Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
File: AS17885.roa (raw, json)
Hash identifier: +GO2dMXskkTZVI0G/x5c/tJuemAtakjNsz3wmOidFEQ=
Subject key identifier: ED:10:B9:86:0B:4E:A9:FC:04:C5:E3:83:EA:F0:A3:E5:FC:5F:7E:24
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 1C0F19000DD81C65E67A5CCACBE5C6C9087B7E38
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
Signing time: Tue 18 Feb 2025 03:30:49 +0000
ROA not before: Tue 18 Feb 2025 03:25:49 +0000
ROA not after: Tue 17 Feb 2026 03:30:49 +0000
asID: 17885
IP address blocks: 112.215.6.0/24 maxlen: 24
112.215.7.0/24 maxlen: 24
112.215.10.0/24 maxlen: 24
112.215.11.0/24 maxlen: 24
112.215.18.0/24 maxlen: 24
112.215.21.0/24 maxlen: 24
112.215.22.0/24 maxlen: 24
112.215.26.0/24 maxlen: 24
112.215.30.0/24 maxlen: 24
112.215.33.0/24 maxlen: 24
112.215.34.0/24 maxlen: 24
112.215.37.0/24 maxlen: 24
112.215.40.0/24 maxlen: 24
112.215.41.0/24 maxlen: 24
112.215.42.0/24 maxlen: 24
112.215.46.0/24 maxlen: 24
112.215.49.0/24 maxlen: 24
112.215.62.0/24 maxlen: 24
112.215.68.0/24 maxlen: 24
112.215.69.0/24 maxlen: 24
112.215.73.0/24 maxlen: 24
112.215.77.0/24 maxlen: 24
112.215.78.0/24 maxlen: 24
112.215.81.0/24 maxlen: 24
112.215.87.0/24 maxlen: 24
112.215.89.0/24 maxlen: 24
112.215.94.0/24 maxlen: 24
112.215.96.0/24 maxlen: 24
112.215.97.0/24 maxlen: 24
112.215.98.0/24 maxlen: 24
112.215.100.0/24 maxlen: 24
112.215.105.0/24 maxlen: 24
112.215.106.0/24 maxlen: 24
112.215.107.0/24 maxlen: 24
112.215.108.0/24 maxlen: 24
112.215.112.0/24 maxlen: 24
112.215.113.0/24 maxlen: 24
112.215.114.0/24 maxlen: 24
112.215.116.0/24 maxlen: 24
112.215.118.0/24 maxlen: 24
112.215.119.0/24 maxlen: 24
112.215.121.0/24 maxlen: 24
112.215.125.0/24 maxlen: 24
112.215.129.0/24 maxlen: 24
112.215.131.0/24 maxlen: 24
112.215.132.0/24 maxlen: 24
112.215.137.0/24 maxlen: 24
112.215.141.0/24 maxlen: 24
112.215.143.0/24 maxlen: 24
112.215.159.0/24 maxlen: 24
112.215.176.0/24 maxlen: 24
112.215.177.0/24 maxlen: 24
112.215.178.0/24 maxlen: 24
112.215.190.0/24 maxlen: 24
112.215.191.0/24 maxlen: 24
112.215.192.0/24 maxlen: 24
112.215.193.0/24 maxlen: 24
112.215.194.0/24 maxlen: 24
112.215.195.0/24 maxlen: 24
112.215.196.0/24 maxlen: 24
112.215.197.0/24 maxlen: 24
112.215.205.0/24 maxlen: 24
112.215.248.0/24 maxlen: 24
112.215.255.0/24 maxlen: 24
121.52.0.0/17 maxlen: 17
121.52.25.0/24 maxlen: 24
121.52.26.0/24 maxlen: 24
121.52.29.0/24 maxlen: 24
121.52.35.0/24 maxlen: 24
121.52.40.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
121.52.42.0/24 maxlen: 24
121.52.45.0/24 maxlen: 24
121.52.46.0/24 maxlen: 24
121.52.48.0/24 maxlen: 24
121.52.49.0/24 maxlen: 24
121.52.50.0/24 maxlen: 24
121.52.51.0/24 maxlen: 24
121.52.52.0/24 maxlen: 24
121.52.53.0/24 maxlen: 24
121.52.54.0/24 maxlen: 24
121.52.55.0/24 maxlen: 24
121.52.59.0/24 maxlen: 24
121.52.60.0/24 maxlen: 24
121.52.61.0/24 maxlen: 24
121.52.64.0/24 maxlen: 24
121.52.65.0/24 maxlen: 24
121.52.66.0/24 maxlen: 24
121.52.67.0/24 maxlen: 24
121.52.68.0/24 maxlen: 24
121.52.69.0/24 maxlen: 24
121.52.70.0/24 maxlen: 24
121.52.71.0/24 maxlen: 24
121.52.72.0/24 maxlen: 24
121.52.73.0/24 maxlen: 24
121.52.74.0/24 maxlen: 24
121.52.75.0/24 maxlen: 24
121.52.76.0/24 maxlen: 24
121.52.77.0/24 maxlen: 24
121.52.78.0/24 maxlen: 24
121.52.79.0/24 maxlen: 24
121.52.80.0/24 maxlen: 24
121.52.81.0/24 maxlen: 24
121.52.82.0/24 maxlen: 24
121.52.83.0/24 maxlen: 24
121.52.84.0/24 maxlen: 24
121.52.85.0/24 maxlen: 24
121.52.86.0/24 maxlen: 24
121.52.87.0/24 maxlen: 24
121.52.88.0/24 maxlen: 24
121.52.89.0/24 maxlen: 24
121.52.91.0/24 maxlen: 24
121.52.92.0/24 maxlen: 24
121.52.93.0/24 maxlen: 24
121.52.94.0/24 maxlen: 24
121.52.95.0/24 maxlen: 24
202.152.224.0/19 maxlen: 19
202.152.224.0/24 maxlen: 24
202.152.225.0/24 maxlen: 24
202.152.230.0/24 maxlen: 24
202.152.233.0/24 maxlen: 24
202.152.237.0/24 maxlen: 24
202.152.244.0/24 maxlen: 24
202.152.248.0/24 maxlen: 24
202.152.249.0/24 maxlen: 24
202.152.251.0/24 maxlen: 24
202.152.252.0/24 maxlen: 24
202.152.253.0/24 maxlen: 24
202.152.254.0/24 maxlen: 24
202.152.255.0/24 maxlen: 24
2400:9800:3000::/48 maxlen: 48
2400:9800:3001::/48 maxlen: 48
2400:9800:3002::/48 maxlen: 48
2400:9800:3003::/48 maxlen: 48
2400:9800:3004::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 02:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0f:19:00:0d:d8:1c:65:e6:7a:5c:ca:cb:e5:c6:c9:08:7b:7e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Feb 18 03:25:49 2025 GMT
Not After : Feb 17 03:30:49 2026 GMT
Subject: CN=ED10B9860B4EA9FC04C5E383EAF0A3E5FC5F7E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:e0:5d:93:15:fa:cd:1b:0b:6b:1f:76:e8:
74:72:57:54:08:83:f2:60:d9:14:d2:aa:de:c3:01:
3d:af:20:ce:b6:1f:88:8f:9a:5f:88:91:14:15:6b:
1e:3c:75:29:46:6c:22:a7:b2:70:7f:3a:00:81:ab:
0f:8d:46:33:eb:66:a0:77:71:cb:da:f5:e6:b7:c6:
86:8d:45:c8:fe:8b:1a:0f:95:b9:6a:44:78:f5:4d:
0d:c1:7c:13:19:ed:0a:e3:41:a0:9d:3a:f3:81:98:
f0:91:da:1b:d5:4b:25:81:41:8a:a4:20:86:63:95:
5b:a4:31:91:30:bc:65:05:5c:61:a1:25:5b:2a:e0:
86:b6:63:b7:10:74:45:25:0b:79:89:74:16:c8:15:
2e:fc:47:10:01:41:d2:08:7e:f5:34:9c:06:34:a8:
b3:98:18:f4:e2:4a:a0:3b:70:00:b4:57:a4:cc:4d:
3c:96:e1:4b:b6:2a:cc:87:b9:47:60:93:6d:e2:bd:
eb:dc:5a:e9:0b:dd:fb:d0:3c:3e:b7:7c:65:49:88:
4a:39:f7:cc:7f:85:5c:af:52:40:a6:95:ac:5d:e8:
28:67:95:30:b4:ea:c5:51:bd:99:94:09:a5:5b:d6:
a6:75:98:d6:86:81:c7:af:fc:52:77:c4:95:7d:0f:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:10:B9:86:0B:4E:A9:FC:04:C5:E3:83:EA:F0:A3:E5:FC:5F:7E:24
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.6.0/23
112.215.10.0/23
112.215.18.0/24
112.215.21.0-112.215.22.255
112.215.26.0/24
112.215.30.0/24
112.215.33.0-112.215.34.255
112.215.37.0/24
112.215.40.0-112.215.42.255
112.215.46.0/24
112.215.49.0/24
112.215.62.0/24
112.215.68.0/23
112.215.73.0/24
112.215.77.0-112.215.78.255
112.215.81.0/24
112.215.87.0/24
112.215.89.0/24
112.215.94.0/24
112.215.96.0-112.215.98.255
112.215.100.0/24
112.215.105.0-112.215.108.255
112.215.112.0-112.215.114.255
112.215.116.0/24
112.215.118.0/23
112.215.121.0/24
112.215.125.0/24
112.215.129.0/24
112.215.131.0-112.215.132.255
112.215.137.0/24
112.215.141.0/24
112.215.143.0/24
112.215.159.0/24
112.215.176.0-112.215.178.255
112.215.190.0-112.215.197.255
112.215.205.0/24
112.215.248.0/24
112.215.255.0/24
121.52.0.0/17
202.152.224.0/19
IPv6:
2400:9800:3000::-2400:9800:3004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:4d:58:aa:23:0f:8b:ff:c8:16:3c:6a:f7:bf:85:a3:1f:af:
bb:52:83:49:45:59:ed:7b:2e:e2:15:4b:e6:62:af:ba:d9:98:
d4:de:5d:01:a7:eb:2c:05:a0:cf:46:2b:94:ba:36:55:55:35:
2f:3b:b3:28:db:0d:eb:29:94:f5:83:6a:83:c9:50:1c:fc:4f:
e0:e7:40:21:38:c3:52:c8:da:f9:6b:f9:98:87:64:db:5c:38:
d0:f4:72:f6:f4:be:46:22:51:98:f2:e0:31:19:8d:42:d8:e0:
7b:95:e0:6f:d6:41:de:db:57:15:b6:68:1b:47:2d:2a:bd:e2:
11:0a:1f:27:0a:1c:0a:a4:21:1b:50:66:5c:26:65:02:1b:d1:
22:9a:f9:c8:7d:36:22:9b:46:11:e0:0a:d6:53:a9:f2:fd:93:
0a:c6:ca:11:78:b6:23:17:5b:ff:65:dc:43:e6:d2:6b:23:d7:
f3:c0:60:5f:38:6d:b3:dd:8f:9c:ba:ae:51:a9:9b:53:76:0c:
60:fb:f2:5f:68:be:f2:f1:2b:a8:5d:ef:be:61:91:02:01:e9:
df:bc:ca:53:03:f6:3b:b8:bd:d4:27:5a:e0:7b:13:a7:12:df:
fc:6a:09:ac:b4:98:17:fc:e7:37:af:a7:2e:98:66:d1:38:25:
57:e4:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:45 2025 by rpki-client