Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203136353039.roa
File: 326130323a356265303a383a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: hK3c6LlfgQTQZ/ZbNVMIRUqZTElYutcmu+Myl3rdEDM=
Subject key identifier: 6D:46:CD:E5:E5:7B:EA:D3:A6:28:49:ED:06:D7:6E:20:1F:9E:89:2D
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 2793B2355512D5B5710EF1119A3B736F62F9D5E0
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203136353039.roa
Signing time: Mon 06 Oct 2025 17:43:01 +0000
ROA not before: Mon 06 Oct 2025 17:38:01 +0000
ROA not after: Mon 05 Oct 2026 17:43:01 +0000
asID: 16509
IP address blocks: 2a02:5be0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:93:b2:35:55:12:d5:b5:71:0e:f1:11:9a:3b:73:6f:62:f9:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Oct 6 17:38:01 2025 GMT
Not After : Oct 5 17:43:01 2026 GMT
Subject: CN=6D46CDE5E57BEAD3A62849ED06D76E201F9E892D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:6b:8a:2e:b1:a9:06:5a:7a:62:5c:9b:8e:
77:06:00:80:a9:c3:33:f0:41:45:fe:17:e4:ca:19:
2f:1c:7f:a6:0e:37:37:30:6c:c0:1e:69:44:af:8e:
6b:c7:15:6b:cb:f5:1e:98:db:0d:39:07:e7:bf:4d:
a3:d6:cb:c6:75:db:5f:1c:c5:0f:8a:e9:d5:d7:ec:
0c:d8:bb:71:07:8a:ce:0f:b7:46:91:8e:6c:92:bf:
d9:3f:23:01:6d:ee:e7:83:16:a9:9d:b7:cf:2d:17:
8c:51:28:cb:6e:f6:43:44:63:86:75:b3:5c:2b:6e:
0f:25:dd:39:93:e7:d2:6b:ad:e2:72:fd:79:07:48:
29:c5:a7:26:59:18:19:86:0c:98:6b:2e:dc:f3:39:
05:9d:f7:b1:76:ba:d8:33:27:0e:2a:7d:ef:6a:a0:
89:9e:11:8e:20:15:21:fd:f2:cd:d8:d9:38:41:bc:
95:c0:ce:3f:89:2c:1c:5c:aa:2d:29:9f:37:5e:51:
90:65:5f:11:5c:f8:3a:00:26:22:19:09:89:ab:44:
34:94:04:1b:06:bf:55:8e:0e:9a:b2:e2:9b:da:b1:
4e:e1:ad:96:ac:8f:a9:b2:a5:3a:3a:01:54:4c:06:
03:25:9c:dc:19:7a:76:a9:f2:62:d3:73:28:ad:24:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:46:CD:E5:E5:7B:EA:D3:A6:28:49:ED:06:D7:6E:20:1F:9E:89:2D
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:8::/48
Signature Algorithm: sha256WithRSAEncryption
90:dc:e4:c7:f7:78:5a:c9:3a:49:3b:73:d1:68:be:83:e6:2c:
ad:81:2c:bb:16:3b:a9:89:f5:2e:6d:00:af:4f:66:fa:2c:0d:
ea:f0:4a:9c:23:55:e8:b7:93:72:7f:4a:99:a4:0f:bd:e1:c9:
0c:25:a8:fb:39:24:83:d5:af:31:3b:0a:fc:e1:37:2d:47:7f:
53:93:3e:b9:64:b0:05:30:32:28:fa:94:7e:52:d8:97:b6:e0:
18:17:a3:57:6f:3c:3e:74:d6:b8:92:00:4d:b3:31:6d:14:08:
e4:0b:9a:92:b3:80:68:32:f5:05:f9:3d:cd:af:87:e6:58:77:
b9:61:21:89:9d:7b:70:00:56:eb:8d:b2:79:f1:59:3b:6b:a0:
c9:f6:db:5a:a0:5d:96:57:42:75:10:1c:7f:8a:89:78:33:fe:
b9:f2:42:6e:2a:54:09:42:f4:3e:2c:e7:2f:c7:05:9e:98:dd:
76:40:85:b9:af:cc:e8:d4:ec:8d:3f:2a:d2:92:f3:ca:42:b6:
f4:6e:4b:26:d9:5c:ee:8a:d0:20:a2:d7:ad:a6:20:29:38:e3:
8b:06:5c:ae:a3:e9:62:4f:c9:92:98:18:c4:85:18:ac:14:1f:
23:fa:f8:5c:d7:bc:bf:96:db:60:2d:6c:f8:3b:59:e1:10:24:
ce:a5:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:42 2025 by rpki-client