Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203337323335.roa
File: 326130323a356265303a383a3a2f34382d3438203d3e203337323335.roa (raw, json)
Hash identifier: fvt4V1+XqB0g+P4MjVCxw+QHK/NwoivlONiw0xma+CQ=
Subject key identifier: 07:01:27:BA:B0:B7:96:4D:8C:0B:19:F9:C4:5F:53:60:AC:82:B0:00
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 1C169A6E6C8A727D7372FAF45B8E01B9B98F3129
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203337323335.roa
Signing time: Mon 06 Oct 2025 17:43:01 +0000
ROA not before: Mon 06 Oct 2025 17:38:01 +0000
ROA not after: Mon 05 Oct 2026 17:43:01 +0000
asID: 37235
IP address blocks: 2a02:5be0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:16:9a:6e:6c:8a:72:7d:73:72:fa:f4:5b:8e:01:b9:b9:8f:31:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Oct 6 17:38:01 2025 GMT
Not After : Oct 5 17:43:01 2026 GMT
Subject: CN=070127BAB0B7964D8C0B19F9C45F5360AC82B000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:a3:b3:d0:a7:e8:d1:62:ab:25:c1:5e:6c:
90:0f:7e:32:02:61:f8:24:af:2b:95:b3:a9:ae:0d:
8a:34:95:97:66:07:5f:0f:41:9b:b9:86:41:9f:a3:
0c:44:d9:83:20:a1:1d:87:1f:90:e5:99:92:03:45:
92:a0:34:fd:5e:2d:df:63:b8:85:32:9d:ca:cb:e1:
ec:f1:05:13:73:f2:4f:60:0e:67:81:dd:7c:86:0e:
9f:88:00:a7:14:97:69:91:50:3d:5d:80:aa:4f:8d:
6a:9d:b5:12:6b:26:64:89:2e:dc:34:3f:be:8d:e3:
6a:65:51:d5:9a:b8:50:87:a7:02:23:51:52:7a:84:
3e:05:04:dd:16:19:21:05:57:8c:c4:61:2c:77:3a:
51:3b:d3:e7:84:b1:d2:fa:41:87:7e:17:86:ca:39:
b7:8a:3c:d8:ec:61:6d:f1:b2:c4:a9:cd:bc:5f:9d:
27:ad:c1:f2:08:2b:0f:ee:62:64:08:7c:73:ba:a6:
ba:ac:52:f8:1e:88:1f:ad:38:cb:7b:88:e5:4a:20:
62:89:13:cf:e3:4c:a4:f3:68:60:a0:11:ea:73:3a:
ac:c5:26:65:fe:99:bd:1e:55:4e:a8:42:26:45:bd:
84:51:67:09:8b:0c:b2:19:c9:33:4d:0d:b0:ff:9d:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:27:BA:B0:B7:96:4D:8C:0B:19:F9:C4:5F:53:60:AC:82:B0:00
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:8::/48
Signature Algorithm: sha256WithRSAEncryption
2d:20:9f:02:ef:16:59:81:22:6a:aa:dd:bf:0f:0c:9a:83:7f:
e8:f2:5b:3a:81:fa:b2:86:c3:40:59:35:a1:d6:1e:46:47:4d:
a5:89:e5:b6:f6:c6:02:8c:b2:69:af:d0:d8:a5:8a:e0:6c:5b:
18:ba:51:84:9a:64:ff:da:4b:68:8a:20:a5:30:7f:e1:c8:04:
2f:66:db:05:69:2a:1f:26:f3:57:74:52:a5:35:9c:90:6a:1b:
b8:4d:c3:de:ac:9d:8a:96:83:d3:71:37:f9:19:9a:a0:b6:39:
6c:9b:2d:d7:9e:bc:09:2a:2c:a6:ed:9b:65:0d:6a:c6:cf:ff:
af:2c:a9:76:83:65:05:c3:ff:71:88:57:a0:cb:cc:6e:52:55:
6b:44:c1:9b:7d:e9:ff:31:f6:f7:0d:a8:4c:16:0b:46:48:19:
34:a4:5a:9f:a7:8e:3a:fa:31:93:bb:85:6f:b9:26:df:04:b1:
25:77:86:aa:77:80:dc:08:4a:be:79:65:fc:5a:a4:c7:86:b1:
6b:e8:2a:6c:13:aa:5c:d0:a8:6c:dc:38:46:d8:8e:d3:4a:4d:
c1:3f:1d:3d:fd:29:b5:39:05:35:ff:d3:d3:b6:f3:35:4b:ae:
5f:ef:ef:19:19:41:7f:7d:85:16:25:2c:58:5d:35:ce:4f:21:
05:c1:92:bd
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUHBaabmyKcn1zcvr0W44BubmPMSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNTEwMDYxNzM4MDFaFw0yNjEwMDUxNzQzMDFaMDMxMTAvBgNV
BAMTKDA3MDEyN0JBQjBCNzk2NEQ4QzBCMTlGOUM0NUY1MzYwQUM4MkIwMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZKOz0Kfo0WKrJcFebJAPfjIC
YfgkryuVs6muDYo0lZdmB18PQZu5hkGfowxE2YMgoR2HH5DlmZIDRZKgNP1eLd9j
uIUyncrL4ezxBRNz8k9gDmeB3XyGDp+IAKcUl2mRUD1dgKpPjWqdtRJrJmSJLtw0
P76N42plUdWauFCHpwIjUVJ6hD4FBN0WGSEFV4zEYSx3OlE70+eEsdL6QYd+F4bK
ObeKPNjsYW3xssSpzbxfnSetwfIIKw/uYmQIfHO6prqsUvgeiB+tOMt7iOVKIGKJ
E8/jTKTzaGCgEepzOqzFJmX+mb0eVU6oQiZFvYRRZwmLDLIZyTNNDbD/nWMHAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUBwEnurC3lk2MCxn5xF9TYKyCsAAwHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUH
MAuGcXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzMvMzI2MTMwMzIzYTM1NjI2NTMwM2EzODNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDMzMzczMjMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqAlvgAAgwDQYJKoZIhvcNAQEL
BQADggEBAC0gnwLvFlmBImqq3b8PDJqDf+jyWzqB+rKGw0BZNaHWHkZHTaWJ5bb2
xgKMsmmv0NiliuBsWxi6UYSaZP/aS2iKIKUwf+HIBC9m2wVpKh8m81d0UqU1nJBq
G7hNw96snYqWg9NxN/kZmqC2OWybLdeevAkqLKbtm2UNasbP/68sqXaDZQXD/3GI
V6DLzG5SVWtEwZt96f8x9vcNqEwWC0ZIGTSkWp+njjr6MZO7hW+5Jt8EsSV3hqp3
gNwISr55ZfxapMeGsWvoKmwTqlzQqGzcOEbYjtNKTcE/HT39KbU5BTX/09O28zVL
rl/v7xkZQX99hRYlLFhdNc5PIQXBkr0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:53 2025 by rpki-client