Route Origin Authorization
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203134363138.roa
File: 3134372e32382e33382e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: iU8Dlf2Eq8XWun58hJUMzhd06aDw3VGkd00gTvIjq+k=
Subject key identifier: F4:A1:23:6F:6E:EB:9C:CA:71:23:C2:FD:98:EA:A9:F1:3E:9E:E3:C1
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 118C0C19ECD26A2FC9FD006EFE0C99E6254CC531
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203134363138.roa
Signing time: Mon 07 Sep 2026 16:46:40 +0000
ROA not before: Mon 07 Sep 2026 16:41:40 +0000
ROA not after: Mon 06 Sep 2027 16:46:40 +0000
asID: 14618
IP address blocks: 147.28.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8c:0c:19:ec:d2:6a:2f:c9:fd:00:6e:fe:0c:99:e6:25:4c:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Sep 7 16:41:40 2026 GMT
Not After : Sep 6 16:46:40 2027 GMT
Subject: CN=F4A1236F6EEB9CCA7123C2FD98EAA9F13E9EE3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:ab:2c:6b:58:26:af:23:31:b8:55:92:0c:
95:27:b7:9b:8b:1d:f2:10:d3:78:b6:52:c9:b4:c0:
57:13:23:ad:42:ef:16:10:51:4c:b9:76:24:90:d9:
64:a8:81:7f:5f:5c:ef:37:15:99:b1:59:46:32:74:
dd:6a:c1:cc:21:c9:10:a2:d6:58:d3:33:8d:cb:da:
1d:b4:bc:9a:a4:f7:71:36:f2:fd:8b:42:e9:99:88:
a1:17:1f:42:aa:1c:57:5d:4f:82:73:98:7f:0e:b2:
cd:ed:5a:9d:7f:41:62:c8:44:3b:cc:ad:97:87:53:
4a:0f:0f:12:db:96:29:7a:1b:7c:02:8c:21:ec:f5:
9b:55:bb:60:7d:f1:19:2c:ce:b7:25:ef:6c:83:ed:
bc:16:79:64:f4:35:d9:5e:81:75:fa:f1:5a:71:9f:
42:27:91:1d:56:e9:85:a1:ea:e9:c2:53:ce:36:bf:
82:1b:91:0d:89:15:db:28:2f:c3:76:0d:a8:74:7a:
c4:2f:3b:e2:75:6d:f6:61:3a:6f:65:7b:09:db:d5:
96:4e:fb:f5:7a:ec:27:a9:8e:e5:f6:17:d3:5a:4b:
5d:d4:7b:96:25:2d:f3:8a:48:43:f5:e2:c0:74:f2:
64:0c:7b:7d:0a:53:f0:70:39:81:59:d1:72:4a:68:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:23:6F:6E:EB:9C:CA:71:23:C2:FD:98:EA:A9:F1:3E:9E:E3:C1
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8e:1f:93:d9:cc:a3:74:6e:5c:c8:a1:57:62:db:02:83:6a:
96:99:51:93:a4:07:9f:a9:28:3b:03:29:a4:f7:ad:67:08:0f:
11:41:be:30:00:50:ed:11:d3:11:60:4a:38:52:d8:4e:e6:26:
28:35:60:9f:87:62:35:76:ca:26:56:53:37:8b:2d:df:07:13:
ef:a9:4f:4a:3c:65:d4:25:7c:0b:53:08:81:56:0f:73:4b:50:
fd:b9:c2:a7:aa:bd:ee:6f:ff:04:77:57:58:0f:a6:81:a3:b3:
20:75:35:6e:16:5a:86:fe:f6:5d:26:21:18:f1:a4:f3:32:04:
98:cf:30:d4:7b:6c:75:61:d0:0e:0a:b7:41:6e:0d:56:5f:cc:
0c:ea:6c:d5:d5:51:55:40:ef:64:21:1f:7a:47:32:fb:05:96:
48:31:bc:14:15:18:cb:b9:54:70:e4:e7:be:d6:45:65:be:92:
d8:6c:6b:54:4a:99:19:9f:62:24:6c:ac:8d:5b:6e:d8:c1:53:
5c:51:4e:9e:8b:06:5e:b3:68:91:63:8c:86:87:83:ea:4e:27:
2a:a5:df:b7:75:0b:a9:5b:e1:52:70:3f:3e:67:83:38:da:72:
84:b1:37:6b:23:ea:49:a9:29:b9:cc:e1:4c:9d:5d:9c:33:3c:
fe:37:b4:cf
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUEYwMGezSai/J/QBu/gyZ5iVMxTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNjA5MDcxNjQxNDBaFw0yNzA5MDYxNjQ2NDBaMDMxMTAvBgNV
BAMTKEY0QTEyMzZGNkVFQjlDQ0E3MTIzQzJGRDk4RUFBOUYxM0U5RUUzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHqssa1gmryMxuFWSDJUnt5uL
HfIQ03i2Usm0wFcTI61C7xYQUUy5diSQ2WSogX9fXO83FZmxWUYydN1qwcwhyRCi
1ljTM43L2h20vJqk93E28v2LQumZiKEXH0KqHFddT4JzmH8Oss3tWp1/QWLIRDvM
rZeHU0oPDxLblil6G3wCjCHs9ZtVu2B98Rkszrcl72yD7bwWeWT0NdlegXX68Vpx
n0InkR1W6YWh6unCU842v4IbkQ2JFdsoL8N2Dah0esQvO+J1bfZhOm9lewnb1ZZO
+/V67CepjuX2F9NaS13Ue5YlLfOKSEP14sB08mQMe30KU/BwOYFZ0XJKaNShAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQU9KEjb27rnMpxI8L9mOqp8T6e48EwHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgYkGCCsGAQUFBwELBH0wezB5BggrBgEFBQcw
C4ZtcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5
ODAwMDAvMy8zMTM0MzcyZTMyMzgyZTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkxwmMA0GCSqGSIb3DQEBCwUAA4IBAQAu
jh+T2cyjdG5cyKFXYtsCg2qWmVGTpAefqSg7Aymk961nCA8RQb4wAFDtEdMRYEo4
UthO5iYoNWCfh2I1dsomVlM3iy3fBxPvqU9KPGXUJXwLUwiBVg9zS1D9ucKnqr3u
b/8Ed1dYD6aBo7MgdTVuFlqG/vZdJiEY8aTzMgSYzzDUe2x1YdAOCrdBbg1WX8wM
6mzV1VFVQO9kIR96RzL7BZZIMbwUFRjLuVRw5Oe+1kVlvpLYbGtUSpkZn2IkbKyN
W27YwVNcUU6eiwZes2iRY4yGh4PqTicqpd+3dQupW+FScD8+Z4M42nKEsTdrI+pJ
qSm5zOFMnV2cMzz+N7TP
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:13 2026 by rpki-client