Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3138352e35382e38352e302f32342d3234203d3e203432343237.roa
File: 3138352e35382e38352e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier: 68oXar0R2fXEPIA/NyhwqYsRO+2H7Mvo+BK23O4AGQA=
Subject key identifier: 92:27:41:02:8E:28:A0:6C:4F:4F:68:9E:AD:8E:40:17:B9:2A:37:42
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 48B795E24EF311750286DC7B49276E11D5B4AB39
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3138352e35382e38352e302f32342d3234203d3e203432343237.roa
Signing time: Fri 05 Jun 2026 12:30:54 +0000
ROA not before: Fri 05 Jun 2026 12:25:54 +0000
ROA not after: Fri 04 Jun 2027 12:30:54 +0000
asID: 42427
IP address blocks: 185.58.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b7:95:e2:4e:f3:11:75:02:86:dc:7b:49:27:6e:11:d5:b4:ab:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 5 12:25:54 2026 GMT
Not After : Jun 4 12:30:54 2027 GMT
Subject: CN=922741028E28A06C4F4F689EAD8E4017B92A3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:d6:30:a2:61:ed:52:1b:26:f9:cc:4e:1d:
dd:4d:73:9e:2f:af:c3:12:90:9e:b5:e9:3a:2d:cc:
08:32:32:74:11:a7:57:a9:8e:e1:55:8e:1c:93:66:
64:87:7e:5d:c7:0c:f7:06:10:c3:56:5e:fd:71:79:
c8:f5:c1:10:b5:bd:e1:c2:95:32:4a:36:2a:04:30:
de:23:e4:c0:13:60:6c:63:2b:6e:b2:8e:95:39:80:
42:54:59:42:c6:53:23:09:f8:b1:da:37:27:ef:2e:
dd:5a:a1:20:34:98:ea:d3:01:60:68:77:4a:f6:3c:
9e:ec:2e:33:86:8c:67:d5:87:6d:05:34:84:af:9d:
4a:24:44:5a:ce:6c:4a:6c:db:68:2e:47:1a:72:ea:
b6:a4:b4:d9:64:bd:81:47:bb:62:73:a8:0d:87:38:
db:a5:79:49:b0:99:40:1d:34:0f:dc:29:7b:13:f8:
f0:97:94:6c:5e:39:a0:95:d3:47:6a:d4:fb:cc:f9:
f1:be:a2:ae:68:d5:fe:3b:67:6b:6f:e6:31:bb:90:
ca:37:af:6b:e0:5e:81:41:f7:63:a0:d7:51:cd:ad:
3f:f4:18:61:40:14:9b:47:22:cd:e6:1b:9f:79:cf:
55:d1:3f:fd:b0:c2:33:e2:42:b8:83:8f:2a:fa:be:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:41:02:8E:28:A0:6C:4F:4F:68:9E:AD:8E:40:17:B9:2A:37:42
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3138352e35382e38352e302f32342d3234203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.85.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b5:22:d1:51:9e:1f:de:5b:5c:66:c7:51:15:c2:b7:65:dd:
fc:a8:00:7f:55:c0:d3:b8:6b:b5:29:fc:b5:00:9c:08:ef:1c:
a6:01:61:7d:f6:81:0c:b6:bc:bd:2b:4d:2b:a5:9f:ca:34:53:
75:49:e8:31:42:52:db:ed:ee:6d:fb:a3:f5:cb:85:2f:f5:f3:
92:0e:80:e1:47:30:14:da:b2:91:ca:be:d8:5c:b3:6f:21:7d:
93:58:16:c4:68:d6:74:1e:d1:27:10:65:40:4e:14:ce:82:fb:
8a:55:dc:2a:ea:53:f9:bc:30:00:e1:b7:09:16:bb:30:12:09:
81:a5:75:28:01:4b:35:b3:24:df:6e:16:0f:eb:3a:09:f0:40:
ad:f2:f6:7f:53:8e:94:a3:6e:e5:4c:25:6b:29:da:36:0f:5e:
f7:14:d6:19:c8:e1:d0:f2:d6:aa:35:30:cc:d4:fe:81:60:a4:
57:8d:e6:42:6f:23:4c:49:d4:fc:7d:53:e7:d7:c4:04:e7:6e:
bf:a2:74:35:1e:9e:c7:b3:dd:d7:ad:cc:fe:7d:cb:d2:aa:83:
cb:a3:b3:4c:6e:a3:74:75:0f:8b:fc:40:99:cb:5d:b2:a8:9a:
ae:94:33:69:07:8b:7d:52:60:f0:ca:81:c9:d5:14:58:50:b5:
9e:23:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:21:23 2026 by rpki-client