Route Origin Authorization
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203337323335.roa
File: 3134372e32382e33382e302f32342d3234203d3e203337323335.roa (raw, json)
Hash identifier: rLLnmZB/RTIeqPBMsoj/yFiUGUGn+j6fYkU2qGSuSrc=
Subject key identifier: 04:91:6A:38:18:68:82:92:6C:3E:9F:66:93:38:B6:29:F1:79:24:2F
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 4A50FA367FA79B88CA76FC43B8C2F88A11DDFA12
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203337323335.roa
Signing time: Mon 07 Sep 2026 16:46:40 +0000
ROA not before: Mon 07 Sep 2026 16:41:40 +0000
ROA not after: Mon 06 Sep 2027 16:46:40 +0000
asID: 37235
IP address blocks: 147.28.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:50:fa:36:7f:a7:9b:88:ca:76:fc:43:b8:c2:f8:8a:11:dd:fa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Sep 7 16:41:40 2026 GMT
Not After : Sep 6 16:46:40 2027 GMT
Subject: CN=04916A38186882926C3E9F669338B629F179242F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:a1:a0:02:a1:1d:91:7c:63:cd:83:f0:6f:
33:44:52:0c:a3:04:8c:71:62:c1:0c:4f:7b:c7:2d:
cc:ee:d1:56:c2:0f:56:df:39:4c:84:57:0e:50:c9:
8c:c8:11:2f:6d:59:a7:3d:4b:67:ce:bb:aa:7f:4e:
3e:24:85:98:39:17:c0:b4:34:07:75:7f:3c:11:40:
ce:3f:00:1c:06:70:f1:df:f2:20:10:d2:d9:2f:8e:
ce:f2:27:48:76:69:d0:de:ed:81:ea:e1:dc:d0:78:
fd:a1:8a:a6:a9:37:76:1c:63:92:20:41:fd:ec:84:
b2:3a:89:61:b4:40:b4:a2:d1:b2:46:6f:6a:d5:26:
ef:ea:0f:f7:0e:48:6f:32:33:0d:eb:a4:d2:a3:82:
c3:eb:5e:84:51:ae:cf:05:28:02:4e:e7:06:00:07:
e3:c3:71:e0:7f:ae:e7:0e:c3:8b:0f:73:b5:d4:e8:
81:7f:cf:21:44:e7:b4:d4:f0:2a:5c:aa:d3:df:35:
5c:8c:6b:ea:14:14:57:ff:03:a4:c2:be:73:92:32:
e6:ba:96:ff:16:3b:88:56:00:fe:ef:e7:a1:23:f2:
b0:e2:d6:0e:6e:b6:8d:60:ef:62:17:56:98:e0:ee:
c7:fa:be:c6:80:94:d7:db:9d:91:5d:ac:b3:11:c3:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:6A:38:18:68:82:92:6C:3E:9F:66:93:38:B6:29:F1:79:24:2F
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:15:7c:c7:61:5b:ef:9b:e9:c9:f3:a8:92:3c:22:2b:bc:81:
b8:69:7f:54:e3:a5:3e:3a:7b:98:06:d0:95:01:0f:39:4e:6f:
2a:75:a3:8c:94:9e:ae:6c:a7:eb:f2:81:aa:14:17:92:6c:f9:
f2:77:40:ca:6c:69:74:bb:36:4a:97:5e:d7:5d:b0:82:88:0d:
51:40:c4:d1:7f:ef:54:3a:7e:fd:cc:e6:21:4f:be:70:49:0f:
73:4d:f7:06:91:f4:d7:09:34:e2:69:44:dd:12:59:8d:14:63:
b1:35:8b:0d:aa:4a:02:1d:0d:8e:f4:b1:ef:94:78:82:a6:e5:
34:80:18:7b:94:66:2d:63:3c:89:5d:9f:7e:d3:ca:de:57:21:
eb:75:df:04:33:f4:72:62:18:cc:cb:bb:2d:c3:99:61:93:41:
d4:5f:88:a6:0f:f1:0a:76:23:85:37:ee:f4:72:9d:07:9f:d5:
5d:27:84:a5:07:95:0d:f7:8c:44:9b:72:0d:12:dd:21:6c:85:
43:11:aa:fe:a5:bf:21:21:5b:7d:4a:f0:58:83:71:dc:17:30:
7e:b7:8d:c2:d3:41:24:a1:9c:28:99:64:b9:a4:f2:62:d6:12:
1b:b8:ac:a7:f4:5a:09:d3:4e:84:b3:70:1b:37:67:68:0a:52:
32:86:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:03:46 2026 by rpki-client