Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33352e302f32342d3234203d3e203339353838.roa
File: 3134372e32382e33352e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier: zwIs9qYZzwdX1atp5QRs9rfS5YFWiIFf3RvDXhY64Mc=
Subject key identifier: 2C:ED:79:D3:DF:7D:3C:CB:63:D4:FE:EF:0A:16:47:FC:6C:DD:8C:45
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 3C6FC4B2816D977C69E78C167ED6F624DC4408F6
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33352e302f32342d3234203d3e203339353838.roa
Signing time: Fri 04 Jul 2025 12:05:12 +0000
ROA not before: Fri 04 Jul 2025 12:00:12 +0000
ROA not after: Fri 03 Jul 2026 12:05:12 +0000
asID: 39588
IP address blocks: 147.28.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6f:c4:b2:81:6d:97:7c:69:e7:8c:16:7e:d6:f6:24:dc:44:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jul 4 12:00:12 2025 GMT
Not After : Jul 3 12:05:12 2026 GMT
Subject: CN=2CED79D3DF7D3CCB63D4FEEF0A1647FC6CDD8C45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:c5:2d:3b:69:80:85:03:ae:30:3d:d0:24:
86:61:44:bd:c6:d1:47:d7:37:4d:28:0d:f7:b4:07:
a0:50:e0:76:3b:e5:1e:c5:d2:36:76:e5:cb:52:e7:
95:27:e1:2d:9d:69:0d:ec:23:7f:8a:57:bd:7b:69:
b0:1b:fd:e2:ef:c7:65:e9:89:ee:d0:4c:ce:7b:98:
75:62:3c:49:bb:cc:75:17:99:ca:6c:0b:7f:23:d9:
30:dd:ca:a8:73:50:26:9a:80:43:fb:a2:aa:4a:ec:
5f:f7:f0:4c:ec:2f:71:7e:74:ae:93:b4:05:74:ec:
dc:f5:c2:9a:d0:63:f1:57:a8:54:6f:34:2c:6f:03:
36:d5:1d:71:dc:2c:63:fc:95:b1:69:e8:bb:e5:47:
3d:63:db:57:2a:65:cd:8c:c3:de:bb:88:1e:db:48:
6e:b0:ff:2a:51:4b:42:27:54:3e:8e:c6:e3:1a:68:
1b:28:df:ed:e9:59:44:2a:59:2b:28:14:46:9c:41:
34:4c:36:9e:f4:5a:78:c9:72:1e:1a:6e:06:ac:26:
aa:c2:90:b1:8e:ac:2d:37:87:26:5e:81:fc:05:16:
c5:83:ce:fe:d5:ef:4a:30:79:27:b7:ca:8d:80:2d:
7f:c6:08:50:83:26:ac:70:e0:53:ec:77:ef:71:70:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:79:D3:DF:7D:3C:CB:63:D4:FE:EF:0A:16:47:FC:6C:DD:8C:45
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33352e302f32342d3234203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.35.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a3:9d:f6:5a:4f:fb:25:2b:0c:d2:4d:01:a7:48:37:eb:26:
93:d7:b6:37:73:ad:88:a6:ad:83:58:e6:a0:b3:2b:4e:e9:2b:
1c:c0:06:4d:11:ac:d8:59:3a:97:ad:f3:d6:95:7b:da:4f:3c:
f7:b5:e5:b3:d6:21:94:de:f1:75:49:72:63:91:89:19:a9:15:
d2:48:32:37:30:3f:2b:be:35:bc:81:d1:14:28:fb:df:60:57:
68:43:5f:ce:7a:c0:96:b6:e9:2e:52:2a:2c:4c:fc:55:8a:51:
00:fe:bc:2d:6d:c3:fb:6f:2a:e1:99:ca:c0:94:1d:e3:86:66:
05:61:41:39:06:62:28:63:f0:95:54:35:a7:ee:e9:e9:33:08:
bd:39:e7:df:45:98:40:2c:23:ed:ae:2c:c8:50:88:09:1a:d7:
9f:93:ee:1e:64:90:e0:18:9f:5a:8f:c5:a0:76:8e:db:84:a5:
aa:14:8b:ad:77:c4:60:ff:d6:5b:25:7a:4b:82:4c:6c:c2:16:
e1:79:3d:4d:47:b2:c4:c3:73:91:50:32:18:80:64:e0:b1:46:
4f:63:46:f8:eb:ae:a6:e9:78:98:1f:6a:db:fa:60:1c:fc:a6:
fd:ba:ce:e9:ca:02:98:6c:b0:24:80:93:8c:8d:d6:de:ed:02:
a9:90:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:45:19 2025 by rpki-client