Route Origin Authorization
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203136353039.roa
File: 3134372e32382e33382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: Ii2EOHAvL+W7yz3x65zooPG/CMJiaV97rjJC2UJOIxQ=
Subject key identifier: 25:47:17:C4:12:88:31:29:18:64:3F:60:C8:63:B0:C3:A0:4C:1B:7A
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 32104F41D76AA79734C89E4DD2A4F82FB55EA531
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203136353039.roa
Signing time: Mon 07 Sep 2026 16:46:40 +0000
ROA not before: Mon 07 Sep 2026 16:41:40 +0000
ROA not after: Mon 06 Sep 2027 16:46:40 +0000
asID: 16509
IP address blocks: 147.28.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:10:4f:41:d7:6a:a7:97:34:c8:9e:4d:d2:a4:f8:2f:b5:5e:a5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Sep 7 16:41:40 2026 GMT
Not After : Sep 6 16:46:40 2027 GMT
Subject: CN=254717C41288312918643F60C863B0C3A04C1B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:f0:3b:fb:10:73:b9:89:6a:1d:eb:ef:a3:
f2:e4:ac:ad:93:a0:ff:c3:ab:f0:e4:73:e4:40:c0:
f0:4f:84:91:1b:74:3b:89:e7:bd:5f:4e:1d:0f:74:
58:6b:ef:d2:24:22:86:86:c9:ab:6d:fe:fe:da:78:
f4:5a:3b:93:7c:ab:e1:3f:ac:ea:b4:3e:c8:25:d3:
72:20:48:4e:06:77:d2:e6:06:ca:00:b2:aa:25:33:
62:c3:03:8a:0b:d8:6f:44:79:dc:36:a9:fd:d0:16:
ef:f7:0b:74:19:c0:d0:3c:2b:8f:35:06:a8:dd:1b:
5e:a0:21:77:b0:44:0d:3a:e5:42:a0:64:e2:02:80:
6b:fe:08:aa:3d:9d:df:87:d1:14:7b:68:43:53:64:
88:b0:c0:2b:67:9d:1e:62:86:0b:3f:e4:14:20:e3:
78:98:d6:6c:23:b2:f9:14:12:c8:32:43:cb:1c:77:
3e:29:2a:cb:31:09:26:9f:5c:75:e8:e0:74:c7:12:
5b:34:b3:84:bb:17:dc:fb:f1:8c:e0:a1:b7:c5:dc:
76:3e:62:6a:d2:47:c1:85:00:68:15:8e:6b:91:91:
63:27:d8:e4:40:fc:df:51:01:28:78:48:93:7d:2b:
4c:2f:d0:b8:1f:59:7f:de:20:c9:68:f4:4b:c2:c8:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:17:C4:12:88:31:29:18:64:3F:60:C8:63:B0:C3:A0:4C:1B:7A
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.38.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ab:6a:c6:df:a5:70:07:e0:ab:a9:25:b4:03:ed:73:14:f8:
0f:91:21:eb:2e:07:12:3f:01:2f:95:cf:77:df:65:43:ec:b6:
97:bb:aa:18:89:ce:18:7c:8f:ca:a0:41:a6:3f:29:b8:39:8d:
45:ce:2c:fb:34:e1:96:6f:b6:6b:d4:c1:e0:7b:33:7a:e4:59:
30:50:6a:6b:25:6c:c7:4b:06:fe:46:55:55:b5:28:25:1d:1a:
b4:03:77:c9:68:21:73:d5:f5:e5:aa:86:73:16:74:63:2b:f2:
bf:68:c5:8a:47:98:a8:e6:bb:80:b7:a7:2d:a2:32:01:93:90:
cf:a9:b7:e5:cb:82:4a:f4:eb:b5:50:7a:01:f9:27:85:df:d1:
e1:dc:24:93:7d:c0:d1:34:b4:cb:d5:17:99:43:c0:7a:68:17:
5a:44:f2:b5:c2:9e:5a:41:d3:17:a7:a8:44:53:c2:b9:d2:e9:
04:d3:de:37:ef:2a:a0:45:24:5e:31:80:2e:2f:c0:de:0e:45:
e5:e2:a4:26:dc:f9:bb:be:e8:cf:a6:2d:a4:72:83:de:7e:6e:
7e:e9:09:a5:07:f5:1a:a1:43:9f:61:95:9e:20:d4:ab:92:1c:
34:3f:05:8f:f7:5e:c2:8d:f8:08:9a:4c:f7:39:c5:3d:01:b0:
5b:50:91:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:49 2026 by rpki-client