Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33372e302f32342d3234203d3e203136353039.roa
File: 3134372e32382e33372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: 4Y5WLgxWvrIss1qOqvjTYCGtZyUEPMcL8V23njY2VTU=
Subject key identifier: 80:C7:7D:8F:4D:8C:E6:72:37:9D:D9:BA:15:F0:3D:89:C4:F3:F5:E3
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 2852E70E97FFE3E83810F1C67334886C2D884A9E
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33372e302f32342d3234203d3e203136353039.roa
Signing time: Wed 18 Jun 2025 13:58:21 +0000
ROA not before: Wed 18 Jun 2025 13:53:21 +0000
ROA not after: Wed 17 Jun 2026 13:58:21 +0000
asID: 16509
IP address blocks: 147.28.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:52:e7:0e:97:ff:e3:e8:38:10:f1:c6:73:34:88:6c:2d:88:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 18 13:53:21 2025 GMT
Not After : Jun 17 13:58:21 2026 GMT
Subject: CN=80C77D8F4D8CE672379DD9BA15F03D89C4F3F5E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:48:2d:4d:6f:55:fd:76:4c:ee:27:b7:1c:
9d:ee:9a:fe:41:e2:2d:97:63:24:05:7b:20:c2:f8:
9b:0d:b0:50:87:55:89:8d:bf:86:71:25:d1:bd:a6:
5d:72:0a:bf:43:7d:e2:65:1e:b1:03:64:31:84:63:
a7:7f:c8:ef:c4:77:c9:d7:4c:44:1c:34:3b:00:71:
cc:60:69:38:4d:65:78:d0:d9:33:8d:d1:66:32:74:
a7:ec:5f:96:a0:6f:f9:72:69:30:81:df:86:d0:f4:
f6:37:d1:83:a7:00:ae:b1:96:bd:41:8b:57:a4:86:
29:f0:60:b1:67:4e:cd:c4:a1:f8:fc:c6:fe:c7:6f:
d6:4d:53:ff:cc:10:0d:89:43:34:52:5e:ca:c8:4f:
b5:87:76:e2:1a:ea:6b:80:81:99:44:30:db:37:4b:
7c:50:f2:84:17:4c:16:77:c6:9e:69:e8:09:9e:e5:
22:75:1d:7d:42:aa:e3:b2:6e:0a:8c:1a:16:fd:76:
42:d3:7d:c6:ba:6e:a5:21:3c:17:74:17:f6:0f:97:
b3:33:1f:08:ca:cd:e7:14:73:8a:37:b2:5f:50:5c:
e1:64:28:58:36:2c:33:37:eb:e5:07:dd:91:1f:e1:
4f:29:1e:8e:88:1d:37:2f:c7:1f:62:ca:5b:c8:ae:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:7D:8F:4D:8C:E6:72:37:9D:D9:BA:15:F0:3D:89:C4:F3:F5:E3
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33372e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:36:b4:ba:f6:6c:3d:6d:12:26:f3:0c:e1:1a:c4:06:29:1f:
86:94:d9:f2:62:00:77:48:6f:bc:1d:d2:8b:03:bf:d2:7a:a9:
cb:14:10:9d:05:f3:1f:ce:33:93:35:d4:2a:04:4d:d5:d2:36:
09:c3:20:3c:a3:78:f2:5b:25:28:d5:81:af:9c:ee:ab:5c:6a:
9a:c5:3b:ba:b7:9a:93:51:7b:29:21:d6:c1:0c:62:7b:3a:6e:
26:6e:ba:87:41:50:47:b5:1c:90:10:19:1b:7d:67:20:5e:0f:
0a:24:53:28:3d:37:3b:e1:a0:b6:f4:3b:43:af:2b:45:1f:db:
20:76:6f:17:ff:74:f8:7b:af:38:ac:de:92:46:cb:a3:40:48:
53:34:7d:3e:d1:4a:b4:b5:ee:65:67:75:48:4c:90:66:26:51:
2b:0c:5a:3e:40:2e:42:8d:2f:f1:d9:c0:aa:37:3d:c8:c2:b5:
5b:af:4a:dd:c6:e8:76:0c:1f:88:50:2f:13:0c:f9:75:72:b9:
e2:02:03:2d:2b:bd:3d:88:2c:54:7d:16:74:e0:f6:b0:88:e0:
c9:e4:d3:18:08:cb:36:35:82:da:af:40:c1:03:3b:97:71:41:
85:13:51:29:90:40:30:83:66:d9:c5:e6:59:3a:e6:e9:83:6d:
08:85:8d:6a
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUKFLnDpf/4+g4EPHGczSIbC2ISp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNTA2MTgxMzUzMjFaFw0yNjA2MTcxMzU4MjFaMDMxMTAvBgNV
BAMTKDgwQzc3RDhGNEQ4Q0U2NzIzNzlERDlCQTE1RjAzRDg5QzRGM0Y1RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNkgtTW9V/XZM7ie3HJ3umv5B
4i2XYyQFeyDC+JsNsFCHVYmNv4ZxJdG9pl1yCr9DfeJlHrEDZDGEY6d/yO/Ed8nX
TEQcNDsAccxgaThNZXjQ2TON0WYydKfsX5agb/lyaTCB34bQ9PY30YOnAK6xlr1B
i1ekhinwYLFnTs3Eofj8xv7Hb9ZNU//MEA2JQzRSXsrIT7WHduIa6muAgZlEMNs3
S3xQ8oQXTBZ3xp5p6Ame5SJ1HX1CquOybgqMGhb9dkLTfca6bqUhPBd0F/YPl7Mz
HwjKzecUc4o3sl9QXOFkKFg2LDM36+UH3ZEf4U8pHo6IHTcvxx9iylvIrtLHAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUgMd9j02M5nI3ndm6FfA9icTz9eMwHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgYkGCCsGAQUFBwELBH0wezB5BggrBgEFBQcw
C4ZtcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5
ODAwMDAvMy8zMTM0MzcyZTMyMzgyZTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkxwlMA0GCSqGSIb3DQEBCwUAA4IBAQB+
NrS69mw9bRIm8wzhGsQGKR+GlNnyYgB3SG+8HdKLA7/SeqnLFBCdBfMfzjOTNdQq
BE3V0jYJwyA8o3jyWyUo1YGvnO6rXGqaxTu6t5qTUXspIdbBDGJ7Om4mbrqHQVBH
tRyQEBkbfWcgXg8KJFMoPTc74aC29DtDrytFH9sgdm8X/3T4e684rN6SRsujQEhT
NH0+0Uq0te5lZ3VITJBmJlErDFo+QC5CjS/x2cCqNz3IwrVbr0rdxuh2DB+IUC8T
DPl1crniAgMtK709iCxUfRZ04PawiODJ5NMYCMs2NYLar0DBAzuXcUGFE1EpkEAw
g2bZxeZZOubpg20IhY1q
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:44:08 2025 by rpki-client