Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33372e302f32342d3234203d3e203339353838.roa
File: 3134372e32382e33372e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier: CbjiivXvwzdPYtI8Uc9ykg32WbnBM0nvC1/XGGMNlP0=
Subject key identifier: E3:7A:DF:CF:A0:35:A0:57:7B:44:74:9E:23:86:6F:39:36:7A:A5:9B
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 4063D1E108599702822BF9A7760B9605C3E3EEE8
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33372e302f32342d3234203d3e203339353838.roa
Signing time: Wed 20 May 2026 14:15:24 +0000
ROA not before: Wed 20 May 2026 14:10:24 +0000
ROA not after: Wed 19 May 2027 14:15:24 +0000
asID: 39588
IP address blocks: 147.28.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:63:d1:e1:08:59:97:02:82:2b:f9:a7:76:0b:96:05:c3:e3:ee:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: May 20 14:10:24 2026 GMT
Not After : May 19 14:15:24 2027 GMT
Subject: CN=E37ADFCFA035A0577B44749E23866F39367AA59B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:a8:08:6f:34:d9:8d:b8:a3:c4:5d:90:96:
4b:66:b7:1c:55:3c:1b:ad:db:c4:1b:a2:37:53:5f:
93:0b:ff:59:3a:31:3a:e0:db:f2:21:fb:21:65:9c:
27:31:85:0f:b0:17:fa:16:09:bf:30:eb:97:a2:14:
72:6b:31:cf:f0:cd:85:86:09:d0:49:92:1e:2c:b6:
ab:cf:19:ec:8d:a1:42:1e:f8:07:84:28:3a:e4:de:
f6:d8:d5:00:a3:34:21:6d:4f:b1:6c:23:bf:5a:80:
e7:15:ad:4b:4c:bc:b5:80:12:b7:91:94:49:df:e6:
17:a2:5b:0e:9d:a0:68:bc:56:ea:97:58:e5:5b:86:
78:62:5c:03:cd:40:b0:f7:cb:e2:0a:1d:86:0f:5d:
54:1d:e0:fc:da:b1:6a:05:c7:71:88:5f:1e:69:0f:
00:c2:5b:52:d2:20:89:da:12:e8:e9:27:92:47:1c:
af:13:ac:cd:0c:3e:f0:e2:3a:0a:b2:b5:49:7d:27:
2a:e1:d5:ce:9a:3e:24:b0:fc:f3:6f:d0:12:1d:9e:
2b:c0:ae:04:b3:a0:64:6c:ba:60:b2:79:c9:30:b5:
37:f1:ee:b3:9c:f0:07:85:17:a5:55:22:18:03:b9:
c1:3b:78:7f:9b:58:02:87:1a:73:f6:c9:76:a0:af:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7A:DF:CF:A0:35:A0:57:7B:44:74:9E:23:86:6F:39:36:7A:A5:9B
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33372e302f32342d3234203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.37.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cd:e1:31:6d:30:77:ba:76:6e:6a:ee:d0:54:d4:14:02:1d:
5b:d1:ee:4e:a9:44:8e:92:a0:60:2c:67:c5:a8:bc:6d:26:69:
98:55:01:97:61:16:4f:2c:43:59:12:43:cd:7f:ac:1f:3d:31:
43:f9:02:29:f8:05:5d:25:4e:fb:97:5b:d1:77:40:44:22:f8:
7d:84:a4:6e:b5:c6:59:39:4d:81:ba:9a:05:f6:71:25:d1:9b:
4f:65:2d:be:52:d0:12:7c:70:d9:69:03:b2:69:99:85:76:12:
43:af:fd:76:d1:76:8e:64:60:00:09:b1:c0:47:2c:c0:fc:5c:
72:4e:04:67:96:d6:8b:d0:73:62:32:95:81:dc:a2:13:18:4f:
37:de:fe:c8:14:a5:43:8b:ce:9c:26:fe:9f:49:47:2c:35:a0:
4f:98:1e:e2:ad:7a:bf:b5:7a:df:1d:85:a9:31:08:dd:82:02:
0f:fd:18:f0:80:ee:59:94:4c:79:4f:cc:ef:5a:39:18:2d:a1:
ca:4a:7e:09:b3:74:7e:45:49:e7:2c:6b:a6:4b:77:0d:64:29:
bc:f9:c9:92:a7:64:b2:fa:a7:82:42:8e:10:cf:63:66:22:63:
b9:da:91:c9:d9:b7:6a:e2:a9:cf:a8:b5:c8:10:9b:ea:24:d9:
f8:1b:af:1e
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUQGPR4QhZlwKCK/mndguWBcPj7ugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNjA1MjAxNDEwMjRaFw0yNzA1MTkxNDE1MjRaMDMxMTAvBgNV
BAMTKEUzN0FERkNGQTAzNUEwNTc3QjQ0NzQ5RTIzODY2RjM5MzY3QUE1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGK6gIbzTZjbijxF2QlktmtxxV
PBut28QbojdTX5ML/1k6MTrg2/Ih+yFlnCcxhQ+wF/oWCb8w65eiFHJrMc/wzYWG
CdBJkh4stqvPGeyNoUIe+AeEKDrk3vbY1QCjNCFtT7FsI79agOcVrUtMvLWAEreR
lEnf5heiWw6doGi8VuqXWOVbhnhiXAPNQLD3y+IKHYYPXVQd4PzasWoFx3GIXx5p
DwDCW1LSIInaEujpJ5JHHK8TrM0MPvDiOgqytUl9Jyrh1c6aPiSw/PNv0BIdnivA
rgSzoGRsumCyeckwtTfx7rOc8AeFF6VVIhgDucE7eH+bWAKHGnP2yXagrw0/AgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQU43rfz6A1oFd7RHSeI4ZvOTZ6pZswHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgYkGCCsGAQUFBwELBH0wezB5BggrBgEFBQcw
C4ZtcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5
ODAwMDAvMy8zMTM0MzcyZTMyMzgyZTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMzM5MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkxwlMA0GCSqGSIb3DQEBCwUAA4IBAQCE
zeExbTB3unZuau7QVNQUAh1b0e5OqUSOkqBgLGfFqLxtJmmYVQGXYRZPLENZEkPN
f6wfPTFD+QIp+AVdJU77l1vRd0BEIvh9hKRutcZZOU2BupoF9nEl0ZtPZS2+UtAS
fHDZaQOyaZmFdhJDr/120XaOZGAACbHARyzA/FxyTgRnltaL0HNiMpWB3KITGE83
3v7IFKVDi86cJv6fSUcsNaBPmB7irXq/tXrfHYWpMQjdggIP/RjwgO5ZlEx5T8zv
WjkYLaHKSn4Js3R+RUnnLGumS3cNZCm8+cmSp2Sy+qeCQo4Qz2NmImO52pHJ2bdq
4qnPqLXIEJvqJNn4G68e
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:42:59 2026 by rpki-client