Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34312e302f32342d3234203d3e203134363138.roa
File: 3134372e32382e34312e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: C9J8APk0AuH3mDFTKpEgduV3zF0T874QZtMDuYV8wpI=
Subject key identifier: 74:0D:1A:B9:EA:0B:C8:E4:F8:5F:80:CD:71:58:1B:EE:46:E2:C3:CC
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 3CCAF82CF993413496603E6126C4C347A1BA9F3C
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34312e302f32342d3234203d3e203134363138.roa
Signing time: Mon 08 Jun 2026 18:22:08 +0000
ROA not before: Mon 08 Jun 2026 18:17:08 +0000
ROA not after: Mon 07 Jun 2027 18:22:08 +0000
asID: 14618
IP address blocks: 147.28.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ca:f8:2c:f9:93:41:34:96:60:3e:61:26:c4:c3:47:a1:ba:9f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 8 18:17:08 2026 GMT
Not After : Jun 7 18:22:08 2027 GMT
Subject: CN=740D1AB9EA0BC8E4F85F80CD71581BEE46E2C3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8d:fe:1e:f6:7d:11:f7:9b:a5:16:40:80:e9:
19:14:00:a7:c6:11:c1:18:c2:d3:af:62:36:a8:be:
f9:6e:29:b8:bd:4e:b3:b3:30:fe:4a:c4:56:a4:5c:
47:58:05:f6:59:e0:5f:73:de:a6:2f:da:46:2a:b6:
99:d2:eb:54:a6:ac:9e:68:8d:5e:e8:0b:50:1e:50:
15:23:df:dc:b8:a0:a6:9b:ac:3d:9a:33:24:42:6d:
b8:6d:59:ec:99:6a:04:b3:e0:da:b3:9e:fd:8e:8c:
8e:98:38:f7:b2:02:56:61:ac:de:f0:5b:17:e6:9a:
db:9b:db:e0:84:58:40:60:63:61:c3:62:97:e2:6d:
bb:64:c5:85:d6:d6:ed:c4:cd:45:b9:e1:25:d9:22:
4f:a0:ec:3e:6d:ab:9e:69:31:b5:51:27:47:57:2d:
1b:b8:45:9f:f7:08:7a:74:4e:44:4a:28:98:b9:28:
d3:f7:5e:87:ad:a1:a1:64:38:c0:be:8e:34:6a:97:
05:91:11:34:28:40:87:47:da:05:45:9e:13:0a:54:
a5:cc:07:f0:5d:db:68:12:65:9a:42:f5:7e:5a:17:
6b:fe:24:f3:72:01:a0:5e:21:07:c3:e3:6c:7b:70:
3a:5e:0b:ee:81:10:41:2c:d5:ba:58:c5:61:f7:47:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0D:1A:B9:EA:0B:C8:E4:F8:5F:80:CD:71:58:1B:EE:46:E2:C3:CC
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34312e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.41.0/24
Signature Algorithm: sha256WithRSAEncryption
28:be:4f:5d:e2:0a:c3:48:59:48:4a:75:dd:e3:64:75:7b:ac:
4e:17:f2:00:6e:69:ca:06:bb:c0:21:0d:ad:3b:e5:43:a2:75:
11:6a:c4:97:df:de:84:d3:25:0a:b4:92:4d:22:4e:83:b0:9c:
1f:8e:3e:63:4a:68:82:ba:b6:12:c2:23:ed:5c:63:c5:c8:20:
13:bf:89:3b:6f:a7:4a:50:fc:0f:9f:bb:73:4e:b1:35:36:da:
dc:c4:d9:b8:ef:11:40:46:91:72:02:2a:5c:d9:84:c8:c1:83:
d5:10:97:dc:3e:0e:a1:5e:de:a5:1c:6b:e9:ba:8b:a3:be:f8:
40:33:55:5f:8f:4c:98:d2:42:15:20:e5:b5:7f:12:8f:be:50:
e8:91:0c:b6:93:1b:82:18:96:e3:91:77:8b:77:6e:41:0f:c2:
4c:a7:7f:f3:ff:ec:c7:04:89:19:74:ed:b1:6e:55:91:c7:fa:
51:43:0b:5e:2b:95:e6:d6:4b:34:97:29:f0:a7:07:c2:73:62:
0b:cf:f4:3e:50:e3:93:7c:ed:43:d0:2a:f4:67:1f:86:b5:ed:
92:3e:2c:2b:1c:9d:f0:c8:37:64:1b:01:82:e9:03:a3:a9:25:
38:2e:ea:1f:dd:57:23:52:4f:ac:08:7e:ca:83:89:a5:c5:19:
17:69:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:02 2026 by rpki-client