Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230352e302f32342d3234203d3e203432343237.roa
File: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=
Subject key identifier: DC:E5:2B:7D:B9:DC:B3:F0:77:19:FA:43:D4:1F:1F:28:B0:1B:20:F9
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 13606E46E99D165F6476AD90237F87F38C2A7BAD
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230352e302f32342d3234203d3e203432343237.roa
Signing time: Fri 04 Jul 2025 12:05:02 +0000
ROA not before: Fri 04 Jul 2025 12:00:02 +0000
ROA not after: Fri 03 Jul 2026 12:05:02 +0000
asID: 42427
IP address blocks: 193.7.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:60:6e:46:e9:9d:16:5f:64:76:ad:90:23:7f:87:f3:8c:2a:7b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Jul 4 12:00:02 2025 GMT
Not After : Jul 3 12:05:02 2026 GMT
Subject: CN=DCE52B7DB9DCB3F07719FA43D41F1F28B01B20F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:21:ff:de:b2:00:82:dd:26:27:9a:07:6e:
f8:46:57:dc:fb:6a:1a:63:23:e9:f4:cb:43:28:1e:
0d:d9:4a:0c:28:6e:0c:72:5d:c3:af:ab:ce:c5:12:
72:4e:93:9d:8b:84:c5:86:fc:91:78:ca:51:74:7e:
88:64:81:19:de:83:92:33:0b:2e:26:5e:03:8c:da:
ac:ba:3f:a2:4a:e2:9f:00:ee:c2:ac:64:25:08:51:
8c:b2:0a:10:25:e0:6a:b8:59:5f:c6:a1:b4:b2:d3:
9b:fc:73:af:93:aa:08:9d:1f:0d:2c:d5:59:1b:3a:
d6:18:77:2d:cf:68:9b:32:de:53:16:9a:6b:73:25:
50:28:5b:50:43:3b:7e:1a:da:00:3e:bc:f5:0d:61:
10:23:07:15:e2:f0:ba:ff:b0:41:d7:60:ec:2a:c3:
73:76:21:df:ad:1e:d5:4a:48:98:2f:e0:22:15:03:
0a:30:ef:95:6f:b1:cf:a9:98:34:91:32:92:fb:db:
d3:50:4d:de:ec:d6:b7:0e:33:5e:87:5a:86:24:c1:
63:24:94:cb:5c:ea:3f:37:61:3b:13:75:89:53:82:
1f:a9:40:0e:3e:7b:4e:a5:e0:1e:3b:7c:81:4d:14:
61:1e:53:ae:81:d2:c2:eb:45:3e:d8:42:9e:42:da:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E5:2B:7D:B9:DC:B3:F0:77:19:FA:43:D4:1F:1F:28:B0:1B:20:F9
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230352e302f32342d3234203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.205.0/24
Signature Algorithm: sha256WithRSAEncryption
73:71:f0:3e:00:c4:37:d2:b9:dd:d8:fb:d4:f9:e9:ae:92:35:
57:8a:29:39:71:cb:e8:3a:69:6f:68:56:f0:cd:c1:82:60:bb:
97:72:05:f6:8c:ad:b6:5b:9c:af:43:c0:2d:34:e0:fe:1b:16:
b1:0f:9d:fc:95:73:1a:76:c9:bc:a8:6d:e5:c1:b3:7c:52:e6:
77:bb:2d:30:56:84:e1:07:ea:89:78:38:6e:a7:85:eb:be:d1:
68:bb:38:38:aa:b7:fa:ed:43:04:ba:1d:c5:f9:ee:85:2e:14:
53:04:bd:63:36:23:7a:c8:97:60:47:88:38:f9:e3:31:36:78:
7f:e0:73:d3:4a:f9:7e:c6:ad:9d:4b:23:69:55:72:1d:f5:84:
ff:59:41:30:94:51:24:e2:65:0b:a0:91:a3:96:6b:26:c3:3b:
92:8d:73:15:71:d6:84:8c:a4:bb:f1:7f:69:b3:52:20:3d:f2:
10:f6:6d:b6:df:8c:2a:3f:dd:8e:9c:b6:72:cf:31:37:f9:01:
c8:d7:74:17:33:b9:52:db:83:d0:29:80:f3:f4:4d:6c:3c:74:
d5:05:f5:19:f7:42:5b:64:7a:e4:e1:97:66:b5:db:d6:54:eb:
31:56:9f:c4:95:30:8f:b5:3b:c7:56:8d:c2:ff:60:6a:fc:c6:
30:bf:74:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:07:04 2025 by rpki-client