Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203134363138.roa
File: 326130323a356265303a363a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: OYt6rMZM6XJBt60kcHk/6Quzn/wAX2bUMnLHa2W2hyw=
Subject key identifier: 39:86:F6:14:1E:44:43:13:B0:67:7D:E9:03:A3:05:2E:CD:55:3C:7D
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 404AA73C1ADCF555734B0FC76DF4F49160692300
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203134363138.roa
Signing time: Thu 19 Jun 2025 10:58:46 +0000
ROA not before: Thu 19 Jun 2025 10:53:46 +0000
ROA not after: Thu 18 Jun 2026 10:58:46 +0000
asID: 14618
IP address blocks: 2a02:5be0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 22:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4a:a7:3c:1a:dc:f5:55:73:4b:0f:c7:6d:f4:f4:91:60:69:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 19 10:53:46 2025 GMT
Not After : Jun 18 10:58:46 2026 GMT
Subject: CN=3986F6141E444313B0677DE903A3052ECD553C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:6d:5c:1e:57:96:33:2b:0b:9e:42:01:30:
c3:ba:18:5c:fb:38:59:fe:37:23:90:d9:9f:b6:b3:
bf:fa:96:4f:8f:a1:99:00:2c:fb:96:04:7c:0a:1a:
de:e9:da:b7:dc:d2:69:aa:26:e8:f4:5d:6d:c0:c9:
49:a2:94:5c:dd:f5:50:0b:7b:73:fd:49:5d:b8:f3:
82:9d:a6:72:86:f8:61:0d:49:c0:bb:b2:00:6e:13:
e9:52:1b:e9:aa:c8:10:32:7f:30:2e:fa:fa:7b:f9:
e0:96:6f:db:28:75:96:48:bb:7c:72:0e:38:de:7f:
8c:7a:93:db:c5:f7:de:fb:3a:27:2c:24:13:eb:c8:
be:10:a4:a6:a6:49:3f:6f:47:dc:00:7e:57:70:37:
58:80:b1:85:01:db:3a:b9:b0:c2:f4:a4:eb:d1:84:
58:22:13:b3:35:00:b1:cc:54:cf:31:ea:b1:28:10:
be:c1:a6:a2:b4:fe:da:65:4a:25:91:f6:08:37:89:
8a:4f:a7:69:06:14:50:ac:e7:fa:eb:e9:98:cd:bc:
fa:fe:6f:55:e4:71:f8:51:ca:db:c6:04:08:3a:4f:
6f:d6:a5:2c:55:b2:79:de:46:71:f7:6f:db:15:3e:
83:13:a3:cd:9f:2c:d2:b8:c8:39:13:21:47:c5:be:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:86:F6:14:1E:44:43:13:B0:67:7D:E9:03:A3:05:2E:CD:55:3C:7D
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:6::/48
Signature Algorithm: sha256WithRSAEncryption
29:a9:7a:c4:20:81:1d:1d:3b:53:25:3f:f4:5a:56:45:b7:c7:
c3:65:e3:d0:ee:ed:77:87:d6:27:49:e3:4a:6c:86:98:67:1f:
d6:aa:98:98:bd:9c:9d:8c:dc:6a:7d:59:e7:e7:5f:11:5d:4e:
af:33:c2:67:26:32:4c:a3:d3:14:f9:95:72:72:a6:bd:eb:d6:
5b:84:b3:33:ac:b2:0f:3c:c0:b3:81:b4:1b:81:f9:95:12:3b:
6e:10:be:21:a3:e4:3f:d9:1d:1c:16:c4:a4:d9:05:b8:ab:b2:
21:a1:ba:e7:b3:93:8b:44:df:57:83:cb:ad:86:22:f5:86:b2:
2a:9c:8b:ab:80:83:3d:e6:f3:49:57:55:b2:90:a8:1e:b1:9a:
e5:96:16:c5:64:1c:72:54:92:f0:c9:f5:bc:24:0d:3b:c1:12:
fa:5f:4a:26:d5:3e:75:18:9c:4d:a4:82:a1:68:e6:b8:80:45:
62:b4:36:49:86:f0:54:91:78:79:e9:eb:ba:ae:03:6d:9e:b3:
96:5e:78:48:fe:98:04:13:83:92:d4:cb:0d:c5:c5:d1:87:34:
5e:3d:49:8d:63:06:a1:de:22:18:0d:c5:78:bf:a3:96:21:0d:
54:d0:cd:04:ae:ae:95:c6:55:ff:a1:fd:95:2f:8e:b0:eb:1c:
6a:fc:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:19:19 2025 by rpki-client