Route Origin Authorization
$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d313238203d3e2031303239.roa
File: 323430363a343434303a3a2f34342d313238203d3e2031303239.roa (raw, json)
Hash identifier: fb5NDZbCd/XUB12rINgdhjT9rwn3T/pzjFH1ldtPyco=
Subject key identifier: 26:8A:2A:A9:77:7C:F5:09:C6:8B:A0:CC:4F:2F:45:17:04:4B:7D:89
Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial: 6A64C4D127C2C5C3CCC1D5B8C9FFCE945088ADCE
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d313238203d3e2031303239.roa
Signing time: Wed 18 Feb 2026 17:00:00 +0000
ROA not before: Wed 18 Feb 2026 16:55:00 +0000
ROA not after: Thu 18 Feb 2027 17:00:00 +0000
asID: 1029
IP address blocks: 2406:4440::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:64:c4:d1:27:c2:c5:c3:cc:c1:d5:b8:c9:ff:ce:94:50:88:ad:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Validity
Not Before: Feb 18 16:55:00 2026 GMT
Not After : Feb 18 17:00:00 2027 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:01:d9:41:2c:b4:65:bd:6e:06:b3:6f:02:
8e:78:a0:da:d6:8b:e4:95:88:ff:de:b6:29:c4:8a:
98:18:53:e8:47:86:6c:73:94:34:b5:05:13:85:0d:
93:8f:ae:72:24:d4:76:35:32:a4:cb:0c:f5:f7:9c:
f3:40:58:58:44:0c:17:9d:06:db:1a:ae:6c:fd:a3:
30:e0:1d:bd:19:f0:08:87:96:72:0e:97:9d:0f:f5:
5d:4a:26:f7:13:06:91:fe:22:62:bb:44:00:dd:c2:
b3:ef:44:56:07:b9:ca:e8:6f:d2:e2:a0:ea:9c:7e:
d9:cf:75:a9:4b:40:38:cd:45:37:07:c9:21:3c:47:
5a:c0:d3:27:9a:d9:4b:74:4e:08:e7:8e:72:4f:99:
73:66:ce:2d:da:4f:25:cb:01:55:35:ae:32:de:ba:
bf:40:8d:f6:1d:3c:39:0c:f7:f7:91:02:fa:f9:2a:
62:fb:4b:37:c2:5e:f3:7f:77:85:4f:c7:e9:7a:6b:
eb:21:46:45:2e:18:fe:15:e7:d8:e0:5e:c8:31:ea:
fe:f7:2a:74:e5:a2:4c:de:e2:c9:c4:5b:1c:35:85:
80:80:e0:56:98:c8:bc:cc:83:c5:8e:eb:d9:3f:ae:
13:5c:6e:d2:9b:f6:c7:4f:14:3e:6f:87:7b:ee:9a:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:2A:A9:77:7C:F5:09:C6:8B:A0:CC:4F:2F:45:17:04:4B:7D:89
X509v3 Authority Key Identifier:
keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d313238203d3e2031303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:4440::/44
Signature Algorithm: sha256WithRSAEncryption
08:3a:fa:f0:7c:03:58:e8:81:2d:08:ca:98:b6:ea:0f:d5:0b:
0f:4e:36:62:61:bf:68:38:5a:d9:f8:6a:80:8b:ba:87:ea:d2:
b4:7b:f1:87:87:00:f1:08:45:96:a7:06:d0:8a:7c:9e:f2:4a:
6c:63:be:34:a8:de:94:32:60:d6:f8:76:be:bc:26:89:5a:eb:
13:f4:3f:ad:18:0d:84:24:ad:9e:1b:a4:22:a2:e8:4e:08:d7:
ae:83:17:df:9c:1a:85:e2:20:c2:86:05:ee:01:42:b7:00:fe:
f4:42:3b:56:cd:24:82:89:bf:d6:8f:bd:b5:23:ce:26:8d:fa:
ba:c8:97:54:17:a5:18:a5:c5:ac:fd:d2:ea:9a:70:9b:4d:bf:
ef:1d:3b:1c:fd:b3:23:96:f1:ae:b1:9d:d1:48:48:8d:93:a7:
6f:2e:2f:36:d5:b3:0e:a5:0d:28:02:a1:55:62:00:b5:e9:45:
3c:5a:7d:a2:d7:d5:1b:b0:b3:62:e6:12:56:79:8d:03:ae:b1:
a9:88:21:07:d2:34:75:d8:58:3b:92:05:dc:1a:a2:96:7e:c2:
45:cf:6f:d9:2a:8e:0b:9e:6d:34:a1:51:44:15:17:35:39:85:
46:2d:04:99:b7:fd:5d:30:b1:77:c1:1b:81:ab:43:f4:5e:e1:
79:6b:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:03 2026 by rpki-client