Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34302e302f32342d3234203d3e203134363138.roa
File: 3134372e32382e34302e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: R4bbGqd9wWOZM0DP021WMrw6041M+nsAVEATjlwEW7Y=
Subject key identifier: 5D:D2:9C:D3:EB:3E:3F:0A:0E:BE:40:23:31:A4:71:05:74:38:C6:EB
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 12476AB567F495E49529CA8E0803BD035C0E211A
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34302e302f32342d3234203d3e203134363138.roa
Signing time: Tue 14 Apr 2026 19:45:50 +0000
ROA not before: Tue 14 Apr 2026 19:40:50 +0000
ROA not after: Tue 13 Apr 2027 19:45:50 +0000
asID: 14618
IP address blocks: 147.28.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:47:6a:b5:67:f4:95:e4:95:29:ca:8e:08:03:bd:03:5c:0e:21:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Apr 14 19:40:50 2026 GMT
Not After : Apr 13 19:45:50 2027 GMT
Subject: CN=5DD29CD3EB3E3F0A0EBE402331A471057438C6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c9:c4:c0:fe:ba:73:51:28:c6:37:e6:e5:ab:
1e:3e:c2:17:26:f0:8e:39:80:e5:35:87:4d:ac:5c:
0e:d3:54:7d:07:47:2c:cf:2d:7b:85:bd:ae:26:42:
ef:fc:11:e8:48:5b:b4:3d:2b:a0:00:48:5c:e8:5d:
6e:b8:1c:16:f4:b7:06:4f:f7:e2:7e:ec:19:8d:45:
ba:95:cc:c4:29:64:7f:60:36:52:ef:eb:2c:60:60:
96:7d:b8:3d:d0:c8:c4:45:b3:97:db:f8:2a:26:77:
6b:1e:34:3f:2b:fd:8f:1d:63:3c:b3:f6:16:f1:51:
e7:32:a3:c9:9b:f5:9e:61:67:d3:35:0c:c9:68:d7:
a6:50:4c:a6:42:07:c3:44:f4:e2:31:d6:8f:9a:e2:
6b:4d:f7:41:77:cd:12:d7:b8:69:89:fe:64:fa:03:
95:c5:b6:5e:5e:87:d4:8b:09:64:32:bb:fa:cf:5c:
37:5d:96:f2:cd:15:fa:75:3d:91:2e:f2:a3:e0:bd:
d2:7d:99:67:b3:ab:2d:b5:bf:7e:f9:77:4f:69:23:
0a:43:25:10:80:f4:2d:e4:e9:64:ad:3c:74:1a:8a:
09:93:cf:95:a5:dd:92:13:58:4e:f6:c7:da:05:63:
c8:c0:64:a3:fa:42:9c:02:bf:a0:69:c6:99:27:62:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D2:9C:D3:EB:3E:3F:0A:0E:BE:40:23:31:A4:71:05:74:38:C6:EB
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34302e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:62:a3:29:62:56:3a:0f:fe:cd:70:53:71:f5:1e:80:ce:cd:
19:c8:5e:c5:91:33:20:d7:6c:59:16:bc:59:20:2a:30:2f:a3:
fd:2c:7d:df:df:97:bf:6a:e2:29:6a:e3:aa:7d:4b:f4:68:0b:
1b:7f:8a:2a:0c:75:ae:10:b9:70:af:97:85:cd:39:72:6d:d6:
7d:cb:72:8a:dd:f1:4d:c1:df:33:8b:19:32:96:ca:1f:02:ee:
7b:90:bc:c7:2f:0c:c8:d7:cc:da:f3:0f:e0:fe:d1:bd:21:50:
cc:bc:0e:45:c6:65:62:ac:c1:74:de:eb:0f:df:52:a4:5f:5a:
8a:83:3d:71:ed:e9:5a:99:73:9a:4b:92:f0:3d:69:48:ab:f3:
8d:b9:05:c5:57:60:03:9f:96:a7:4f:a3:68:47:ba:04:8d:0c:
a4:55:6b:0e:5d:15:2f:3b:01:17:62:fa:88:95:f6:c5:25:f3:
9a:04:6a:f7:91:c6:a0:fe:2b:79:e5:28:97:fe:df:a6:ed:f0:
d0:a0:c4:2a:e6:b1:7c:87:eb:93:61:eb:98:38:2c:42:6c:aa:
39:0c:d4:d2:9a:4d:9a:c9:3e:53:dc:af:46:1e:97:6f:f0:a3:
3f:51:2d:2c:fa:b1:e6:b8:89:1c:81:b3:06:60:80:aa:90:c7:
c9:bb:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:49 2026 by rpki-client