Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203134363138.roa
File: 326130323a356265303a383a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: 33ZwpuC7/zqnlh4J8myko5jJo+o33R5YkkWWSan3Fok=
Subject key identifier: EC:C4:83:A4:07:AD:0E:3A:EA:5F:FC:D4:E3:A1:CD:9D:BD:7A:15:D2
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 232ACAF9DB0E67117358D823C0D56687715ABF78
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203134363138.roa
Signing time: Mon 06 Oct 2025 17:43:01 +0000
ROA not before: Mon 06 Oct 2025 17:38:01 +0000
ROA not after: Mon 05 Oct 2026 17:43:01 +0000
asID: 14618
IP address blocks: 2a02:5be0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2a:ca:f9:db:0e:67:11:73:58:d8:23:c0:d5:66:87:71:5a:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Oct 6 17:38:01 2025 GMT
Not After : Oct 5 17:43:01 2026 GMT
Subject: CN=ECC483A407AD0E3AEA5FFCD4E3A1CD9DBD7A15D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:88:13:bf:8f:18:bd:59:f5:41:d1:df:2c:
a5:09:ab:63:87:9c:5e:b5:e1:a0:63:e4:68:34:ce:
94:30:40:8f:ee:00:2a:d4:c7:60:9b:4a:b4:ef:95:
d3:05:91:ae:c8:3b:e8:fc:60:a6:3f:d6:91:e2:e4:
b3:65:7a:bd:37:0b:84:8f:4b:4b:b0:47:2b:5f:94:
7b:3a:a7:1b:fd:fe:bf:39:84:53:86:94:55:ef:4a:
bb:1f:3a:4c:09:38:b0:d4:2d:e5:8b:e7:b0:1d:ce:
b3:87:90:b7:ed:da:07:39:c1:c8:55:02:13:5d:61:
44:0e:07:cc:98:16:d3:1b:92:c4:a0:dd:72:63:40:
ae:16:c8:c1:c1:5d:56:34:a5:07:9c:f9:23:d7:d6:
46:87:73:11:8f:82:9f:62:96:d2:53:36:b2:ac:8a:
90:e2:c1:47:1d:b2:d8:9d:06:e5:00:30:03:00:be:
ce:17:60:d4:6d:e5:57:59:e6:0a:74:29:87:ac:f4:
50:10:63:de:af:1b:84:87:dc:39:47:e3:b5:43:56:
fa:1b:39:6a:fe:56:db:ee:03:cd:5d:e1:70:1a:d5:
af:ba:49:a1:7b:e6:77:1e:ab:35:c1:3f:6f:36:f6:
98:70:a4:e7:40:c1:26:d8:da:0f:b8:6e:90:50:f5:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:83:A4:07:AD:0E:3A:EA:5F:FC:D4:E3:A1:CD:9D:BD:7A:15:D2
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:8::/48
Signature Algorithm: sha256WithRSAEncryption
90:4c:a6:c8:1c:28:10:be:ba:89:94:0f:3c:d6:14:5b:c5:cd:
76:c7:c3:20:5e:ca:4d:f3:4c:a1:1d:d3:9c:a0:13:f7:8c:c7:
bd:dc:fe:47:2a:e9:dd:29:16:60:ef:3a:b9:43:d2:bc:e8:53:
84:c0:3e:ad:29:dc:fe:c6:b8:b2:b9:4c:1d:6b:ec:2d:4a:84:
3a:be:71:10:00:a3:c1:0e:e8:ab:6b:e7:16:57:16:a5:a3:c0:
d8:11:0d:63:c7:21:2c:af:36:86:2d:a6:ed:48:86:7c:1e:3e:
3d:4d:df:79:4b:18:aa:7b:73:9e:ec:f5:11:11:57:a6:8c:e2:
67:8b:22:d4:29:cf:1f:4f:03:8f:4a:87:ee:8a:3d:f1:08:5d:
59:65:5c:18:fb:1d:13:e2:d5:32:fb:f9:0d:2d:7d:4d:91:f1:
fd:d9:67:cd:55:5e:c5:fc:b2:1e:fa:7b:81:05:66:2b:66:97:
90:71:8e:f5:b9:44:c9:44:a3:fb:d0:88:cc:31:b7:b0:c7:25:
41:0d:e4:f7:b6:7d:2b:22:95:8f:43:05:e9:ae:6b:1e:58:3b:
2e:00:32:99:df:ea:72:d1:ee:91:46:a7:78:a7:f7:53:69:9c:
1b:9e:fb:01:c8:90:65:3c:5f:f2:33:60:ea:a9:df:5b:b8:fb:
21:54:0a:cf
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUIyrK+dsOZxFzWNgjwNVmh3Fav3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNTEwMDYxNzM4MDFaFw0yNjEwMDUxNzQzMDFaMDMxMTAvBgNV
BAMTKEVDQzQ4M0E0MDdBRDBFM0FFQTVGRkNENEUzQTFDRDlEQkQ3QTE1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchYgTv48YvVn1QdHfLKUJq2OH
nF614aBj5Gg0zpQwQI/uACrUx2CbSrTvldMFka7IO+j8YKY/1pHi5LNler03C4SP
S0uwRytflHs6pxv9/r85hFOGlFXvSrsfOkwJOLDULeWL57AdzrOHkLft2gc5wchV
AhNdYUQOB8yYFtMbksSg3XJjQK4WyMHBXVY0pQec+SPX1kaHcxGPgp9iltJTNrKs
ipDiwUcdstidBuUAMAMAvs4XYNRt5VdZ5gp0KYes9FAQY96vG4SH3DlH47VDVvob
OWr+VtvuA81d4XAa1a+6SaF75nceqzXBP2829phwpOdAwSbY2g+4bpBQ9Sa9AgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQU7MSDpAetDjrqX/zU46HNnb16FdIwHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUH
MAuGcXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzMvMzI2MTMwMzIzYTM1NjI2NTMwM2EzODNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDMxMzQzNjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqAlvgAAgwDQYJKoZIhvcNAQEL
BQADggEBAJBMpsgcKBC+uomUDzzWFFvFzXbHwyBeyk3zTKEd05ygE/eMx73c/kcq
6d0pFmDvOrlD0rzoU4TAPq0p3P7GuLK5TB1r7C1KhDq+cRAAo8EO6Ktr5xZXFqWj
wNgRDWPHISyvNoYtpu1IhnwePj1N33lLGKp7c57s9RERV6aM4meLItQpzx9PA49K
h+6KPfEIXVllXBj7HRPi1TL7+Q0tfU2R8f3ZZ81VXsX8sh76e4EFZitml5BxjvW5
RMlEo/vQiMwxt7DHJUEN5Pe2fSsilY9DBemuax5YOy4AMpnf6nLR7pFGp3in91Np
nBue+wHIkGU8X/IzYOqp31u4+yFUCs8=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:36 2025 by rpki-client