Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa
File: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (raw, json)
Hash identifier: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=
Subject key identifier: 8D:AD:42:0A:A7:E0:39:94:D6:43:3B:0A:02:43:D1:23:FF:16:FE:67
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 7DBF8768399CA5C53ADA1837D219485639A7485B
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa
Signing time: Fri 04 Jul 2025 12:05:03 +0000
ROA not before: Fri 04 Jul 2025 12:00:03 +0000
ROA not after: Fri 03 Jul 2026 12:05:03 +0000
asID: 39588
IP address blocks: 194.104.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 16:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:bf:87:68:39:9c:a5:c5:3a:da:18:37:d2:19:48:56:39:a7:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jul 4 12:00:03 2025 GMT
Not After : Jul 3 12:05:03 2026 GMT
Subject: CN=8DAD420AA7E03994D6433B0A0243D123FF16FE67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:ed:a8:4d:57:ef:84:aa:f2:4a:4b:f9:e5:
d7:91:30:3f:20:90:77:f4:44:ff:dc:1d:c4:1e:ee:
20:1b:f3:50:c6:c1:e0:db:26:3e:1d:7f:57:5c:08:
c8:6a:47:c2:32:5e:23:ec:c8:93:34:36:a3:42:07:
8f:26:bb:00:27:a2:a5:36:16:f6:73:58:70:ff:30:
3c:24:3d:5f:2b:85:20:92:25:ee:49:70:bd:4d:ea:
0c:12:f7:3b:3d:3c:84:c2:a6:84:8c:c8:ee:79:8b:
53:b5:14:af:ad:1f:33:2a:9d:c9:5c:13:8c:92:aa:
92:37:ea:af:53:76:ac:34:00:e0:66:ee:13:59:1e:
cf:3f:ba:73:52:be:78:61:8d:ba:2a:3f:7c:cc:db:
91:6f:89:53:47:8d:c2:5a:0a:48:4b:c0:8b:d9:05:
1b:00:25:3b:00:58:52:df:76:65:5d:6b:f0:5e:ab:
76:5b:71:b5:f0:af:ab:92:19:95:9c:d9:eb:da:de:
41:bc:af:b1:d6:51:7f:4a:fc:9e:4b:9b:06:22:9e:
6b:98:fc:69:ef:5e:54:c4:06:9a:19:15:cd:6a:54:
6c:bd:78:fa:76:4f:e1:4c:cd:b8:49:dd:b3:aa:49:
d3:55:86:9e:f0:67:b1:bc:01:99:32:f5:4d:bf:b0:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AD:42:0A:A7:E0:39:94:D6:43:3B:0A:02:43:D1:23:FF:16:FE:67
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.110.0/23
Signature Algorithm: sha256WithRSAEncryption
58:71:9a:86:80:cb:b1:94:f0:d3:86:af:4a:47:82:c7:4b:1f:
a3:a8:eb:e6:a6:c1:14:ff:95:a0:1b:ca:78:60:52:6d:a4:55:
27:30:37:54:9a:42:c4:40:72:1b:0d:e5:89:ab:cd:59:c6:75:
cc:48:dd:2f:70:40:07:71:3a:d4:d6:8f:53:96:cd:23:2f:aa:
f5:59:5d:fd:65:a8:58:d2:41:43:09:9e:2e:70:a6:16:50:d2:
b7:26:21:cc:d6:2b:c0:9b:f1:d3:04:0f:72:6e:fa:bb:31:b1:
79:84:d4:7e:53:07:cf:1b:be:2c:aa:c7:19:a8:fa:2f:9e:d3:
8c:95:bd:38:42:28:88:e2:aa:b7:e6:1a:04:66:27:b1:43:5f:
72:bb:2c:b9:af:a5:52:21:5d:a0:2c:b9:2e:43:0a:70:85:84:
77:aa:84:b7:8c:0e:3e:8d:07:09:21:18:8d:7a:49:63:a1:7b:
07:be:8b:1d:49:e2:ea:83:59:e6:92:42:01:33:bd:a1:5c:ee:
19:a7:98:b8:0f:02:ce:d2:f6:88:41:f5:ce:89:34:41:96:c4:
60:54:50:13:8f:33:8a:71:bd:ba:07:3f:37:50:6b:bf:85:d6:
29:ac:8d:20:5f:84:f8:6e:9a:f4:b3:7d:91:db:be:cc:93:1b:
19:89:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:29:42 2025 by rpki-client