Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa
File: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (raw, json)
Hash identifier: UUZSLWq+XI/WHVaboJm1ogby6P5Ai2EZWO3AtQn+u/Y=
Subject key identifier: 5B:59:2D:C9:E4:B5:3B:41:3F:F0:D4:A5:C2:BA:1C:AD:A1:B0:F9:23
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 1DAAD4E3E4EDEFAF34741D36CD0E80EF0005567D
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa
Signing time: Fri 05 Jun 2026 12:30:56 +0000
ROA not before: Fri 05 Jun 2026 12:25:56 +0000
ROA not after: Fri 04 Jun 2027 12:30:56 +0000
asID: 39588
IP address blocks: 194.104.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:aa:d4:e3:e4:ed:ef:af:34:74:1d:36:cd:0e:80:ef:00:05:56:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jun 5 12:25:56 2026 GMT
Not After : Jun 4 12:30:56 2027 GMT
Subject: CN=5B592DC9E4B53B413FF0D4A5C2BA1CADA1B0F923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:bf:c1:30:b2:90:29:13:20:89:a9:ba:80:
09:84:56:f1:9b:3e:68:b9:95:dc:53:8b:bc:e5:32:
15:bd:9f:5c:df:d4:98:03:45:45:62:01:3c:c6:49:
b0:55:c0:27:ea:5d:5c:61:d9:c5:67:1e:f7:37:3d:
24:6c:01:81:b1:ef:b3:48:10:0b:29:24:6f:3f:d5:
cf:75:da:ff:8b:57:7b:e0:5f:5a:54:f5:12:94:8f:
02:0c:63:4d:d8:1c:90:c2:25:37:a0:9a:5f:fe:bd:
a6:51:6b:b8:0b:ee:19:7c:ad:45:d1:8e:14:20:71:
9f:83:08:eb:da:f4:ed:a8:48:d6:13:76:d3:be:3c:
7e:bc:93:1f:04:02:d1:5c:9f:ad:98:c5:5b:98:34:
74:54:78:24:e0:fd:f6:fc:a9:ca:0c:8b:2e:d9:92:
92:f3:90:02:66:a5:7b:0d:7a:f6:48:69:b2:48:bd:
2d:39:cf:61:08:a6:e1:0e:fd:cd:3e:0f:91:54:62:
2b:8c:fb:c8:2c:0d:ff:87:9d:d2:8d:02:a4:27:fd:
e3:aa:9f:05:f5:7c:b1:a5:a6:c2:dd:57:93:0c:9a:
1a:ae:38:96:90:c0:22:75:1a:81:6a:62:04:b0:aa:
49:bf:a7:ad:61:46:02:8f:d7:50:54:8f:00:3d:a7:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:59:2D:C9:E4:B5:3B:41:3F:F0:D4:A5:C2:BA:1C:AD:A1:B0:F9:23
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.108.0/23
Signature Algorithm: sha256WithRSAEncryption
07:03:41:ad:a9:b6:c7:4a:0f:a3:a6:bf:33:7b:3b:1d:a8:d0:
38:b4:40:85:fa:a0:d7:cd:ab:b2:e6:2d:42:82:b1:ab:47:a2:
8a:85:be:42:d4:9b:ad:02:0f:ad:af:46:b3:b4:bd:a8:33:a5:
a0:54:9b:d8:02:12:e2:f5:18:1a:33:5b:91:e7:9d:f2:6c:92:
b0:94:13:95:2b:fa:ab:5d:4c:64:be:ce:d2:85:90:43:b9:d6:
05:ef:4a:9f:54:82:1c:dd:5e:96:d6:67:2e:7c:57:1e:70:ed:
fc:22:27:2e:96:08:b5:0b:f9:55:28:24:54:10:df:7d:d8:d8:
4f:33:49:42:4b:99:74:a0:d4:60:5c:f5:d0:20:d6:d7:3e:f9:
1f:d9:07:c3:1a:08:34:6d:f0:c3:87:12:af:b0:2f:6c:69:93:
ed:ef:3e:56:b8:81:e3:94:3b:d3:3e:28:2c:bc:24:24:50:52:
04:56:9d:f2:18:b0:32:f0:ce:f7:c7:43:dd:5e:a2:68:7f:a6:
0a:15:bc:83:3c:b0:6f:34:1c:4e:f2:85:a9:31:87:65:d9:25:
d8:db:72:eb:98:1f:9a:28:17:db:76:f6:22:f0:f9:6f:d0:79:
30:cc:5d:88:17:f6:0e:2a:c5:66:7f:de:ff:b3:e8:13:c2:8b:
f9:7d:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:59 2026 by rpki-client