Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
File: AS17885.roa (raw, json)
Hash identifier: CKDxmU+q1RLXdIhC4iASLqBT7kNMXDo5ZBfHvcZdSos=
Subject key identifier: D0:F2:DE:CF:88:28:1C:42:23:15:07:92:B0:A4:E5:69:34:DB:A7:A0
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 4AFA631824961598FDD5B520B9EB68791E17EE82
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
Signing time: Mon 03 Jun 2024 08:04:58 +0000
ROA not before: Mon 03 Jun 2024 07:59:58 +0000
ROA not after: Mon 02 Jun 2025 08:04:58 +0000
asID: 17885
IP address blocks: 112.215.6.0/24 maxlen: 24
112.215.7.0/24 maxlen: 24
112.215.10.0/24 maxlen: 24
112.215.11.0/24 maxlen: 24
112.215.18.0/24 maxlen: 24
112.215.21.0/24 maxlen: 24
112.215.22.0/24 maxlen: 24
112.215.26.0/24 maxlen: 24
112.215.30.0/24 maxlen: 24
112.215.33.0/24 maxlen: 24
112.215.34.0/24 maxlen: 24
112.215.37.0/24 maxlen: 24
112.215.40.0/24 maxlen: 24
112.215.41.0/24 maxlen: 24
112.215.42.0/24 maxlen: 24
112.215.46.0/24 maxlen: 24
112.215.49.0/24 maxlen: 24
112.215.62.0/24 maxlen: 24
112.215.68.0/24 maxlen: 24
112.215.69.0/24 maxlen: 24
112.215.73.0/24 maxlen: 24
112.215.77.0/24 maxlen: 24
112.215.78.0/24 maxlen: 24
112.215.81.0/24 maxlen: 24
112.215.87.0/24 maxlen: 24
112.215.89.0/24 maxlen: 24
112.215.94.0/24 maxlen: 24
112.215.96.0/24 maxlen: 24
112.215.97.0/24 maxlen: 24
112.215.98.0/24 maxlen: 24
112.215.100.0/24 maxlen: 24
112.215.105.0/24 maxlen: 24
112.215.106.0/24 maxlen: 24
112.215.107.0/24 maxlen: 24
112.215.108.0/24 maxlen: 24
112.215.112.0/24 maxlen: 24
112.215.113.0/24 maxlen: 24
112.215.114.0/24 maxlen: 24
112.215.116.0/24 maxlen: 24
112.215.118.0/24 maxlen: 24
112.215.119.0/24 maxlen: 24
112.215.121.0/24 maxlen: 24
112.215.125.0/24 maxlen: 24
112.215.129.0/24 maxlen: 24
112.215.131.0/24 maxlen: 24
112.215.132.0/24 maxlen: 24
112.215.137.0/24 maxlen: 24
112.215.141.0/24 maxlen: 24
112.215.143.0/24 maxlen: 24
112.215.159.0/24 maxlen: 24
112.215.176.0/24 maxlen: 24
112.215.177.0/24 maxlen: 24
112.215.178.0/24 maxlen: 24
112.215.190.0/24 maxlen: 24
112.215.191.0/24 maxlen: 24
112.215.192.0/24 maxlen: 24
112.215.193.0/24 maxlen: 24
112.215.194.0/24 maxlen: 24
112.215.195.0/24 maxlen: 24
112.215.196.0/24 maxlen: 24
112.215.197.0/24 maxlen: 24
112.215.205.0/24 maxlen: 24
112.215.248.0/24 maxlen: 24
112.215.255.0/24 maxlen: 24
121.52.0.0/17 maxlen: 17
121.52.25.0/24 maxlen: 24
121.52.26.0/24 maxlen: 24
121.52.29.0/24 maxlen: 24
121.52.35.0/24 maxlen: 24
121.52.40.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
121.52.42.0/24 maxlen: 24
121.52.45.0/24 maxlen: 24
121.52.48.0/24 maxlen: 24
121.52.49.0/24 maxlen: 24
121.52.50.0/24 maxlen: 24
121.52.51.0/24 maxlen: 24
121.52.52.0/24 maxlen: 24
121.52.53.0/24 maxlen: 24
121.52.54.0/24 maxlen: 24
121.52.55.0/24 maxlen: 24
121.52.59.0/24 maxlen: 24
121.52.60.0/24 maxlen: 24
121.52.61.0/24 maxlen: 24
121.52.64.0/24 maxlen: 24
121.52.65.0/24 maxlen: 24
121.52.66.0/24 maxlen: 24
121.52.67.0/24 maxlen: 24
121.52.68.0/24 maxlen: 24
121.52.69.0/24 maxlen: 24
121.52.70.0/24 maxlen: 24
121.52.71.0/24 maxlen: 24
121.52.72.0/24 maxlen: 24
121.52.73.0/24 maxlen: 24
121.52.74.0/24 maxlen: 24
121.52.75.0/24 maxlen: 24
121.52.76.0/24 maxlen: 24
121.52.77.0/24 maxlen: 24
121.52.78.0/24 maxlen: 24
121.52.79.0/24 maxlen: 24
121.52.80.0/24 maxlen: 24
121.52.81.0/24 maxlen: 24
121.52.82.0/24 maxlen: 24
121.52.83.0/24 maxlen: 24
121.52.84.0/24 maxlen: 24
121.52.85.0/24 maxlen: 24
121.52.86.0/24 maxlen: 24
121.52.87.0/24 maxlen: 24
121.52.88.0/24 maxlen: 24
121.52.89.0/24 maxlen: 24
121.52.91.0/24 maxlen: 24
121.52.92.0/24 maxlen: 24
121.52.93.0/24 maxlen: 24
121.52.94.0/24 maxlen: 24
121.52.95.0/24 maxlen: 24
202.152.224.0/19 maxlen: 19
202.152.224.0/24 maxlen: 24
202.152.225.0/24 maxlen: 24
202.152.230.0/24 maxlen: 24
202.152.233.0/24 maxlen: 24
202.152.237.0/24 maxlen: 24
202.152.244.0/24 maxlen: 24
202.152.248.0/24 maxlen: 24
202.152.249.0/24 maxlen: 24
202.152.251.0/24 maxlen: 24
202.152.252.0/24 maxlen: 24
202.152.253.0/24 maxlen: 24
202.152.254.0/24 maxlen: 24
202.152.255.0/24 maxlen: 24
2400:9800:3000::/48 maxlen: 48
2400:9800:3001::/48 maxlen: 48
2400:9800:3002::/48 maxlen: 48
2400:9800:3003::/48 maxlen: 48
2400:9800:3004::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Jun 2024 19:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fa:63:18:24:96:15:98:fd:d5:b5:20:b9:eb:68:79:1e:17:ee:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Jun 3 07:59:58 2024 GMT
Not After : Jun 2 08:04:58 2025 GMT
Subject: CN=D0F2DECF88281C4223150792B0A4E56934DBA7A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:04:97:7d:e7:3d:bf:1c:b4:ad:72:27:c8:
9a:08:0d:50:2d:d8:c6:a5:f1:21:4f:f7:6a:c0:bd:
19:d0:73:d2:f6:ae:78:16:6a:85:bc:d3:fb:b0:57:
29:e9:5f:18:5d:b5:35:d7:f6:9b:c0:d9:7a:23:dd:
4c:57:68:3e:39:54:74:ad:c4:ac:54:9b:f9:80:aa:
71:64:48:87:b3:56:25:90:db:0b:d6:cd:4e:fc:cd:
c3:f3:d6:51:fb:3f:05:bb:e8:e0:af:14:6d:29:81:
6b:0e:b9:1f:d4:f5:6f:e5:8f:50:73:b4:cd:ac:b0:
00:f4:77:df:b2:e2:6b:ae:18:35:0a:1e:69:b5:74:
c0:cc:62:d8:ae:de:bb:10:8e:0a:f7:c8:27:34:40:
cf:ac:cc:69:c7:82:58:6b:34:69:34:b0:0a:19:70:
d5:b6:9d:c1:4d:21:c7:e0:eb:62:71:33:0c:b6:87:
c5:b6:69:7a:a5:cc:a6:27:65:bb:09:36:84:5c:87:
17:96:93:55:36:ba:0e:72:5a:33:b8:b9:52:9a:51:
83:0a:33:ff:1c:93:8c:64:f7:1d:f8:bb:3d:79:e1:
f8:05:a6:71:42:83:d4:2f:bb:70:38:9e:48:7c:01:
82:cb:d3:9c:44:c5:57:bc:48:94:86:60:b2:a1:21:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F2:DE:CF:88:28:1C:42:23:15:07:92:B0:A4:E5:69:34:DB:A7:A0
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.6.0/23
112.215.10.0/23
112.215.18.0/24
112.215.21.0-112.215.22.255
112.215.26.0/24
112.215.30.0/24
112.215.33.0-112.215.34.255
112.215.37.0/24
112.215.40.0-112.215.42.255
112.215.46.0/24
112.215.49.0/24
112.215.62.0/24
112.215.68.0/23
112.215.73.0/24
112.215.77.0-112.215.78.255
112.215.81.0/24
112.215.87.0/24
112.215.89.0/24
112.215.94.0/24
112.215.96.0-112.215.98.255
112.215.100.0/24
112.215.105.0-112.215.108.255
112.215.112.0-112.215.114.255
112.215.116.0/24
112.215.118.0/23
112.215.121.0/24
112.215.125.0/24
112.215.129.0/24
112.215.131.0-112.215.132.255
112.215.137.0/24
112.215.141.0/24
112.215.143.0/24
112.215.159.0/24
112.215.176.0-112.215.178.255
112.215.190.0-112.215.197.255
112.215.205.0/24
112.215.248.0/24
112.215.255.0/24
121.52.0.0/17
202.152.224.0/19
IPv6:
2400:9800:3000::-2400:9800:3004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:c5:f7:bf:df:69:7d:4d:d9:c0:51:e4:3d:ec:fa:7c:3d:c9:
6f:66:1f:e2:bc:79:4a:2f:74:ce:5c:77:b4:eb:da:a2:ac:83:
4b:fe:e8:1d:fa:ea:0e:6c:1a:e1:7b:9f:48:72:d5:48:aa:f7:
eb:41:b5:c7:e1:8b:03:17:96:50:20:67:1a:f2:84:ab:4c:6c:
80:f6:17:27:6a:ca:70:65:38:2f:0f:a8:0e:57:ae:d4:3d:fd:
e0:ad:74:c3:9c:db:28:e6:4b:12:9b:06:9f:aa:1d:f8:03:c1:
54:a6:3b:b4:43:44:ff:ef:0e:4c:18:2b:3a:11:c7:0c:c8:27:
06:ef:3c:14:9d:f4:f7:2b:a1:82:6a:64:f2:d8:2d:49:e4:af:
77:32:fc:e4:76:a4:3e:61:a2:9e:69:13:37:18:be:a3:9e:c7:
fa:ce:55:5d:45:b3:aa:80:0b:d1:d9:c4:4d:0d:a0:cd:cf:7e:
67:c4:3f:30:ca:63:fe:6e:cb:bc:91:11:d6:06:12:8d:90:05:
11:d5:7b:32:48:89:bc:17:d1:58:ed:77:cb:87:6b:74:b9:1f:
22:ab:8f:97:5e:bb:08:6e:67:fc:fc:ac:4d:88:4e:44:a1:e6:
1f:4c:91:ae:63:84:9e:e4:32:de:15:92:a4:35:b4:47:a9:84:
b1:00:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 11:57:41 2024 by rpki-client on console-fra.rpki-client.org