Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230362e302f32342d3234203d3e203630343932.roa
File: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (raw, json)
Hash identifier: XQtG13qUPKscYxJ92+KDN0tgLgktYMy50emVYCNf78E=
Subject key identifier: B6:EE:F2:53:07:04:A3:ED:BA:A1:43:CC:66:E5:A1:05:57:25:EA:65
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 03DFD62EEB3C29E2F24645820A4736397800325F
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230362e302f32342d3234203d3e203630343932.roa
Signing time: Fri 05 Jun 2026 12:30:46 +0000
ROA not before: Fri 05 Jun 2026 12:25:46 +0000
ROA not after: Fri 04 Jun 2027 12:30:46 +0000
asID: 60492
IP address blocks: 193.7.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:df:d6:2e:eb:3c:29:e2:f2:46:45:82:0a:47:36:39:78:00:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Jun 5 12:25:46 2026 GMT
Not After : Jun 4 12:30:46 2027 GMT
Subject: CN=B6EEF2530704A3EDBAA143CC66E5A1055725EA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:29:02:39:b2:b8:0f:7d:79:da:d1:25:1c:
36:19:1c:c8:6b:c5:8e:ce:e8:80:61:ed:24:9b:20:
dc:59:2d:b4:2c:53:c4:ad:99:f7:c5:67:90:4a:9f:
6f:86:ca:9b:49:76:ab:b7:f7:24:a6:f4:07:f5:d4:
41:c5:4b:9d:ab:8f:b7:6a:8f:18:40:56:85:d7:82:
a0:d6:05:81:3f:bc:49:64:93:25:79:bc:64:12:70:
88:f3:f5:c6:94:5c:2f:df:97:eb:f2:74:8a:bf:fa:
65:6a:94:43:55:7e:36:90:86:a8:0d:55:ed:04:8b:
cd:37:a4:5e:10:59:1c:77:3d:b3:65:e8:ad:0c:17:
66:0e:24:04:b0:dd:5d:6c:a2:ad:ef:c1:50:cb:09:
b9:4b:e6:9d:1a:43:74:a7:1c:b1:1a:f3:7f:01:3e:
d7:35:f7:9e:a2:97:bf:57:e1:d2:ff:6c:1e:18:f8:
f0:17:f3:2b:ec:1f:4c:57:d8:0c:ca:58:25:9f:6e:
ba:53:3d:59:14:64:a6:f3:1e:ba:2d:c2:af:8e:ac:
6c:70:33:e2:1d:3e:c9:c9:2e:10:02:31:f1:4a:90:
9d:ae:99:31:01:9b:8b:4f:78:fd:ca:9d:18:4c:c0:
97:28:0f:0c:2d:a3:91:9a:49:72:c1:c5:bd:56:97:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EE:F2:53:07:04:A3:ED:BA:A1:43:CC:66:E5:A1:05:57:25:EA:65
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230362e302f32342d3234203d3e203630343932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.206.0/24
Signature Algorithm: sha256WithRSAEncryption
27:79:b1:ef:7b:13:ea:e0:8d:48:ca:a2:97:5d:4e:f6:43:33:
49:a5:89:12:c7:3c:d2:53:aa:d3:ef:39:7c:e6:77:4c:22:2c:
f8:a8:f5:af:50:ec:5a:3a:f3:1b:55:40:5e:ea:80:be:21:4e:
a2:8c:11:f2:5b:7c:81:af:c1:e5:31:f2:90:fa:5d:21:b2:65:
e8:89:1f:d6:3c:a5:8a:d8:8d:af:8b:5f:59:34:da:36:52:a4:
a3:b0:a4:1e:ab:64:da:86:50:a2:93:55:0b:12:ef:be:43:2a:
77:85:f1:c2:91:a1:96:d8:79:49:51:30:4e:79:53:b9:25:6b:
77:1c:ed:41:62:bd:0a:ff:e2:cf:2e:1d:5c:af:eb:68:b2:0e:
d0:bc:1c:84:a9:c2:61:87:6d:fc:0f:0a:8c:da:00:5d:7d:62:
89:91:de:af:e5:82:f9:eb:b7:b2:67:7e:66:97:f4:10:73:be:
7b:ca:d8:eb:f9:e7:93:46:9a:2c:e8:a1:02:78:8a:e1:67:c6:
1d:57:1f:4a:20:d5:71:5d:aa:65:22:6b:df:a7:7f:ff:10:97:
cd:07:14:27:e7:21:93:65:3d:db:79:29:af:80:9b:8f:f2:d0:
55:b0:92:f4:88:5f:3b:83:5d:90:1c:03:52:a0:af:91:c8:37:
42:9e:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:34 2026 by rpki-client