Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS17995.roa
File: AS17995.roa (raw, json)
Hash identifier: aIErcuw3oMrDYHZDF8jdR+701v9RVF9eskdmEKm7r18=
Subject key identifier: 02:6C:F6:04:D3:B4:B5:FB:44:02:BA:5A:5E:16:97:50:23:E2:BC:DE
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3C72D867ACAF3538AEBA0BAE379890BED78F23C7
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17995.roa
Signing time: Sat 02 May 2026 21:14:38 +0000
ROA not before: Sat 02 May 2026 21:09:38 +0000
ROA not after: Sat 01 May 2027 21:14:38 +0000
asID: 17995
IP address blocks: 103.6.200.0/22 maxlen: 24
103.16.232.0/22 maxlen: 24
103.85.148.0/22 maxlen: 24
103.105.64.0/22 maxlen: 24
103.105.68.0/22 maxlen: 24
103.124.188.0/22 maxlen: 23
103.124.220.0/22 maxlen: 23
103.124.228.0/22 maxlen: 23
103.125.4.0/22 maxlen: 23
103.125.8.0/22 maxlen: 23
103.125.212.0/22 maxlen: 24
103.127.8.0/22 maxlen: 23
103.127.12.0/22 maxlen: 23
103.127.52.0/22 maxlen: 23
103.139.46.0/23 maxlen: 24
103.150.108.0/23 maxlen: 24
103.150.110.0/23 maxlen: 24
103.150.112.0/23 maxlen: 24
103.150.114.0/23 maxlen: 24
103.157.114.0/23 maxlen: 24
103.157.190.0/24 maxlen: 24
103.157.191.0/24 maxlen: 24
103.158.66.0/23 maxlen: 24
103.158.68.0/23 maxlen: 24
103.161.188.0/23 maxlen: 24
103.163.10.0/23 maxlen: 24
103.163.128.0/23 maxlen: 24
103.164.16.0/23 maxlen: 24
103.164.98.0/23 maxlen: 24
103.164.100.0/23 maxlen: 24
103.164.102.0/23 maxlen: 24
103.164.104.0/23 maxlen: 24
103.164.106.0/23 maxlen: 24
103.164.108.0/23 maxlen: 24
103.164.110.0/23 maxlen: 24
103.164.112.0/23 maxlen: 24
103.164.114.0/23 maxlen: 24
103.164.116.0/23 maxlen: 24
103.164.118.0/23 maxlen: 24
103.164.120.0/23 maxlen: 24
103.164.122.0/23 maxlen: 24
103.164.124.0/23 maxlen: 24
103.164.136.0/23 maxlen: 24
103.164.190.0/23 maxlen: 24
103.164.194.0/23 maxlen: 24
103.164.212.0/23 maxlen: 24
103.164.214.0/23 maxlen: 24
103.164.216.0/23 maxlen: 24
103.164.218.0/23 maxlen: 24
103.164.220.0/23 maxlen: 24
103.164.222.0/23 maxlen: 24
103.165.32.0/23 maxlen: 24
103.165.34.0/23 maxlen: 24
103.165.36.0/23 maxlen: 24
103.165.38.0/23 maxlen: 24
103.165.40.0/23 maxlen: 24
103.165.42.0/23 maxlen: 24
103.165.58.0/23 maxlen: 24
103.165.60.0/23 maxlen: 24
103.165.122.0/23 maxlen: 24
103.165.124.0/23 maxlen: 24
103.165.126.0/23 maxlen: 24
103.165.128.0/23 maxlen: 24
103.165.130.0/23 maxlen: 24
103.165.132.0/23 maxlen: 24
103.165.134.0/23 maxlen: 24
103.165.136.0/23 maxlen: 24
103.165.138.0/23 maxlen: 24
103.165.140.0/23 maxlen: 24
103.165.194.0/23 maxlen: 24
103.165.196.0/23 maxlen: 24
103.165.198.0/23 maxlen: 24
103.165.200.0/23 maxlen: 24
103.165.202.0/23 maxlen: 24
103.165.204.0/23 maxlen: 24
103.165.206.0/23 maxlen: 24
103.165.208.0/23 maxlen: 24
103.165.210.0/23 maxlen: 24
103.165.212.0/23 maxlen: 24
103.165.214.0/23 maxlen: 24
103.165.216.0/23 maxlen: 24
103.165.218.0/23 maxlen: 24
103.165.220.0/23 maxlen: 24
103.165.222.0/23 maxlen: 24
103.165.224.0/23 maxlen: 24
103.165.226.0/23 maxlen: 24
103.165.228.0/23 maxlen: 24
103.165.230.0/23 maxlen: 24
103.165.232.0/23 maxlen: 24
103.165.234.0/23 maxlen: 24
103.165.236.0/23 maxlen: 24
103.165.238.0/23 maxlen: 24
103.165.240.0/23 maxlen: 24
103.166.104.0/23 maxlen: 24
103.167.218.0/23 maxlen: 24
103.182.180.0/23 maxlen: 24
103.182.182.0/23 maxlen: 24
103.182.184.0/23 maxlen: 24
103.182.186.0/23 maxlen: 24
103.182.188.0/23 maxlen: 24
103.182.190.0/23 maxlen: 24
103.182.192.0/23 maxlen: 24
103.182.194.0/23 maxlen: 24
103.182.200.0/23 maxlen: 24
103.182.202.0/23 maxlen: 24
103.182.204.0/23 maxlen: 24
103.182.206.0/23 maxlen: 24
103.182.208.0/23 maxlen: 24
103.182.222.0/23 maxlen: 24
103.182.224.0/23 maxlen: 24
103.182.228.0/23 maxlen: 24
103.182.230.0/23 maxlen: 24
103.182.232.0/23 maxlen: 24
103.182.234.0/23 maxlen: 24
103.182.236.0/23 maxlen: 24
103.182.238.0/23 maxlen: 24
103.182.240.0/23 maxlen: 24
103.182.242.0/23 maxlen: 24
103.182.244.0/23 maxlen: 24
103.182.252.0/23 maxlen: 24
103.182.254.0/23 maxlen: 24
103.183.0.0/23 maxlen: 24
103.183.12.0/23 maxlen: 24
103.183.14.0/23 maxlen: 24
103.183.18.0/23 maxlen: 24
103.183.20.0/23 maxlen: 24
103.183.22.0/23 maxlen: 24
124.158.144.0/20 maxlen: 24
182.16.160.0/19 maxlen: 24
202.51.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:72:d8:67:ac:af:35:38:ae:ba:0b:ae:37:98:90:be:d7:8f:23:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:09:38 2026 GMT
Not After : May 1 21:14:38 2027 GMT
Subject: CN=026CF604D3B4B5FB4402BA5A5E16975023E2BCDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:90:4f:b0:5e:27:62:d1:0b:cd:a9:98:10:
98:eb:39:c5:75:b7:b7:99:1b:a6:09:eb:54:81:cc:
39:90:d4:b1:81:2f:b9:c3:7a:61:e3:88:52:8f:1d:
02:68:1f:b7:68:fc:56:bb:5f:b5:74:ba:c9:83:85:
8d:00:d8:2c:c9:85:76:ef:bf:fb:a5:19:cb:85:73:
ba:ef:d2:cf:21:57:c8:a1:69:fa:9a:c5:e7:26:55:
9f:de:1c:b8:64:7c:00:31:31:52:72:8e:ac:ab:6a:
ba:31:b4:f8:7e:57:b1:9a:5b:f2:7d:7f:2e:55:eb:
06:02:83:b5:02:a8:ee:8b:6b:80:d7:6a:7a:41:75:
56:11:bf:5c:1c:08:95:a9:90:94:41:71:0c:f5:78:
ce:9f:08:3f:41:61:68:6c:cc:cc:49:55:ab:44:01:
72:61:c2:16:fa:ee:98:21:b0:45:a5:e1:b4:d4:02:
3a:da:83:9c:e8:26:e1:c1:d8:47:20:65:56:d8:af:
ab:b3:cc:69:27:3b:bf:0c:4c:0f:74:6a:29:87:93:
a1:51:f3:af:06:3b:a4:91:30:c3:8b:3a:dc:05:1b:
c0:36:6b:64:c8:dd:3e:67:62:7e:f1:e0:b2:c6:26:
1f:56:90:76:90:3b:f4:3d:15:fa:0b:19:90:f8:05:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:F6:04:D3:B4:B5:FB:44:02:BA:5A:5E:16:97:50:23:E2:BC:DE
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.6.200.0/22
103.16.232.0/22
103.85.148.0/22
103.105.64.0/21
103.124.188.0/22
103.124.220.0/22
103.124.228.0/22
103.125.4.0-103.125.11.255
103.125.212.0/22
103.127.8.0/21
103.127.52.0/22
103.139.46.0/23
103.150.108.0-103.150.115.255
103.157.114.0/23
103.157.190.0/23
103.158.66.0-103.158.69.255
103.161.188.0/23
103.163.10.0/23
103.163.128.0/23
103.164.16.0/23
103.164.98.0-103.164.125.255
103.164.136.0/23
103.164.190.0/23
103.164.194.0/23
103.164.212.0-103.164.223.255
103.165.32.0-103.165.43.255
103.165.58.0-103.165.61.255
103.165.122.0-103.165.141.255
103.165.194.0-103.165.241.255
103.166.104.0/23
103.167.218.0/23
103.182.180.0-103.182.195.255
103.182.200.0-103.182.209.255
103.182.222.0-103.182.225.255
103.182.228.0-103.182.245.255
103.182.252.0-103.183.1.255
103.183.12.0/22
103.183.18.0-103.183.23.255
124.158.144.0/20
182.16.160.0/19
202.51.96.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:26:76:11:36:28:20:62:c8:6a:fa:83:dc:44:bf:d0:b6:66:
af:75:53:0f:34:b4:a3:1f:d8:a1:9e:8b:f9:48:1d:19:8f:a1:
93:73:63:c6:de:17:bf:d7:31:e9:fa:ff:c3:6c:b7:6a:82:d7:
ed:09:96:78:6b:97:55:b4:0e:de:8c:e7:c0:ee:74:41:5e:5e:
c9:c3:22:43:8f:71:71:ae:c8:1a:81:b3:90:9a:27:b2:aa:b1:
e9:41:b4:f4:de:47:8f:37:ad:f9:7f:b5:66:2a:25:e7:53:bc:
53:41:56:e3:4c:3f:ad:3d:33:66:7e:22:0c:c7:82:7a:e1:9a:
30:24:f1:3f:42:1f:d8:9d:b6:bc:a7:ba:5f:18:bb:cc:ab:e1:
2e:c6:11:e1:f3:46:46:85:50:f5:71:a7:65:9c:e1:06:94:68:
8a:a3:f2:a0:25:7a:37:28:24:f5:98:a6:4e:10:ad:aa:5d:7a:
1d:77:7a:c8:92:5d:2e:2c:20:e6:ef:8e:ca:a2:5b:fc:09:34:
96:4a:cc:df:37:ec:64:07:7e:3c:72:0a:77:e5:64:81:4b:c2:
8e:35:58:4f:0d:bb:ab:29:fa:16:36:d6:62:71:c3:cb:66:4e:
fa:dd:66:70:6c:b1:9e:5d:92:60:c0:a7:a6:7b:63:5f:1a:01:
11:d2:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:21 2026 by rpki-client