Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
File: AS24203.roa (raw, json)
Hash identifier: OLYjEEtx1NC6XM9orIyDiYg9hjWtlADVWaIGv/W5pOo=
Subject key identifier: 01:61:7C:85:48:61:82:02:16:D8:5F:AB:B4:A9:0F:24:4D:86:A6:29
Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071
Certificate serial: 4FF817DC314FFFADE1557CA368FFE036CF118F61
Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
Signing time: Thu 05 Nov 2026 10:09:13 +0000
ROA not before: Thu 05 Nov 2026 10:04:13 +0000
ROA not after: Thu 04 Nov 2027 10:09:13 +0000
asID: 24203
IP address blocks: 140.213.0.0/16 maxlen: 16
140.213.0.0/24 maxlen: 24
140.213.2.0/24 maxlen: 24
140.213.4.0/24 maxlen: 24
140.213.5.0/24 maxlen: 24
140.213.6.0/24 maxlen: 24
140.213.7.0/24 maxlen: 24
140.213.9.0/24 maxlen: 24
140.213.11.0/24 maxlen: 24
140.213.13.0/24 maxlen: 24
140.213.14.0/24 maxlen: 24
140.213.15.0/24 maxlen: 24
140.213.16.0/24 maxlen: 24
140.213.17.0/24 maxlen: 24
140.213.18.0/24 maxlen: 24
140.213.19.0/24 maxlen: 24
140.213.20.0/24 maxlen: 24
140.213.21.0/24 maxlen: 24
140.213.22.0/24 maxlen: 24
140.213.23.0/24 maxlen: 24
140.213.24.0/24 maxlen: 24
140.213.25.0/24 maxlen: 24
140.213.26.0/24 maxlen: 24
140.213.27.0/24 maxlen: 24
140.213.28.0/24 maxlen: 24
140.213.29.0/24 maxlen: 24
140.213.30.0/24 maxlen: 24
140.213.31.0/24 maxlen: 24
140.213.32.0/24 maxlen: 24
140.213.33.0/24 maxlen: 24
140.213.34.0/24 maxlen: 24
140.213.35.0/24 maxlen: 24
140.213.36.0/24 maxlen: 24
140.213.37.0/24 maxlen: 24
140.213.38.0/24 maxlen: 24
140.213.39.0/24 maxlen: 24
140.213.40.0/24 maxlen: 24
140.213.41.0/24 maxlen: 24
140.213.42.0/24 maxlen: 24
140.213.43.0/24 maxlen: 24
140.213.44.0/24 maxlen: 24
140.213.45.0/24 maxlen: 24
140.213.46.0/24 maxlen: 24
140.213.48.0/24 maxlen: 24
140.213.49.0/24 maxlen: 24
140.213.51.0/24 maxlen: 24
140.213.52.0/24 maxlen: 24
140.213.53.0/24 maxlen: 24
140.213.55.0/24 maxlen: 24
140.213.56.0/24 maxlen: 24
140.213.57.0/24 maxlen: 24
140.213.58.0/24 maxlen: 24
140.213.59.0/24 maxlen: 24
140.213.60.0/24 maxlen: 24
140.213.61.0/24 maxlen: 24
140.213.62.0/24 maxlen: 24
140.213.63.0/24 maxlen: 24
140.213.64.0/24 maxlen: 24
140.213.65.0/24 maxlen: 24
140.213.66.0/24 maxlen: 24
140.213.67.0/24 maxlen: 24
140.213.68.0/24 maxlen: 24
140.213.69.0/24 maxlen: 24
140.213.70.0/24 maxlen: 24
140.213.71.0/24 maxlen: 24
140.213.72.0/24 maxlen: 24
140.213.73.0/24 maxlen: 24
140.213.74.0/24 maxlen: 24
140.213.75.0/24 maxlen: 24
140.213.76.0/24 maxlen: 24
140.213.78.0/24 maxlen: 24
140.213.79.0/24 maxlen: 24
140.213.80.0/24 maxlen: 24
140.213.81.0/24 maxlen: 24
140.213.82.0/24 maxlen: 24
140.213.86.0/24 maxlen: 24
140.213.87.0/24 maxlen: 24
140.213.98.0/24 maxlen: 24
140.213.99.0/24 maxlen: 24
140.213.100.0/24 maxlen: 24
140.213.101.0/24 maxlen: 24
140.213.102.0/24 maxlen: 24
140.213.103.0/24 maxlen: 24
140.213.104.0/24 maxlen: 24
140.213.105.0/24 maxlen: 24
140.213.106.0/24 maxlen: 24
140.213.107.0/24 maxlen: 24
140.213.108.0/24 maxlen: 24
140.213.109.0/24 maxlen: 24
140.213.110.0/24 maxlen: 24
140.213.111.0/24 maxlen: 24
140.213.112.0/24 maxlen: 24
140.213.113.0/24 maxlen: 24
140.213.114.0/24 maxlen: 24
140.213.115.0/24 maxlen: 24
140.213.116.0/24 maxlen: 24
140.213.117.0/24 maxlen: 24
140.213.120.0/24 maxlen: 24
140.213.121.0/24 maxlen: 24
140.213.122.0/24 maxlen: 24
140.213.123.0/24 maxlen: 24
140.213.124.0/24 maxlen: 24
140.213.125.0/24 maxlen: 24
140.213.126.0/24 maxlen: 24
140.213.127.0/24 maxlen: 24
140.213.128.0/24 maxlen: 24
140.213.129.0/24 maxlen: 24
140.213.130.0/24 maxlen: 24
140.213.131.0/24 maxlen: 24
140.213.132.0/24 maxlen: 24
140.213.133.0/24 maxlen: 24
140.213.134.0/24 maxlen: 24
140.213.135.0/24 maxlen: 24
140.213.136.0/24 maxlen: 24
140.213.137.0/24 maxlen: 24
140.213.139.0/24 maxlen: 24
140.213.140.0/24 maxlen: 24
140.213.141.0/24 maxlen: 24
140.213.142.0/24 maxlen: 24
140.213.143.0/24 maxlen: 24
140.213.144.0/24 maxlen: 24
140.213.145.0/24 maxlen: 24
140.213.146.0/24 maxlen: 24
140.213.147.0/24 maxlen: 24
140.213.148.0/24 maxlen: 24
140.213.149.0/24 maxlen: 24
140.213.150.0/24 maxlen: 24
140.213.151.0/24 maxlen: 24
140.213.153.0/24 maxlen: 24
140.213.154.0/24 maxlen: 24
140.213.155.0/24 maxlen: 24
140.213.156.0/24 maxlen: 24
140.213.157.0/24 maxlen: 24
140.213.158.0/24 maxlen: 24
140.213.159.0/24 maxlen: 24
140.213.160.0/24 maxlen: 24
140.213.161.0/24 maxlen: 24
140.213.162.0/24 maxlen: 24
140.213.163.0/24 maxlen: 24
140.213.164.0/24 maxlen: 24
140.213.165.0/24 maxlen: 24
140.213.166.0/24 maxlen: 24
140.213.167.0/24 maxlen: 24
140.213.168.0/24 maxlen: 24
140.213.169.0/24 maxlen: 24
140.213.170.0/24 maxlen: 24
140.213.171.0/24 maxlen: 24
140.213.172.0/24 maxlen: 24
140.213.173.0/24 maxlen: 24
140.213.174.0/24 maxlen: 24
140.213.175.0/24 maxlen: 24
140.213.176.0/24 maxlen: 24
140.213.177.0/24 maxlen: 24
140.213.178.0/24 maxlen: 24
140.213.179.0/24 maxlen: 24
140.213.180.0/24 maxlen: 24
140.213.181.0/24 maxlen: 24
140.213.182.0/24 maxlen: 24
140.213.183.0/24 maxlen: 24
140.213.184.0/24 maxlen: 24
140.213.185.0/24 maxlen: 24
140.213.191.0/24 maxlen: 24
140.213.192.0/24 maxlen: 24
140.213.193.0/24 maxlen: 24
140.213.194.0/24 maxlen: 24
140.213.195.0/24 maxlen: 24
140.213.196.0/24 maxlen: 24
140.213.197.0/24 maxlen: 24
140.213.198.0/24 maxlen: 24
140.213.199.0/24 maxlen: 24
140.213.204.0/24 maxlen: 24
140.213.206.0/24 maxlen: 24
140.213.207.0/24 maxlen: 24
140.213.208.0/24 maxlen: 24
140.213.209.0/24 maxlen: 24
140.213.211.0/24 maxlen: 24
140.213.212.0/24 maxlen: 24
140.213.213.0/24 maxlen: 24
140.213.214.0/24 maxlen: 24
140.213.215.0/24 maxlen: 24
140.213.218.0/24 maxlen: 24
140.213.219.0/24 maxlen: 24
140.213.220.0/24 maxlen: 24
140.213.221.0/24 maxlen: 24
140.213.222.0/24 maxlen: 24
140.213.224.0/24 maxlen: 24
140.213.226.0/24 maxlen: 24
140.213.227.0/24 maxlen: 24
140.213.228.0/24 maxlen: 24
140.213.229.0/24 maxlen: 24
140.213.230.0/24 maxlen: 24
140.213.231.0/24 maxlen: 24
140.213.232.0/24 maxlen: 24
140.213.233.0/24 maxlen: 24
140.213.237.0/24 maxlen: 24
140.213.238.0/24 maxlen: 24
140.213.239.0/24 maxlen: 24
140.213.240.0/24 maxlen: 24
140.213.241.0/24 maxlen: 24
140.213.242.0/24 maxlen: 24
140.213.243.0/24 maxlen: 24
140.213.244.0/24 maxlen: 24
140.213.245.0/24 maxlen: 24
140.213.246.0/24 maxlen: 24
140.213.247.0/24 maxlen: 24
140.213.250.0/24 maxlen: 24
140.213.251.0/24 maxlen: 24
140.213.252.0/24 maxlen: 24
140.213.253.0/24 maxlen: 24
140.213.254.0/24 maxlen: 24
140.213.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl
rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f8:17:dc:31:4f:ff:ad:e1:55:7c:a3:68:ff:e0:36:cf:11:8f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071
Validity
Not Before: Nov 5 10:04:13 2026 GMT
Not After : Nov 4 10:09:13 2027 GMT
Subject: CN=01617C854861820216D85FABB4A90F244D86A629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:85:22:ad:df:62:aa:d5:69:3a:3a:c2:aa:
51:1a:89:34:ff:65:59:58:cf:e3:b0:0e:2a:33:c9:
95:c8:a2:dc:43:7a:73:25:ac:4f:d1:e6:0c:cd:ca:
e1:96:14:65:4d:11:fd:2c:2b:d0:de:df:d1:44:b9:
2b:02:13:98:aa:cc:5e:6b:f2:52:fc:96:b9:ac:01:
4d:13:ea:74:43:c3:9d:3f:72:3d:ef:a5:e8:95:9f:
6b:51:3f:c5:90:e9:f6:87:3f:6b:d1:df:02:26:b6:
3c:af:e6:fd:10:84:ad:ba:f7:f8:e0:99:04:9b:d9:
f1:c8:a5:cf:ad:d6:a4:a4:da:25:a6:42:ec:ff:d1:
56:79:0b:79:16:95:b7:bb:a8:c9:3d:46:1a:69:e3:
86:47:1a:66:a3:87:15:b3:41:29:b3:a5:b9:57:7f:
09:4e:67:16:d9:b6:7d:8a:3d:2f:34:15:02:7b:da:
9c:98:04:83:82:cc:0d:70:83:0f:9f:31:e9:1f:4e:
75:c2:74:23:bf:95:8d:5a:68:4e:b8:f0:dc:2b:87:
7e:f4:f6:c7:4a:51:e9:d1:12:26:f1:ad:8a:f6:82:
ee:6c:93:07:8c:9f:80:79:a7:a7:59:65:69:4b:ba:
84:b0:7c:36:d8:40:c4:99:b8:54:ab:18:25:ea:d1:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:7C:85:48:61:82:02:16:D8:5F:AB:B4:A9:0F:24:4D:86:A6:29
X509v3 Authority Key Identifier:
keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS24203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:91:98:09:3d:0f:e5:48:7c:5e:1e:e3:c5:88:95:39:48:ba:
fc:8a:8d:f8:70:77:e6:77:9c:e1:2d:cf:df:4b:2e:1c:0f:be:
1c:f8:f4:14:62:15:c7:38:44:0d:ed:65:2b:74:57:57:d2:53:
6b:52:c7:4e:35:06:eb:ac:59:56:07:4e:73:c4:d8:5c:2b:8b:
00:d9:dd:ac:b5:f2:ed:b9:42:0a:b9:fc:1f:9c:f3:ec:37:74:
9c:2a:9d:b6:80:76:4c:0c:d8:e3:f4:7f:43:3e:1e:05:e5:d5:
a6:60:61:9b:22:ca:2b:b8:6a:d2:b8:d6:71:dc:27:e9:3e:86:
e0:7c:c8:fd:ea:8b:2a:d3:a5:64:4e:6c:4b:13:7a:fc:b7:cb:
84:b0:23:b4:0a:68:e1:0e:9b:5c:80:e6:d6:5f:f6:e3:82:6e:
25:45:38:f2:83:be:d5:ef:2c:93:51:c4:6e:35:6a:5c:fd:2b:
87:a5:a1:ac:cd:0d:d8:a9:7a:b7:37:30:88:eb:27:c6:34:8f:
fa:79:d5:42:91:20:3c:f3:b2:c7:54:46:16:81:d3:5a:de:ad:
67:a5:a7:c4:29:0f:75:de:70:61:38:ee:a8:45:49:a1:bf:99:
c4:09:71:2d:fe:a7:bf:37:7a:4e:5e:28:45:1d:54:ea:33:0d:
18:df:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 17:08:57 2026 by rpki-client