Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33342e302f32342d3234203d3e203339353838.roa
File: 3134372e32382e33342e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier: Sj21YId3inXi3+i8w6Ag5xwNamJW8yVkSRTRhrElJso=
Subject key identifier: EB:9C:CF:ED:BC:B7:60:86:0B:0A:22:51:21:A0:B3:9B:59:66:47:44
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 3A52A9A6B318D8AF745B1F7CBEBA6FD4DBE492F1
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33342e302f32342d3234203d3e203339353838.roa
Signing time: Fri 04 Jul 2025 12:05:11 +0000
ROA not before: Fri 04 Jul 2025 12:00:11 +0000
ROA not after: Fri 03 Jul 2026 12:05:11 +0000
asID: 39588
IP address blocks: 147.28.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:52:a9:a6:b3:18:d8:af:74:5b:1f:7c:be:ba:6f:d4:db:e4:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jul 4 12:00:11 2025 GMT
Not After : Jul 3 12:05:11 2026 GMT
Subject: CN=EB9CCFEDBCB760860B0A225121A0B39B59664744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:ec:ab:7d:20:72:90:ef:a5:c5:22:8a:18:
e7:8e:00:95:8a:e8:e5:68:21:f8:d3:42:62:1e:c3:
e2:e8:26:de:5f:76:55:fc:85:85:d5:be:a6:49:9e:
f0:44:8b:70:a5:77:ca:7b:9d:68:65:cd:04:3a:4e:
b0:83:79:04:db:a0:17:70:19:f2:2b:98:c2:f4:a3:
46:3f:71:00:db:e9:db:7a:2f:cc:12:ef:f6:27:55:
54:e8:12:47:34:7e:fe:87:11:3b:d9:68:01:af:e0:
31:2c:8d:89:e4:b6:d3:03:18:62:38:f6:08:29:81:
67:fb:0c:0d:f5:8c:f4:b6:96:62:91:42:cd:b2:67:
cf:fc:76:b5:04:b0:fb:10:2b:ca:b6:87:58:ba:61:
a2:f9:8b:b6:f7:95:3b:22:65:fa:dc:16:dc:69:ec:
20:c5:1f:03:c4:1f:fd:45:e0:04:14:e8:21:a4:8c:
68:55:ec:a7:c1:43:1a:99:5f:a4:0f:83:33:97:d8:
c8:26:d9:54:55:c5:38:25:a8:f3:af:99:b6:38:7e:
1d:b1:c5:30:a2:74:af:61:48:9a:a9:e5:ca:04:c5:
34:6c:91:90:e6:d5:eb:4a:e0:46:70:71:02:1e:a9:
ed:81:8c:79:43:8e:82:ff:6f:5a:15:2f:3a:60:c4:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:CF:ED:BC:B7:60:86:0B:0A:22:51:21:A0:B3:9B:59:66:47:44
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33342e302f32342d3234203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.34.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a6:22:af:2a:ae:ca:19:5a:c3:94:d3:37:03:a6:2b:4f:ff:
44:71:d1:a3:85:6c:66:0c:40:58:26:10:64:44:4b:f1:09:a3:
ae:6b:72:b4:08:b0:dc:08:53:5d:3c:19:5c:f8:d1:98:c7:60:
7b:3b:8e:1a:1d:50:7d:a5:86:42:b7:6a:38:39:3c:ef:f3:4d:
44:53:c7:44:ef:95:35:e0:ac:b3:a0:bf:cb:ae:bd:29:a1:ea:
a8:bc:e9:d8:de:eb:e0:23:6d:7a:08:14:ee:6a:0b:9e:53:2c:
76:46:06:27:b0:a9:fe:23:ec:1a:d6:e3:81:7f:70:3a:ef:0d:
f3:0b:98:d9:7d:5d:77:46:de:09:d7:bf:2c:bf:57:cf:5b:11:
b0:c0:1e:b5:d1:5a:01:3e:6b:20:f9:7f:d2:7b:9c:a5:aa:57:
2e:f9:0c:cb:e8:a8:5d:40:58:65:31:71:ab:ae:ef:6f:69:29:
88:9b:26:0d:0c:22:59:23:68:e5:ef:df:aa:a3:13:2f:74:2d:
8c:50:7d:ef:44:b2:89:82:4d:4b:3f:df:f5:5f:7a:ed:0e:95:
7e:85:3d:dc:58:f9:26:44:ec:0f:89:48:47:56:07:54:0a:28:
bb:e5:ce:42:d4:1c:2a:93:50:32:fb:f1:c0:c3:4c:09:e1:66:
52:91:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:45:22 2025 by rpki-client