24
103.182.252.0/23 maxlen: 24
103.182.254.0/23 maxlen: 24
103.183.0.0/23 maxlen: 24
103.183.12.0/23 maxlen: 24
103.183.14.0/23 maxlen: 24
103.183.18.0/23 maxlen: 24
103.183.20.0/23 maxlen: 24
103.183.22.0/23 maxlen: 24
124.158.144.0/20 maxlen: 24
182.16.160.0/19 maxlen: 24
202.51.96.0/19 maxlen: 24
2407:4e00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9a:13:02:52:c4:30:5c:e9:93:f5:68:30:c9:ac:f5:4d:ec:87:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 15:05:41 2026 GMT
Not After : May 2 15:10:41 2027 GMT
Subject: CN=1A0AD882FD3114B9EEFCF101C45480E13A67A308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:43:b0:91:6d:86:e9:37:6a:15:18:c0:0a:
91:61:20:68:94:18:ad:20:92:37:b0:ce:94:40:9b:
3f:09:3d:2f:d4:19:4b:8e:ba:92:0d:d4:41:65:e8:
03:28:37:f4:30:61:07:71:87:e7:4d:e0:59:c1:53:
5a:d3:d6:42:19:15:64:8d:85:c3:aa:d6:8d:59:64:
06:c1:3a:8a:99:2e:bd:43:72:43:d1:e1:3a:6f:9e:
33:12:6f:50:a9:da:4f:4a:2b:1d:b4:85:5e:45:0f:
73:2a:4f:02:2a:2c:31:d7:82:8f:0d:a8:4b:a1:54:
7b:40:61:31:72:98:e7:95:e0:5b:d1:e4:24:bf:78:
07:db:4c:9e:3b:70:92:46:f7:1f:df:b6:fc:24:37:
b8:73:6e:a4:ea:c6:6a:3a:fd:27:95:cd:3a:f3:94:
8b:26:3a:ff:07:56:61:f9:08:43:69:ea:4f:0f:8f:
f8:16:e1:5e:bc:3b:7d:f1:2d:b3:47:76:88:1b:14:
e4:fe:66:ae:6d:4c:bf:88:6d:e3:38:96:ba:80:6a:
44:a8:72:4f:73:9e:81:5a:58:f7:e4:5c:07:65:2e:
2f:d2:5d:d6:7b:5a:49:51:67:0c:25:a4:f3:5f:ac:
f5:5a:3a:f4:ac:bc:65:f6:2a:58:f3:2d:e6:3e:ff:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0A:D8:82:FD:31:14:B9:EE:FC:F1:01:C4:54:80:E1:3A:67:A3:08
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.6.200.0/22
103.16.232.0/22
103.85.148.0/22
103.105.64.0/21
103.124.188.0/22
103.124.220.0/22
103.124.228.0/22
103.125.4.0-103.125.11.255
103.125.212.0/22
103.127.8.0/21
103.127.52.0/22
103.139.46.0/23
103.150.108.0-103.150.115.255
103.157.114.0/23
103.157.190.0/23
103.158.66.0-103.158.69.255
103.161.188.0/23
103.163.10.0/23
103.163.128.0/23
103.164.16.0/23
103.164.98.0-103.164.125.255
103.164.136.0/23
103.164.190.0/23
103.164.194.0/23
103.164.212.0-103.164.223.255
103.164.248.0/23
103.165.32.0-103.165.43.255
103.165.58.0-103.165.61.255
103.165.122.0-103.165.141.255
103.165.194.0-103.165.241.255
103.166.104.0/23
103.167.218.0/23
103.182.180.0-103.182.195.255
103.182.200.0-103.182.209.255
103.182.222.0-103.182.225.255
103.182.228.0-103.182.245.255
103.182.252.0-103.183.1.255
103.183.12.0/22
103.183.18.0-103.183.23.255
124.158.144.0/20
182.16.160.0/19
202.51.96.0/19
IPv6:
2407:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
83:c2:32:41:07:9d:5d:b8:1c:f7:2e:a5:22:7e:af:eb:f6:77:
8c:05:ee:e3:79:4a:01:bf:c9:31:93:0a:ee:22:bc:4a:4e:ae:
35:27:fa:bf:ae:8f:5a:b9:0c:52:83:18:7b:b3:b6:ba:3f:ae:
ae:bb:58:5b:28:d1:ec:c3:05:9b:ec:6f:2e:67:3c:57:fb:f9:
20:71:19:a6:ba:b5:ec:04:57:1a:57:be:02:c0:00:b5:45:27:
93:e8:3d:5e:55:69:af:40:62:06:3e:8f:27:28:91:99:fa:c8:
c9:ba:67:e2:d5:17:2d:b3:9e:84:d7:02:a4:09:c3:93:36:54:
7e:d2:45:13:e2:aa:90:84:37:11:14:3a:09:d8:e8:00:40:fb:
44:3f:5e:cd:51:ba:54:9f:0c:67:5f:ab:70:d6:ae:e9:10:f5:
df:59:32:0d:f9:d0:6c:e2:89:4e:64:3c:c8:82:64:de:8c:79:
b4:20:03:6b:5a:69:d7:7a:13:d1:3f:22:85:5b:57:52:94:87:
2d:23:b3:c5:0b:76:f9:b7:13:17:d2:67:7a:4a:50:94:82:7d:
d8:3f:80:0a:a0:d5:dc:dc:41:ef:82:96:d0:f7:25:0e:a1:fa:
91:c5:b2:c8:0e:72:35:53:25:6f:f9:fd:8b:fc:eb:e1:d2:f4:
58:7b:57:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:52 2026 by rpki-client