Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS7303.roa
File: AS7303.roa (raw, json)
Hash identifier: +LYUpdkof1dRVPDtR4uYtywVsr9oTvmCcODf13aZA+U=
Subject key identifier: DC:FB:C7:66:37:B1:00:B6:15:23:56:7B:F0:6C:07:EF:FF:49:07:E6
Certificate issuer: /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial: 1D4DE0BEE253ABFFF639EF479801E03A37DEFF8B
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS7303.roa
Signing time: Thu 25 Jun 2026 18:49:47 +0000
ROA not before: Thu 25 Jun 2026 18:44:47 +0000
ROA not after: Thu 24 Jun 2027 18:49:47 +0000
asID: 7303
IP address blocks: 24.232.0.0/16 maxlen: 24
66.60.0.0/18 maxlen: 24
152.168.0.0/14 maxlen: 24
170.150.196.0/22 maxlen: 24
170.231.136.0/22 maxlen: 24
181.0.0.0/16 maxlen: 24
181.1.0.0/17 maxlen: 24
181.1.128.0/20 maxlen: 24
181.1.144.0/21 maxlen: 24
181.1.156.0/22 maxlen: 24
181.1.160.0/19 maxlen: 24
181.1.192.0/18 maxlen: 24
181.2.0.0/15 maxlen: 24
181.4.0.0/14 maxlen: 24
181.8.0.0/13 maxlen: 24
181.28.0.0/14 maxlen: 24
181.80.0.0/14 maxlen: 24
181.86.0.0/15 maxlen: 24
181.88.0.0/15 maxlen: 24
181.92.0.0/15 maxlen: 24
181.94.4.0/23 maxlen: 24
181.94.100.0/24 maxlen: 24
181.96.0.0/14 maxlen: 24
181.100.0.0/15 maxlen: 24
181.102.0.0/16 maxlen: 24
181.103.16.0/20 maxlen: 24
181.103.32.0/19 maxlen: 24
181.103.96.0/19 maxlen: 24
181.103.128.0/17 maxlen: 24
181.104.0.0/13 maxlen: 24
181.164.0.0/14 maxlen: 24
181.168.0.0/14 maxlen: 24
181.228.0.0/14 maxlen: 24
186.108.0.0/14 maxlen: 24
186.124.0.0/14 maxlen: 24
186.136.0.0/14 maxlen: 24
186.152.0.0/15 maxlen: 24
190.16.0.0/14 maxlen: 24
190.30.0.0/15 maxlen: 24
190.136.0.0/14 maxlen: 24
190.139.109.97/32 maxlen: 32
190.139.109.105/32 maxlen: 32
190.188.0.0/14 maxlen: 24
190.192.0.0/14 maxlen: 24
190.224.0.0/13 maxlen: 24
190.244.0.0/14 maxlen: 24
191.97.128.0/17 maxlen: 24
196.32.64.0/19 maxlen: 24
200.3.32.0/19 maxlen: 24
200.3.64.0/19 maxlen: 24
200.32.0.0/19 maxlen: 24
200.42.0.0/17 maxlen: 24
200.42.128.0/19 maxlen: 24
200.43.0.0/16 maxlen: 24
200.45.0.0/16 maxlen: 24
200.49.96.0/20 maxlen: 24
200.49.128.0/19 maxlen: 24
200.55.64.0/18 maxlen: 24
200.61.192.0/19 maxlen: 24
200.63.0.0/19 maxlen: 24
200.71.224.0/20 maxlen: 24
200.73.128.0/18 maxlen: 24
200.80.64.0/20 maxlen: 24
200.82.0.0/17 maxlen: 24
200.89.128.0/18 maxlen: 24
200.105.0.0/18 maxlen: 24
200.105.64.0/19 maxlen: 24
200.110.224.0/21 maxlen: 24
200.114.128.0/17 maxlen: 24
200.117.0.0/16 maxlen: 24
200.122.0.0/17 maxlen: 24
200.126.128.0/17 maxlen: 24
200.127.0.0/16 maxlen: 24
201.212.0.0/15 maxlen: 24
201.231.0.0/16 maxlen: 24
201.235.0.0/16 maxlen: 24
201.252.0.0/15 maxlen: 24
2001:13d0::/29 maxlen: 48
2800:2000::/20 maxlen: 48
2800:b000::/32 maxlen: 48
2803:da80::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 05:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:4d:e0:be:e2:53:ab:ff:f6:39:ef:47:98:01:e0:3a:37:de:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Validity
Not Before: Jun 25 18:44:47 2026 GMT
Not After : Jun 24 18:49:47 2027 GMT
Subject: CN=DCFBC76637B100B61523567BF06C07EFFF4907E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:60:02:07:de:a8:0c:00:e4:33:6e:92:ae:
29:f5:94:13:00:42:76:b1:23:5f:64:1d:91:95:09:
be:bd:bd:99:10:f2:d1:d9:c6:87:78:5a:a5:8c:4e:
a8:97:c9:52:77:7d:92:23:47:f9:7d:f6:53:de:33:
8b:a6:d8:de:49:a1:11:74:b8:32:54:45:99:0c:ea:
1e:71:9b:54:28:b9:08:3c:7b:56:45:4d:05:50:fe:
e6:95:d0:64:b2:89:9a:a1:75:eb:74:ec:ee:3b:ff:
97:4a:38:da:ef:30:7b:61:67:ac:9e:ef:47:e6:27:
c3:0a:90:b4:1e:d3:73:22:6b:cb:30:93:13:11:7e:
8b:60:67:12:c3:57:97:3f:6c:b0:87:26:9f:69:7e:
59:91:2b:90:a3:7c:eb:83:15:25:3a:11:82:4c:49:
a2:5c:1b:db:4e:1a:0b:89:5f:e8:1b:5d:aa:e5:25:
26:4d:b5:a3:0a:c7:bc:bc:a5:25:47:01:c7:f0:ba:
89:70:44:b8:3b:38:25:7a:a4:61:7d:bd:31:de:d7:
76:97:32:10:61:ec:c6:8b:7a:0b:84:22:3d:fd:a3:
5d:78:3d:60:5e:2e:6c:69:d2:13:e6:8c:77:3d:48:
c8:eb:eb:be:fd:f0:e9:51:fd:02:25:b9:4b:af:45:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:C7:66:37:B1:00:B6:15:23:56:7B:F0:6C:07:EF:FF:49:07:E6
X509v3 Authority Key Identifier:
keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS7303.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.232.0.0/16
66.60.0.0/18
152.168.0.0/14
170.150.196.0/22
170.231.136.0/22
181.0.0.0-181.1.151.255
181.1.156.0-181.15.255.255
181.28.0.0/14
181.80.0.0/14
181.86.0.0-181.89.255.255
181.92.0.0/15
181.94.4.0/23
181.94.100.0/24
181.96.0.0-181.102.255.255
181.103.16.0-181.103.63.255
181.103.96.0-181.111.255.255
181.164.0.0-181.171.255.255
181.228.0.0/14
186.108.0.0/14
186.124.0.0/14
186.136.0.0/14
186.152.0.0/15
190.16.0.0/14
190.30.0.0/15
190.136.0.0/14
190.188.0.0-190.195.255.255
190.224.0.0/13
190.244.0.0/14
191.97.128.0/17
196.32.64.0/19
200.3.32.0-200.3.95.255
200.32.0.0/19
200.42.0.0-200.42.159.255
200.43.0.0/16
200.45.0.0/16
200.49.96.0/20
200.49.128.0/19
200.55.64.0/18
200.61.192.0/19
200.63.0.0/19
200.71.224.0/20
200.73.128.0/18
200.80.64.0/20
200.82.0.0/17
200.89.128.0/18
200.105.0.0-200.105.95.255
200.110.224.0/21
200.114.128.0/17
200.117.0.0/16
200.122.0.0/17
200.126.128.0-200.127.255.255
201.212.0.0/15
201.231.0.0/16
201.235.0.0/16
201.252.0.0/15
IPv6:
2001:13d0::/29
2800:2000::/20
2800:b000::/32
2803:da80::/32
Signature Algorithm: sha256WithRSAEncryption
33:c2:c4:51:24:3c:73:28:91:fc:60:43:a2:29:07:a5:e1:05:
39:01:3c:76:a1:ea:bb:83:31:ed:69:2f:cb:20:b6:6d:93:a6:
5b:d8:0f:82:0d:13:c5:db:e9:8b:81:8b:f1:9e:30:6e:0b:50:
03:4b:2d:43:3b:50:be:2b:28:f0:3f:14:e8:0f:c5:f0:78:6f:
39:e8:a1:af:c7:6d:6d:cd:d4:4c:d0:5c:9d:5a:72:e0:d5:4f:
2a:37:67:45:cf:a1:b9:02:a4:3c:0c:db:cb:e3:65:dd:a0:81:
c6:9c:dc:cc:b6:dc:6c:22:d6:f2:8d:54:d4:06:8d:67:ef:6f:
58:88:2c:79:b4:b3:c1:2a:23:38:a5:25:42:9e:1f:f9:c0:f2:
c0:23:c0:7c:82:9f:59:70:a7:29:c0:ce:d6:8a:15:5d:28:8f:
3f:a6:e6:56:50:ff:75:af:c8:d9:bf:3e:60:90:51:72:fb:20:
90:ef:29:8f:06:6c:c3:b4:ad:88:f7:a3:ed:a9:95:52:f6:7c:
f1:5d:37:18:1a:f1:ba:ed:a8:2f:c5:67:a6:44:34:50:20:9d:
82:84:e2:e8:66:9e:a2:58:1f:9a:4d:61:fc:0a:0d:72:76:7d:
cc:f1:5c:ab:ce:ca:b2:37:ab:ff:ef:17:aa:21:51:5c:72:2b:
f0:c9:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:22 2026 by rpki-client