Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203134363138.roa
File: 3134372e32382e33382e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: k//zqcnG7+9mgZwB/fCECNXO9Vw8lrFMwYP8b7E2IPY=
Subject key identifier: DF:6A:EF:CC:E3:AA:17:DF:40:12:43:2E:BF:A2:AC:48:2A:B9:4F:B9
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 6E3A0BB003DDF5F1FBA666F23F52CD8D03F6ECC1
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203134363138.roa
Signing time: Mon 06 Oct 2025 16:42:58 +0000
ROA not before: Mon 06 Oct 2025 16:37:58 +0000
ROA not after: Mon 05 Oct 2026 16:42:58 +0000
asID: 14618
IP address blocks: 147.28.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3a:0b:b0:03:dd:f5:f1:fb:a6:66:f2:3f:52:cd:8d:03:f6:ec:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Oct 6 16:37:58 2025 GMT
Not After : Oct 5 16:42:58 2026 GMT
Subject: CN=DF6AEFCCE3AA17DF4012432EBFA2AC482AB94FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:f8:d0:e3:11:a3:81:56:69:41:d1:3f:e1:
9d:92:7d:c5:2a:e0:4b:d0:37:03:e6:3e:dc:1c:a3:
a0:57:47:f7:cd:79:2f:d2:51:fe:27:96:67:0c:88:
d6:e8:7d:eb:7b:81:c2:db:c9:4d:ce:32:43:05:fd:
b9:01:51:7d:02:1a:50:ec:0e:7b:9a:f6:be:e5:3f:
5a:73:81:13:e0:6e:7c:ad:07:51:c8:f3:f5:88:9d:
e2:ff:ed:11:ca:07:ec:29:27:60:30:c5:b9:1c:6b:
74:7d:c5:20:e3:de:71:8e:18:6a:8e:ef:84:bb:d5:
ff:01:78:02:c7:b9:f6:40:09:69:b8:24:2d:c4:11:
c4:4e:32:9e:5d:6c:8a:ab:a2:5f:06:76:af:70:a9:
a3:f5:98:ca:04:00:9f:11:83:d7:d9:d9:17:1b:83:
d3:38:5a:46:b2:24:c4:97:da:b6:5f:29:93:1e:72:
ce:33:01:17:f3:64:71:2c:bf:04:d2:a7:1b:f5:36:
ab:db:49:ee:bf:c1:ee:48:f5:ce:ef:e4:64:7b:23:
20:e1:4c:6e:ce:e8:62:bd:f5:17:fa:9f:b5:78:4a:
0f:86:f5:3c:de:f9:8d:37:57:68:6a:34:43:82:65:
2d:ee:f6:69:f0:0a:6b:d9:8b:2f:f4:47:dc:c1:9e:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6A:EF:CC:E3:AA:17:DF:40:12:43:2E:BF:A2:AC:48:2A:B9:4F:B9
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3134372e32382e33382e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:dc:63:1a:da:d0:b5:3c:33:ba:ab:4c:02:49:21:11:83:fe:
36:65:7b:24:9f:5c:0d:d6:13:6c:60:e5:85:76:3e:44:10:ff:
5f:9c:bc:46:ae:79:8b:45:32:f3:b4:5d:6d:ad:a8:8d:79:25:
51:7e:4e:5a:44:cb:6e:c4:55:83:9a:15:4e:35:bd:fd:5d:8a:
1f:9e:b2:07:b7:87:4c:42:63:97:09:c6:cc:57:26:4c:93:72:
3b:1d:67:bd:3e:3e:4e:02:77:57:40:63:4e:42:a0:1f:66:8b:
58:ca:ff:02:8b:59:97:cb:34:5e:42:a7:dc:9f:06:bf:cd:1f:
a7:78:0a:59:0a:d8:8c:c5:99:e3:95:be:e5:fa:1f:84:11:49:
09:88:86:16:c4:7f:d2:67:f3:d7:b3:13:21:bb:53:38:04:7e:
32:06:ca:cc:ff:ee:62:3b:28:69:9f:95:8b:b7:73:26:ba:1a:
7a:5e:c6:f9:b7:57:4e:ed:af:b7:c6:34:19:c7:1e:f8:cc:fe:
57:2e:4c:a5:3e:95:dc:5e:04:8a:fa:c1:e4:48:3c:b1:f1:0c:
b9:69:bb:bf:b9:1b:c4:0c:00:29:46:b0:dd:65:91:b1:39:08:
c6:f8:a1:da:f4:6f:eb:9d:e1:99:aa:cb:1b:fc:22:50:af:98:
18:3f:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:02 2025 by rpki-client