Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34312e302f32342d3234203d3e203136353039.roa
File: 3134372e32382e34312e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: ZlRTxP1QJzbPT9TAM/LMjIV/82LOj9E6rX/aq/QYXE0=
Subject key identifier: 85:8D:F7:1A:9F:9A:A3:37:B1:8F:D5:12:B1:91:81:63:A7:EC:9C:F8
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 679F733F17DB772493DE9A85BE028460A1DC196E
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34312e302f32342d3234203d3e203136353039.roa
Signing time: Mon 08 Jun 2026 18:21:30 +0000
ROA not before: Mon 08 Jun 2026 18:16:30 +0000
ROA not after: Mon 07 Jun 2027 18:21:30 +0000
asID: 16509
IP address blocks: 147.28.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:9f:73:3f:17:db:77:24:93:de:9a:85:be:02:84:60:a1:dc:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 8 18:16:30 2026 GMT
Not After : Jun 7 18:21:30 2027 GMT
Subject: CN=858DF71A9F9AA337B18FD512B1918163A7EC9CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:4a:39:98:52:4f:9e:c9:30:a2:26:1d:c3:
71:6f:43:b6:5a:6a:3d:63:c5:42:89:5d:9a:9b:78:
8e:e9:6c:95:3a:05:df:8e:74:19:95:c7:34:a5:ad:
5f:b8:c4:24:a6:15:fd:f6:66:f1:c5:06:fd:a1:f5:
3f:34:a3:29:6c:4d:03:b7:c7:9b:5e:05:d6:18:c3:
5b:15:b6:6d:59:12:c2:c5:19:6a:0f:00:5d:b0:e3:
00:e1:2a:63:02:1b:0e:c0:bc:97:4f:87:ca:c8:cb:
f2:58:25:df:c3:0a:5f:f3:f9:39:2f:6c:48:ce:4a:
63:e3:b2:0f:84:c9:c6:1f:37:64:eb:48:0c:06:4b:
2a:5c:8e:95:fc:89:1f:8a:9d:f2:06:e8:ce:42:c1:
4b:27:5f:e4:6c:3d:51:89:65:ae:fd:52:8f:69:25:
2b:8e:7a:3a:96:c2:cc:e3:68:fc:0b:33:f1:3c:c9:
20:17:e1:c2:b0:8b:3f:6b:20:1f:6f:86:f4:97:19:
aa:b7:dc:b8:cd:d2:e1:12:63:eb:10:cd:04:46:f7:
3d:88:d7:e8:9b:e8:9f:b4:29:d6:03:59:03:90:3b:
fe:5d:e0:c5:f9:7d:49:31:bc:78:9a:d0:2e:5b:3b:
1a:2b:2a:fe:a9:de:41:ba:cd:bd:d3:1b:1f:65:ad:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:F7:1A:9F:9A:A3:37:B1:8F:D5:12:B1:91:81:63:A7:EC:9C:F8
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e34312e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.41.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8c:6f:fa:e3:69:44:01:70:d1:8c:36:d4:a8:1e:d5:e2:8b:
1b:67:f2:aa:92:98:d7:b9:7e:46:d1:59:97:c9:74:24:90:47:
a9:37:12:57:b9:8c:fa:66:d3:69:bc:d0:f6:6d:f4:7d:c5:6f:
dd:7b:92:4f:64:94:5e:4e:13:f3:61:fe:fc:85:4f:d2:16:e0:
18:00:3c:61:e5:5f:4d:cb:1c:a5:2c:68:64:d1:58:ef:a5:50:
30:f0:c0:38:c2:67:e8:27:82:84:1e:53:4c:c1:5e:ff:13:6e:
2e:56:84:50:04:09:17:67:46:b1:ef:c7:c6:9e:7e:33:ee:61:
59:27:9c:ec:bf:e2:34:ec:43:89:0e:51:49:7e:97:79:45:18:
7a:53:ba:7c:d5:30:26:0d:1c:bd:38:53:c4:5f:1a:d5:16:fb:
e6:8a:c4:67:54:97:c6:09:5d:2d:17:be:58:72:85:9d:ab:62:
14:38:d6:06:9c:4e:f9:76:e3:81:a1:e7:22:db:8f:55:51:03:
07:0d:13:89:45:8a:c3:f4:80:9a:20:f1:81:b3:ea:36:d3:02:
73:ef:34:34:bf:68:55:05:63:a4:fb:3a:81:be:47:14:57:77:
c2:5a:27:11:ee:33:82:b8:7f:bf:a4:a1:81:89:2d:41:25:41:
6c:2a:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:05 2026 by rpki-client