Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33342e302f32342d3234203d3e203339353838.roa
File: 3134372e32382e33342e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier: 1TIHXit7dB198nRk9RpNn8StD22LB9X6XF8zZVqf/G0=
Subject key identifier: 2D:EA:6E:5F:1F:6C:BE:9E:F1:7D:C5:71:C8:FC:E0:1D:53:EF:21:A8
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 498FB6F5A6DB11526F511F0515DA2D5E9D0C61DA
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33342e302f32342d3234203d3e203339353838.roa
Signing time: Fri 05 Jun 2026 12:30:56 +0000
ROA not before: Fri 05 Jun 2026 12:25:56 +0000
ROA not after: Fri 04 Jun 2027 12:30:56 +0000
asID: 39588
IP address blocks: 147.28.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8f:b6:f5:a6:db:11:52:6f:51:1f:05:15:da:2d:5e:9d:0c:61:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 5 12:25:56 2026 GMT
Not After : Jun 4 12:30:56 2027 GMT
Subject: CN=2DEA6E5F1F6CBE9EF17DC571C8FCE01D53EF21A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a2:90:ab:44:8c:6b:de:44:73:1f:77:b7:c5:
25:a7:50:8d:ea:95:5c:9f:52:75:45:3b:2b:1c:04:
db:35:5b:2e:c2:6d:c6:8f:62:9a:d0:ce:69:96:08:
05:af:37:13:46:95:34:68:d3:d0:54:2b:26:0f:48:
c1:bf:d8:e2:fd:7f:19:a1:e7:b4:41:41:af:e1:b2:
e6:71:cd:06:50:23:95:f2:53:c0:31:31:58:e1:d6:
0a:f8:87:e6:3c:d0:6d:67:6f:3f:8e:ef:ea:48:8c:
51:6e:14:4a:dc:19:14:c2:fe:1d:44:2b:b3:6e:38:
22:1b:cf:3f:8c:39:75:dd:e4:a2:56:7a:1d:58:c9:
52:3a:f9:66:c0:d8:a3:2c:17:61:28:ff:56:f3:ba:
ea:98:76:86:01:df:dc:b2:54:36:1b:9a:ab:78:54:
f5:da:19:e9:95:8c:cd:64:a5:d2:cc:bf:c6:fd:58:
c0:0b:0e:fa:4f:96:f7:0c:40:06:00:1d:a8:d0:4b:
1a:df:40:10:b0:6b:75:df:82:7b:0b:8f:29:b4:65:
c9:8a:9c:16:54:85:b3:30:75:54:9c:4b:1f:14:21:
15:7a:23:e3:bc:d9:41:6f:17:81:08:a1:c9:36:66:
62:0d:0b:44:7a:8b:d1:c6:fd:06:2b:4d:64:82:1b:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EA:6E:5F:1F:6C:BE:9E:F1:7D:C5:71:C8:FC:E0:1D:53:EF:21:A8
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33342e302f32342d3234203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.34.0/24
Signature Algorithm: sha256WithRSAEncryption
12:da:5c:36:9e:25:44:0a:d1:75:54:90:e0:56:99:0d:fb:37:
3e:c4:ec:91:0c:bb:5a:29:df:bc:58:b0:9d:f7:39:46:8e:fd:
ba:57:be:25:c1:ee:60:e2:02:a0:70:8c:d5:28:b0:be:de:3b:
df:43:32:15:6e:be:d7:49:af:1b:e4:55:d8:82:03:48:e3:f6:
bf:30:ca:7e:6c:bc:9b:4c:4c:38:31:90:1e:f2:c6:6a:a7:f7:
89:26:4e:e1:98:5c:f8:1b:e2:f0:fc:e6:d5:dc:8a:c5:79:5a:
a5:c8:56:60:f6:f0:82:07:dd:81:b7:4f:f0:53:0f:7a:9c:05:
18:19:71:2b:4a:c9:4f:1e:4a:10:e9:00:a2:e7:1b:5d:72:bc:
2f:cd:62:b1:d9:68:2b:e2:78:4f:46:9a:c7:8f:28:b2:29:f2:
5f:f7:d7:94:49:6e:4c:d6:91:1c:f6:60:6b:df:c8:c7:3e:ac:
10:77:2d:9b:1d:ee:91:f1:bb:4c:a4:d7:65:3b:33:d7:79:19:
62:b7:b1:ea:b0:21:d4:b2:94:b4:dd:c7:b1:17:51:7a:14:6e:
64:11:a0:3b:2d:cd:95:29:9c:6c:f3:62:de:25:83:65:7d:b9:
99:70:67:67:0d:1f:29:91:46:72:3e:2e:55:65:3c:ee:63:bd:
bf:a6:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:42:50 2026 by rpki-client