Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a373a3a2f34382d3438203d3e203134363138.roa
File: 326130323a356265303a373a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: NAt7Uf2lqfQYKZ4R+OA5pI7tagqDCntMT31IEimFokM=
Subject key identifier: 85:74:4F:DA:5B:98:15:2B:A9:D2:4B:D9:7F:64:2B:D1:70:44:EE:4D
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 3B37D866275CA51CE769CE638D9CE49152549766
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a373a3a2f34382d3438203d3e203134363138.roa
Signing time: Thu 19 Jun 2025 10:58:46 +0000
ROA not before: Thu 19 Jun 2025 10:53:46 +0000
ROA not after: Thu 18 Jun 2026 10:58:46 +0000
asID: 14618
IP address blocks: 2a02:5be0:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:37:d8:66:27:5c:a5:1c:e7:69:ce:63:8d:9c:e4:91:52:54:97:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 19 10:53:46 2025 GMT
Not After : Jun 18 10:58:46 2026 GMT
Subject: CN=85744FDA5B98152BA9D24BD97F642BD17044EE4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:19:02:00:8e:49:95:91:3f:34:5e:1a:9e:
c3:8a:a1:86:a5:b7:b3:a9:fb:a8:a3:e4:2a:2e:b1:
09:26:96:af:f9:39:df:a4:8f:45:f8:67:3a:40:f8:
46:de:fe:54:1a:94:b3:f6:95:97:64:43:b0:ca:42:
bc:a6:fd:76:dc:35:01:80:9b:ac:c4:89:b5:1c:12:
1a:fe:a8:ba:39:60:2c:3e:75:c8:6b:2b:41:fe:a8:
57:5e:09:01:76:8f:26:c3:78:ed:52:63:1e:0c:d9:
87:27:9a:3b:0a:a4:7d:2c:6b:20:60:7f:d6:fa:0d:
da:b3:ad:23:6d:5e:cb:d5:f5:8f:77:a3:64:97:83:
85:ad:fe:a6:9d:8d:5a:90:bd:f4:f7:24:e2:c5:6e:
e8:b4:d7:53:4d:ae:57:65:dc:03:64:34:22:f2:65:
93:1d:c9:e4:33:da:7c:16:84:42:60:93:ef:1d:18:
6c:87:1e:bf:f0:27:24:51:46:38:00:d7:ca:1a:5c:
88:8b:14:1e:6c:da:e5:89:f7:ec:90:a1:86:1a:df:
64:8b:7b:de:52:6c:bc:b5:6c:d9:5e:e4:ea:79:d9:
41:1d:d0:f8:c3:23:8d:f0:14:ef:90:11:41:57:9c:
9e:97:cc:51:e6:95:50:0a:a1:e1:ab:20:03:57:90:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:74:4F:DA:5B:98:15:2B:A9:D2:4B:D9:7F:64:2B:D1:70:44:EE:4D
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a373a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:7::/48
Signature Algorithm: sha256WithRSAEncryption
07:fd:62:c8:5d:c2:d3:84:27:e0:90:22:bf:6b:3f:91:e1:ed:
3a:cf:98:1c:06:53:00:82:cb:bf:0d:b5:ef:e3:1e:4c:0a:4d:
2c:71:8a:ea:46:bf:bd:32:95:13:8f:04:dd:81:55:e2:08:ff:
e8:a2:8e:b1:9a:16:90:28:61:b5:b6:12:70:96:01:ed:96:db:
d2:c5:78:d7:02:04:30:71:e4:a5:40:d1:ed:90:30:9d:f5:6e:
da:07:e0:77:23:64:ea:02:1d:03:a2:e9:e1:3c:d6:1a:0c:64:
0c:b5:e0:dd:27:39:92:46:7f:12:c6:9e:a7:22:23:2e:5d:a6:
a1:03:31:13:c5:95:1b:ba:4b:05:a8:01:57:19:19:21:be:9e:
3c:1b:58:32:76:92:5c:bf:79:f4:4e:80:ae:10:ad:4f:1a:5f:
92:59:d5:f8:47:c6:91:1b:16:a8:6e:b5:ff:e2:bb:f9:34:55:
d7:6f:6e:f7:4e:cd:f1:bf:90:3c:04:3e:5a:7c:7d:64:15:03:
ea:83:3f:01:ba:9a:13:a7:25:66:2d:c4:62:82:8b:21:4b:26:
1f:79:ca:94:32:78:82:40:20:0d:b6:d6:14:12:7d:b1:7f:ec:
c5:b5:fc:ee:e9:88:26:6b:e0:3f:ce:a7:de:f0:a9:9b:43:88:
b8:70:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:16:37 2025 by rpki-client