Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203136353039.roa
File: 326130323a356265303a363a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: PvShYjFAKeIuv8sP0AAp/4hixWwYy4DgJkPHz8Ktt4g=
Subject key identifier: 8F:25:6B:94:1A:ED:FC:1C:B5:E7:61:F3:22:7D:91:C5:E5:78:8A:61
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 5B95626EB8AC9B077E110873A48DFC9DBFA71D20
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203136353039.roa
Signing time: Thu 19 Jun 2025 10:58:46 +0000
ROA not before: Thu 19 Jun 2025 10:53:46 +0000
ROA not after: Thu 18 Jun 2026 10:58:46 +0000
asID: 16509
IP address blocks: 2a02:5be0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 06:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:95:62:6e:b8:ac:9b:07:7e:11:08:73:a4:8d:fc:9d:bf:a7:1d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 19 10:53:46 2025 GMT
Not After : Jun 18 10:58:46 2026 GMT
Subject: CN=8F256B941AEDFC1CB5E761F3227D91C5E5788A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:0f:b3:49:a3:c2:2b:a2:33:e8:d1:d3:38:
99:68:14:02:1c:3e:5b:08:24:49:ae:8e:47:12:06:
e3:9c:78:8b:22:5d:d6:16:84:1b:5d:51:23:68:06:
dd:2a:15:ec:c5:ff:23:f1:9b:36:69:13:09:06:f3:
20:13:14:7c:95:b0:47:db:1e:f4:1f:97:01:3f:5e:
9d:10:98:44:31:43:a8:47:c9:7a:72:bc:5c:29:1a:
b9:53:ac:44:90:db:63:9a:3a:2c:7e:3b:26:99:10:
e8:41:cf:39:3c:f1:b8:33:70:68:8c:21:70:cd:43:
7e:95:e2:d5:79:24:40:6f:d2:bc:ef:61:ed:09:af:
39:fd:3b:e6:71:b2:17:ee:f5:9a:3c:c9:33:c0:1f:
3e:a7:29:60:4c:03:88:90:ce:0e:04:d5:ff:6e:5d:
a8:61:e7:8a:ba:a7:f7:8a:08:ae:9a:68:3a:61:b0:
35:9c:11:10:51:59:11:26:77:b7:6d:b1:0e:34:ed:
5a:1a:bb:95:65:3b:5a:c9:39:46:86:12:a7:e3:0e:
d8:c5:7a:6e:83:8e:68:5b:c8:ca:97:fc:a5:42:35:
2a:17:06:e0:ed:80:d6:7a:fe:14:50:f4:ad:4c:c6:
ea:8c:e8:71:e7:a2:8d:5d:8d:f6:04:ce:1c:16:7e:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:6B:94:1A:ED:FC:1C:B5:E7:61:F3:22:7D:91:C5:E5:78:8A:61
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:6::/48
Signature Algorithm: sha256WithRSAEncryption
0a:4d:5d:20:34:ef:74:fc:b1:28:d4:27:d8:dd:23:38:53:7f:
8e:12:93:58:6e:91:5c:ae:db:5a:72:68:e1:fd:81:9e:e7:06:
9d:0a:48:bf:c8:20:db:18:80:b9:0f:ea:8b:61:dc:5f:ad:b4:
d8:2f:55:1e:77:a6:f5:e7:7d:f1:d2:00:6b:c7:18:60:00:46:
7a:54:a8:c9:e0:70:ff:9f:1b:2c:d1:88:7f:a4:b5:bb:b4:f4:
92:1e:1c:15:8f:9f:cb:33:21:66:bf:51:be:dc:70:b6:51:c3:
d1:eb:70:2d:54:b8:c0:50:57:31:a2:86:51:9c:71:14:9b:79:
50:d3:ff:bc:f3:65:4e:a0:ab:d8:32:c3:58:8c:a9:bb:07:e9:
c4:98:b8:0c:3b:21:2a:db:95:a7:3f:db:0c:66:92:6a:7c:23:
9f:a4:47:60:94:bb:9e:a9:eb:f5:a0:7e:c3:6f:8b:c3:a9:f9:
79:2b:38:f2:5a:94:34:ec:7e:82:3b:75:44:52:fb:6f:d9:50:
fe:19:e6:c4:fa:b7:77:fc:f3:8b:d1:f8:70:7e:8f:e6:01:a6:
98:4c:de:62:3d:e6:c1:5d:15:9e:f0:fd:f6:f9:89:77:28:5e:
8d:89:b0:4c:26:b5:d1:4b:1f:be:b5:d2:ad:6f:f3:34:8c:0c:
03:16:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:16:11 2025 by rpki-client