Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
File: AS17885.roa (raw, json)
Hash identifier: 1xLZ/AFS1HfYk4J1Tgt/NWsKQftQfmafByXul91TkRA=
Subject key identifier: 0C:38:A0:FC:87:70:B0:55:D0:FB:E1:6B:67:55:BE:A6:83:0D:3C:59
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6BE1CC4448DA9DCA995485A2757794CCC6D27386
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
Signing time: Thu 16 May 2024 15:23:21 +0000
ROA not before: Thu 16 May 2024 15:18:21 +0000
ROA not after: Thu 15 May 2025 15:23:21 +0000
asID: 17885
IP address blocks: 112.215.6.0/24 maxlen: 24
112.215.7.0/24 maxlen: 24
112.215.10.0/24 maxlen: 24
112.215.11.0/24 maxlen: 24
112.215.18.0/24 maxlen: 24
112.215.21.0/24 maxlen: 24
112.215.22.0/24 maxlen: 24
112.215.26.0/24 maxlen: 24
112.215.30.0/24 maxlen: 24
112.215.33.0/24 maxlen: 24
112.215.34.0/24 maxlen: 24
112.215.37.0/24 maxlen: 24
112.215.40.0/24 maxlen: 24
112.215.41.0/24 maxlen: 24
112.215.42.0/24 maxlen: 24
112.215.46.0/24 maxlen: 24
112.215.49.0/24 maxlen: 24
112.215.62.0/24 maxlen: 24
112.215.68.0/24 maxlen: 24
112.215.69.0/24 maxlen: 24
112.215.73.0/24 maxlen: 24
112.215.77.0/24 maxlen: 24
112.215.78.0/24 maxlen: 24
112.215.81.0/24 maxlen: 24
112.215.87.0/24 maxlen: 24
112.215.89.0/24 maxlen: 24
112.215.94.0/24 maxlen: 24
112.215.96.0/24 maxlen: 24
112.215.97.0/24 maxlen: 24
112.215.98.0/24 maxlen: 24
112.215.100.0/24 maxlen: 24
112.215.105.0/24 maxlen: 24
112.215.106.0/24 maxlen: 24
112.215.107.0/24 maxlen: 24
112.215.108.0/24 maxlen: 24
112.215.112.0/24 maxlen: 24
112.215.113.0/24 maxlen: 24
112.215.114.0/24 maxlen: 24
112.215.116.0/24 maxlen: 24
112.215.118.0/24 maxlen: 24
112.215.119.0/24 maxlen: 24
112.215.121.0/24 maxlen: 24
112.215.125.0/24 maxlen: 24
112.215.129.0/24 maxlen: 24
112.215.131.0/24 maxlen: 24
112.215.132.0/24 maxlen: 24
112.215.137.0/24 maxlen: 24
112.215.141.0/24 maxlen: 24
112.215.143.0/24 maxlen: 24
112.215.159.0/24 maxlen: 24
112.215.176.0/24 maxlen: 24
112.215.177.0/24 maxlen: 24
112.215.178.0/24 maxlen: 24
112.215.190.0/24 maxlen: 24
112.215.191.0/24 maxlen: 24
112.215.192.0/24 maxlen: 24
112.215.193.0/24 maxlen: 24
112.215.194.0/24 maxlen: 24
112.215.195.0/24 maxlen: 24
112.215.196.0/24 maxlen: 24
112.215.197.0/24 maxlen: 24
112.215.205.0/24 maxlen: 24
112.215.248.0/24 maxlen: 24
112.215.255.0/24 maxlen: 24
121.52.0.0/17 maxlen: 17
121.52.25.0/24 maxlen: 24
121.52.26.0/24 maxlen: 24
121.52.29.0/24 maxlen: 24
121.52.35.0/24 maxlen: 24
121.52.40.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
121.52.42.0/24 maxlen: 24
121.52.45.0/24 maxlen: 24
121.52.48.0/24 maxlen: 24
121.52.49.0/24 maxlen: 24
121.52.50.0/24 maxlen: 24
121.52.51.0/24 maxlen: 24
121.52.52.0/24 maxlen: 24
121.52.53.0/24 maxlen: 24
121.52.54.0/24 maxlen: 24
121.52.55.0/24 maxlen: 24
121.52.59.0/24 maxlen: 24
121.52.60.0/24 maxlen: 24
121.52.61.0/24 maxlen: 24
121.52.64.0/24 maxlen: 24
121.52.65.0/24 maxlen: 24
121.52.66.0/24 maxlen: 24
121.52.67.0/24 maxlen: 24
121.52.68.0/24 maxlen: 24
121.52.69.0/24 maxlen: 24
121.52.70.0/24 maxlen: 24
121.52.71.0/24 maxlen: 24
121.52.72.0/24 maxlen: 24
121.52.73.0/24 maxlen: 24
121.52.74.0/24 maxlen: 24
121.52.75.0/24 maxlen: 24
121.52.76.0/24 maxlen: 24
121.52.77.0/24 maxlen: 24
121.52.78.0/24 maxlen: 24
121.52.79.0/24 maxlen: 24
121.52.80.0/24 maxlen: 24
121.52.81.0/24 maxlen: 24
121.52.82.0/24 maxlen: 24
121.52.83.0/24 maxlen: 24
121.52.84.0/24 maxlen: 24
121.52.85.0/24 maxlen: 24
121.52.86.0/24 maxlen: 24
121.52.87.0/24 maxlen: 24
121.52.88.0/24 maxlen: 24
121.52.89.0/24 maxlen: 24
121.52.91.0/24 maxlen: 24
121.52.92.0/24 maxlen: 24
121.52.93.0/24 maxlen: 24
121.52.94.0/24 maxlen: 24
121.52.95.0/24 maxlen: 24
202.152.224.0/19 maxlen: 19
202.152.224.0/24 maxlen: 24
202.152.225.0/24 maxlen: 24
202.152.230.0/24 maxlen: 24
202.152.233.0/24 maxlen: 24
202.152.237.0/24 maxlen: 24
202.152.244.0/24 maxlen: 24
202.152.248.0/24 maxlen: 24
202.152.249.0/24 maxlen: 24
202.152.251.0/24 maxlen: 24
202.152.252.0/24 maxlen: 24
202.152.253.0/24 maxlen: 24
202.152.254.0/24 maxlen: 24
202.152.255.0/24 maxlen: 24
2400:9800:3000::/48 maxlen: 48
2400:9800:3001::/48 maxlen: 48
2400:9800:3002::/48 maxlen: 48
2400:9800:3003::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Jun 2024 17:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e1:cc:44:48:da:9d:ca:99:54:85:a2:75:77:94:cc:c6:d2:73:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: May 16 15:18:21 2024 GMT
Not After : May 15 15:23:21 2025 GMT
Subject: CN=0C38A0FC8770B055D0FBE16B6755BEA6830D3C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:98:47:70:cf:a5:2f:01:96:0f:9e:3b:e9:
09:d8:e8:c4:74:99:26:60:7b:33:e2:16:4a:94:04:
20:8e:60:83:4c:ff:b2:09:fb:cd:c1:d5:fb:8c:d2:
e1:13:ea:a5:82:01:ab:e7:ea:85:16:f0:ab:d6:0e:
48:ff:d3:5b:4a:a1:ab:18:37:6d:90:88:75:29:3f:
a7:12:4a:f6:85:fd:d0:2e:60:fa:fa:a3:62:55:66:
2c:b9:23:62:b3:41:4d:b3:30:6e:64:3f:60:63:05:
16:8f:b5:b7:d0:5b:0d:2d:64:c6:3a:bc:41:18:e5:
d1:57:05:e9:b6:cb:85:03:6b:6c:81:e2:02:cc:ee:
0e:ae:59:1d:8e:79:cb:fb:d6:0c:62:02:18:01:ad:
9d:10:28:2c:d1:9b:fc:b2:b8:fa:51:48:ae:c9:6b:
b9:8f:7b:81:b1:1a:e0:d2:30:71:df:d2:e1:70:e2:
92:61:48:43:25:01:5d:56:02:2f:91:18:bb:c7:c5:
cb:46:41:8e:df:30:3b:4f:70:7b:02:a5:4b:37:de:
5d:6e:8d:7e:f6:b0:e5:e5:e7:9b:eb:d1:da:e2:9b:
85:00:e8:62:b8:3d:f6:b5:1e:a6:08:c1:05:83:2f:
0b:53:1b:f8:06:74:1e:26:49:87:17:43:a9:eb:8f:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:38:A0:FC:87:70:B0:55:D0:FB:E1:6B:67:55:BE:A6:83:0D:3C:59
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.6.0/23
112.215.10.0/23
112.215.18.0/24
112.215.21.0-112.215.22.255
112.215.26.0/24
112.215.30.0/24
112.215.33.0-112.215.34.255
112.215.37.0/24
112.215.40.0-112.215.42.255
112.215.46.0/24
112.215.49.0/24
112.215.62.0/24
112.215.68.0/23
112.215.73.0/24
112.215.77.0-112.215.78.255
112.215.81.0/24
112.215.87.0/24
112.215.89.0/24
112.215.94.0/24
112.215.96.0-112.215.98.255
112.215.100.0/24
112.215.105.0-112.215.108.255
112.215.112.0-112.215.114.255
112.215.116.0/24
112.215.118.0/23
112.215.121.0/24
112.215.125.0/24
112.215.129.0/24
112.215.131.0-112.215.132.255
112.215.137.0/24
112.215.141.0/24
112.215.143.0/24
112.215.159.0/24
112.215.176.0-112.215.178.255
112.215.190.0-112.215.197.255
112.215.205.0/24
112.215.248.0/24
112.215.255.0/24
121.52.0.0/17
202.152.224.0/19
IPv6:
2400:9800:3000::/46
Signature Algorithm: sha256WithRSAEncryption
2a:73:a6:07:2e:5c:37:c3:53:48:e5:63:cd:53:d1:93:8c:2a:
f0:23:c3:cf:3f:52:06:d6:db:ac:b6:b8:72:f9:e0:a9:ad:98:
71:9b:8e:68:1b:0e:27:62:6d:fa:2a:21:1b:39:4a:1e:9e:15:
86:81:d5:aa:31:98:53:b6:e3:e2:87:7b:d7:e5:64:a5:79:ff:
2c:8b:e8:10:07:21:14:a1:fa:92:92:84:e3:cd:8e:94:08:ed:
2e:a5:e3:7f:d7:33:fa:c8:1d:58:84:df:0d:4b:c1:d4:aa:b9:
3e:ff:a4:d1:da:af:d0:4a:f9:73:fa:0b:05:5e:32:8d:e1:0b:
c8:ba:2e:7d:29:fa:23:81:9a:24:10:6d:8a:47:8d:a3:eb:f0:
69:19:81:34:91:c0:d1:71:5b:03:ca:fc:c1:d2:fb:97:54:b1:
14:0c:ae:5a:a4:9e:c1:02:07:6a:e8:d3:d5:d0:2a:e1:d0:78:
3d:f9:f7:df:44:50:7e:45:18:38:64:cd:bb:b2:aa:12:0e:f2:
ae:d1:58:a7:fe:1c:d9:d0:ea:7a:60:0c:50:6c:40:d6:0d:4f:
ab:1d:2f:36:52:92:7c:c6:b8:eb:10:2c:a8:63:ee:a3:81:71:
e3:16:03:da:58:96:01:bc:86:d8:ce:a6:e6:3f:f5:31:5f:a0:
99:e6:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:42:49 2024 by rpki-client on console-fra.rpki-client.org