Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17995.roa
File: AS17995.roa (raw, json)
Hash identifier: nGKdlkPlJ9ojHNlLjXMUnoGQ27qxDvkhwuuYKmFYWz8=
Subject key identifier: 69:A0:4C:BE:85:4B:C4:9D:2B:67:59:11:B4:2C:14:36:46:8E:E2:7E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 77FE7F50AE7C1E4949E93FD32E63FF0074770EAD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17995.roa
Signing time: Sun 20 Apr 2025 03:00:00 +0000
ROA not before: Sun 20 Apr 2025 02:55:00 +0000
ROA not after: Sun 19 Apr 2026 03:00:00 +0000
asID: 17995
IP address blocks: 103.6.200.0/22 maxlen: 24
103.16.188.0/22 maxlen: 24
103.16.232.0/22 maxlen: 24
103.105.64.0/22 maxlen: 24
103.105.68.0/22 maxlen: 24
103.124.188.0/22 maxlen: 23
103.124.220.0/22 maxlen: 23
103.124.228.0/22 maxlen: 23
103.125.4.0/22 maxlen: 23
103.125.8.0/22 maxlen: 23
103.125.212.0/22 maxlen: 24
103.127.8.0/22 maxlen: 23
103.127.12.0/22 maxlen: 23
103.127.52.0/22 maxlen: 23
103.150.108.0/23 maxlen: 24
103.150.110.0/23 maxlen: 24
103.150.112.0/23 maxlen: 24
103.150.114.0/23 maxlen: 24
103.157.114.0/23 maxlen: 24
103.157.190.0/24 maxlen: 24
103.157.191.0/24 maxlen: 24
103.158.66.0/23 maxlen: 24
103.158.68.0/23 maxlen: 24
103.161.188.0/23 maxlen: 24
103.163.10.0/23 maxlen: 24
103.163.128.0/23 maxlen: 24
103.164.16.0/23 maxlen: 24
103.164.98.0/23 maxlen: 24
103.164.100.0/23 maxlen: 24
103.164.102.0/23 maxlen: 24
103.164.104.0/23 maxlen: 24
103.164.106.0/23 maxlen: 24
103.164.108.0/23 maxlen: 24
103.164.110.0/23 maxlen: 24
103.164.112.0/23 maxlen: 24
103.164.114.0/23 maxlen: 24
103.164.116.0/23 maxlen: 24
103.164.118.0/23 maxlen: 24
103.164.120.0/23 maxlen: 24
103.164.122.0/23 maxlen: 24
103.164.124.0/23 maxlen: 24
103.164.136.0/23 maxlen: 24
103.164.190.0/23 maxlen: 24
103.164.194.0/23 maxlen: 24
103.164.212.0/23 maxlen: 24
103.164.214.0/23 maxlen: 24
103.164.216.0/23 maxlen: 24
103.164.218.0/23 maxlen: 24
103.164.220.0/23 maxlen: 24
103.164.222.0/23 maxlen: 24
103.165.32.0/23 maxlen: 24
103.165.34.0/23 maxlen: 24
103.165.36.0/23 maxlen: 24
103.165.38.0/23 maxlen: 24
103.165.40.0/23 maxlen: 24
103.165.42.0/23 maxlen: 24
103.165.58.0/23 maxlen: 24
103.165.60.0/23 maxlen: 24
103.165.122.0/23 maxlen: 24
103.165.124.0/23 maxlen: 24
103.165.126.0/23 maxlen: 24
103.165.128.0/23 maxlen: 24
103.165.130.0/23 maxlen: 24
103.165.132.0/23 maxlen: 24
103.165.134.0/23 maxlen: 24
103.165.136.0/23 maxlen: 24
103.165.138.0/23 maxlen: 24
103.165.140.0/23 maxlen: 24
103.165.194.0/23 maxlen: 24
103.165.196.0/23 maxlen: 24
103.165.198.0/23 maxlen: 24
103.165.200.0/23 maxlen: 24
103.165.202.0/23 maxlen: 24
103.165.204.0/23 maxlen: 24
103.165.206.0/23 maxlen: 24
103.165.208.0/23 maxlen: 24
103.165.210.0/23 maxlen: 24
103.165.212.0/23 maxlen: 24
103.165.214.0/23 maxlen: 24
103.165.216.0/23 maxlen: 24
103.165.218.0/23 maxlen: 24
103.165.220.0/23 maxlen: 24
103.165.222.0/23 maxlen: 24
103.165.224.0/23 maxlen: 24
103.165.226.0/23 maxlen: 24
103.165.228.0/23 maxlen: 24
103.165.230.0/23 maxlen: 24
103.165.232.0/23 maxlen: 24
103.165.234.0/23 maxlen: 24
103.165.236.0/23 maxlen: 24
103.165.238.0/23 maxlen: 24
103.165.240.0/23 maxlen: 24
103.166.104.0/23 maxlen: 24
103.167.218.0/23 maxlen: 24
103.182.180.0/23 maxlen: 24
103.182.182.0/23 maxlen: 24
103.182.184.0/23 maxlen: 24
103.182.186.0/23 maxlen: 24
103.182.188.0/23 maxlen: 24
103.182.190.0/23 maxlen: 24
103.182.192.0/23 maxlen: 24
103.182.194.0/23 maxlen: 24
103.182.200.0/23 maxlen: 24
103.182.202.0/23 maxlen: 24
103.182.204.0/23 maxlen: 24
103.182.206.0/23 maxlen: 24
103.182.208.0/23 maxlen: 24
103.182.222.0/23 maxlen: 24
103.182.224.0/23 maxlen: 24
103.182.228.0/23 maxlen: 24
103.182.230.0/23 maxlen: 24
103.182.232.0/23 maxlen: 24
103.182.234.0/23 maxlen: 24
103.182.236.0/23 maxlen: 24
103.182.238.0/23 maxlen: 24
103.182.240.0/23 maxlen: 24
103.182.242.0/23 maxlen: 24
103.182.244.0/23 maxlen: 24
103.182.252.0/23 maxlen: 24
103.182.254.0/23 maxlen: 24
103.183.0.0/23 maxlen: 24
103.183.12.0/23 maxlen: 24
103.183.14.0/23 maxlen: 24
103.183.18.0/23 maxlen: 24
103.183.20.0/23 maxlen: 24
103.183.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 20:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:fe:7f:50:ae:7c:1e:49:49:e9:3f:d3:2e:63:ff:00:74:77:0e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 20 02:55:00 2025 GMT
Not After : Apr 19 03:00:00 2026 GMT
Subject: CN=69A04CBE854BC49D2B675911B42C1436468EE27E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:13:83:6e:92:68:91:3d:b8:b9:57:3c:80:
af:0f:4e:d7:6c:06:89:13:0d:4f:81:53:6e:3c:37:
af:d2:63:83:16:db:c4:b4:0a:02:89:a9:7d:f1:62:
5f:32:d1:ed:be:cc:c1:f9:38:98:aa:27:fe:07:af:
f1:19:39:34:e4:b7:bc:38:63:02:b2:10:9f:41:ad:
8a:a5:9a:f4:6d:e9:aa:7f:ff:21:13:f4:8e:b3:e7:
91:c0:c8:a5:3b:df:c6:40:c6:c6:ae:73:d5:04:5e:
36:54:7a:31:5d:58:29:49:e2:2f:cb:47:90:1d:f5:
12:2c:b1:fb:b1:72:4f:eb:a5:d1:6e:26:ea:cb:48:
bf:30:10:8d:ef:f0:a2:18:e0:72:13:d9:5f:32:fd:
da:e8:a6:62:86:51:9f:c3:c5:58:7f:07:30:22:1b:
10:6a:a4:6e:35:1c:2b:3e:c5:53:36:00:6e:88:c9:
fc:22:45:ff:2b:7a:38:e4:46:d5:b6:75:e1:2f:23:
3c:75:a6:1c:0e:65:67:6a:f3:d3:d3:fb:5c:b4:4e:
48:90:d8:d0:51:43:fa:59:41:df:d4:f6:c0:28:97:
40:0b:ba:87:2b:ba:00:19:d6:e9:db:cf:aa:18:32:
4e:02:33:91:a2:b2:e7:2a:93:3d:e1:89:e8:1a:30:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:4C:BE:85:4B:C4:9D:2B:67:59:11:B4:2C:14:36:46:8E:E2:7E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.6.200.0/22
103.16.188.0/22
103.16.232.0/22
103.105.64.0/21
103.124.188.0/22
103.124.220.0/22
103.124.228.0/22
103.125.4.0-103.125.11.255
103.125.212.0/22
103.127.8.0/21
103.127.52.0/22
103.150.108.0-103.150.115.255
103.157.114.0/23
103.157.190.0/23
103.158.66.0-103.158.69.255
103.161.188.0/23
103.163.10.0/23
103.163.128.0/23
103.164.16.0/23
103.164.98.0-103.164.125.255
103.164.136.0/23
103.164.190.0/23
103.164.194.0/23
103.164.212.0-103.164.223.255
103.165.32.0-103.165.43.255
103.165.58.0-103.165.61.255
103.165.122.0-103.165.141.255
103.165.194.0-103.165.241.255
103.166.104.0/23
103.167.218.0/23
103.182.180.0-103.182.195.255
103.182.200.0-103.182.209.255
103.182.222.0-103.182.225.255
103.182.228.0-103.182.245.255
103.182.252.0-103.183.1.255
103.183.12.0/22
103.183.18.0-103.183.23.255
Signature Algorithm: sha256WithRSAEncryption
88:fd:60:f8:42:6c:21:ed:f9:33:2c:f6:92:dd:0b:bf:b2:e2:
d9:d6:52:ba:69:ce:ce:0e:34:4d:4e:67:aa:dd:a3:db:4b:7d:
fc:83:79:db:d6:75:c2:27:dd:ea:fc:6f:6f:69:7b:af:bc:4f:
c9:08:96:96:fe:69:f9:53:e3:8a:23:da:f9:29:eb:02:2e:05:
46:ba:80:d1:d1:78:8c:cf:ef:e8:ce:ce:19:77:d7:4f:66:54:
81:53:b8:5c:42:4e:74:45:cf:9e:48:55:70:fa:75:bd:8e:87:
6a:3c:25:06:11:39:d4:cf:d3:6b:43:ef:cb:c7:bd:cc:15:35:
c9:63:ae:1a:af:b5:e2:c3:1b:88:fe:f2:e4:5c:ac:fb:9a:42:
1a:b7:2d:2e:e0:c1:7a:48:0e:23:16:ad:aa:88:5b:3b:62:78:
b4:39:f1:eb:d0:d3:04:25:2c:62:b4:8e:4a:fb:2f:20:b1:95:
59:37:49:a8:41:cf:d2:90:58:c8:99:77:a9:69:ae:71:f7:08:
86:78:3e:d5:4a:15:9e:bf:b0:06:50:39:0a:73:1f:7d:a0:d2:
15:9d:93:91:7b:3b:43:79:4a:6c:ac:6d:22:f4:03:df:15:cd:
8b:ec:db:83:9e:ee:6f:17:8f:21:d0:09:2f:63:77:20:72:07:
2f:f7:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net