Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33392e302f32342d3234203d3e203134363138.roa
File: 3134372e32382e33392e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: KlxhZKWN1RwM4zfXljWreM/mfeSR92FS5Z8ZpUw/LPI=
Subject key identifier: D8:BF:01:F2:40:3D:CE:8B:61:0B:2C:04:BB:68:09:CC:54:66:E0:E2
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 47EB55AE78B608CC0EE802AD3F6B7FFAF2D968B3
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33392e302f32342d3234203d3e203134363138.roa
Signing time: Thu 24 Apr 2025 23:32:14 +0000
ROA not before: Thu 24 Apr 2025 23:27:14 +0000
ROA not after: Thu 23 Apr 2026 23:32:14 +0000
asID: 14618
IP address blocks: 147.28.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Apr 2025 21:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:eb:55:ae:78:b6:08:cc:0e:e8:02:ad:3f:6b:7f:fa:f2:d9:68:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Apr 24 23:27:14 2025 GMT
Not After : Apr 23 23:32:14 2026 GMT
Subject: CN=D8BF01F2403DCE8B610B2C04BB6809CC5466E0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:6e:60:ad:59:21:26:d3:29:a9:55:eb:a3:
d9:4b:3a:00:3d:fa:22:03:36:c7:9b:fa:38:a3:88:
e5:38:3c:d9:f5:8e:64:84:b7:f3:ad:a4:ca:50:f7:
9b:51:da:54:b2:72:ef:0c:d5:1e:94:5f:01:d0:91:
51:fd:a3:c6:56:a1:98:ea:55:a9:e0:1b:c4:d6:5a:
1c:3e:44:b7:ba:6d:91:0f:09:3a:76:11:ac:a7:f6:
a1:57:27:2e:98:9a:01:6f:45:fb:4b:a5:6b:fa:ee:
42:12:ca:64:c9:48:ee:b6:7d:32:01:ec:11:ba:65:
c6:98:a8:72:33:f0:c2:c0:46:93:f7:7f:95:81:f3:
4a:f9:a8:80:04:bd:96:0a:78:d8:e6:60:48:23:a5:
1a:6a:e6:ee:31:c5:c4:27:1a:90:a0:03:a3:37:e2:
1e:da:60:e2:53:5a:eb:e5:32:fe:13:dd:cf:ef:14:
44:aa:94:95:28:f9:e7:ae:10:ff:77:57:2d:26:8b:
40:5f:16:5e:b3:c5:f2:04:9c:73:af:e2:28:be:cd:
b2:32:c5:09:2c:72:02:17:07:98:0a:38:d5:1f:b0:
6b:7b:e7:0e:88:c1:59:65:09:4c:8b:3c:18:8b:9c:
77:b3:c7:7c:4a:58:1d:25:88:2e:51:a5:1e:d0:8a:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:01:F2:40:3D:CE:8B:61:0B:2C:04:BB:68:09:CC:54:66:E0:E2
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33392e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.39.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1b:13:4e:78:75:34:22:8a:2b:9c:02:b6:41:dd:33:7f:ac:
df:b9:32:ec:ca:6c:17:c7:2f:c4:b8:f5:9e:d1:c6:a6:23:05:
4d:25:95:fe:0a:10:99:43:b8:e5:8a:1f:12:60:05:aa:16:40:
13:74:3b:01:12:76:61:a7:08:67:2f:a0:0c:1a:4e:07:0b:0d:
7b:58:0c:b6:d1:44:f2:8e:4d:60:d1:92:4b:f1:bc:b7:f3:d7:
20:05:20:49:5d:64:16:c5:69:78:50:a8:b4:12:ab:fa:36:fe:
38:b5:4d:07:ad:19:be:46:db:91:63:42:eb:8f:26:58:39:88:
80:77:50:92:13:ba:0c:04:5e:04:7a:49:3e:73:48:02:bc:26:
7d:c5:e5:6d:23:49:c8:4c:28:0e:36:13:03:78:5a:81:28:90:
86:24:48:6e:f9:9f:1c:d4:24:cf:64:fb:74:85:48:2d:5b:0d:
d4:94:bf:2b:e0:e4:3b:29:6e:13:87:e8:f1:ee:7e:1c:e4:0e:
9a:8f:6b:3f:13:f8:7f:b4:7d:67:ac:17:e8:56:d3:44:92:b2:
07:e9:4f:83:6f:9c:9d:1e:70:0f:81:bc:6d:e5:cc:5d:6e:48:
fd:91:ab:d8:ff:29:c4:06:8e:06:01:af:5b:c4:80:1f:c5:07:
4b:f6:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:39 2025 by rpki-client