Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33362e302f32342d3234203d3e203432343237.roa
File: 3134372e32382e33362e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier: YM4Qwbd1AEiwID7EAWoU/sJXEh6P3VJEJ7Ur2CSrkk4=
Subject key identifier: EE:47:4D:28:BD:3C:50:D8:11:EB:19:5E:74:29:4D:09:D5:00:2E:40
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 011CB4167E0B3E84F76A0FE101B65F515FBEA6BD
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33362e302f32342d3234203d3e203432343237.roa
Signing time: Fri 04 Jul 2025 12:05:12 +0000
ROA not before: Fri 04 Jul 2025 12:00:12 +0000
ROA not after: Fri 03 Jul 2026 12:05:12 +0000
asID: 42427
IP address blocks: 147.28.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1c:b4:16:7e:0b:3e:84:f7:6a:0f:e1:01:b6:5f:51:5f:be:a6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jul 4 12:00:12 2025 GMT
Not After : Jul 3 12:05:12 2026 GMT
Subject: CN=EE474D28BD3C50D811EB195E74294D09D5002E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:05:78:5a:37:aa:4d:c8:54:d8:17:14:84:
37:de:6e:84:5f:05:26:44:ab:9e:67:ca:14:d7:07:
9b:30:dc:aa:38:dd:10:ac:86:4c:58:7a:1d:a4:c9:
80:b8:64:40:2a:5f:3f:98:22:51:3b:f3:94:ca:f9:
da:54:8c:c9:a1:e6:41:d7:a6:e0:8a:86:a4:39:53:
44:9f:cb:d8:01:0b:9a:31:b3:89:d8:b0:49:93:84:
67:be:bd:c8:0a:b6:46:79:9b:df:9d:f6:d6:ff:5e:
97:b5:dc:55:81:ac:7e:70:3c:e9:3a:f6:d0:c0:e3:
04:1b:39:f1:10:3e:67:0f:c0:26:0e:f3:17:ef:10:
bc:70:8b:70:83:9a:63:00:ab:17:9f:be:87:6d:e8:
cf:be:57:4c:ca:fa:1f:ca:80:e2:dc:31:88:2a:05:
68:e5:75:c9:11:5e:27:22:fc:aa:04:bd:8a:63:23:
bf:bc:29:47:56:9a:7c:9f:11:12:36:f2:dc:7a:2c:
df:3e:30:77:75:cd:98:32:07:09:f3:62:46:6d:43:
39:a2:34:f8:07:ea:96:2d:4c:a6:37:c6:17:c5:6e:
ec:03:33:17:c1:e1:87:78:cc:e9:1a:b4:cf:75:66:
0e:3e:83:e8:39:f1:5d:6f:f6:34:13:fd:3a:87:27:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:4D:28:BD:3C:50:D8:11:EB:19:5E:74:29:4D:09:D5:00:2E:40
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33362e302f32342d3234203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.36.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cb:82:90:09:06:e5:9f:43:a3:10:18:6a:e3:be:98:68:ba:
6a:8b:da:d5:da:6f:ed:6f:1c:91:9e:ad:ed:97:f7:5f:9c:6f:
55:10:82:54:13:9a:3f:86:a8:ed:b0:6f:d4:99:92:68:5e:25:
6b:00:42:72:dc:4b:6f:54:94:b6:da:26:d1:91:30:d7:fa:18:
42:73:d2:f2:a0:c8:8f:57:52:78:d8:b9:f3:1c:8e:3f:6a:2e:
11:65:1d:b3:26:cb:c8:fe:7d:58:18:b0:4e:fc:05:de:1f:08:
92:ba:e5:72:d0:19:6b:ba:0e:83:76:12:03:29:dc:c0:7b:16:
c7:6c:9a:4a:51:61:89:6c:6b:a8:af:30:59:58:56:1a:b9:89:
3a:9b:bf:9e:c4:53:3c:0a:2e:13:a2:d4:12:41:28:36:1a:46:
44:dc:03:33:ba:f1:2c:cf:40:a1:59:02:11:4d:c5:15:67:c9:
cb:61:9d:1c:6d:7e:01:87:ad:4b:d2:b0:6a:0b:60:ad:ac:a8:
e0:e2:b2:ed:19:d5:24:49:1b:37:54:37:16:a5:a8:1c:5c:f1:
9d:c3:07:05:3f:c0:2b:79:02:30:d0:96:47:ea:48:52:13:2a:
fd:0c:af:58:76:84:1d:15:6e:38:04:3c:e3:95:46:a0:1f:96:
de:e0:cd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:45:23 2025 by rpki-client