Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3139352e3133302e3231372e302f32342d3234203d3e203432343237.roa
File: 3139352e3133302e3231372e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier: RHyxm36Dek4IQhK+FZNRz2wldbwUjxcY6PtWO0vJAw4=
Subject key identifier: 92:54:2F:E3:E2:3C:D1:B1:59:82:BD:87:AD:7F:EB:0C:24:E4:36:CC
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 34C7BF3DDF0478257C8A33EF7FC495120B1F16F8
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3139352e3133302e3231372e302f32342d3234203d3e203432343237.roa
Signing time: Fri 05 Jun 2026 12:30:56 +0000
ROA not before: Fri 05 Jun 2026 12:25:56 +0000
ROA not after: Fri 04 Jun 2027 12:30:56 +0000
asID: 42427
IP address blocks: 195.130.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c7:bf:3d:df:04:78:25:7c:8a:33:ef:7f:c4:95:12:0b:1f:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 5 12:25:56 2026 GMT
Not After : Jun 4 12:30:56 2027 GMT
Subject: CN=92542FE3E23CD1B15982BD87AD7FEB0C24E436CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:ec:72:bc:eb:dd:e5:e9:a3:b3:79:f2:ba:
bf:9c:99:c2:1e:b5:4b:48:7f:5b:d0:b9:84:2f:a9:
41:ab:31:c5:89:af:24:62:12:03:e3:dc:3d:dc:c8:
a1:7c:df:50:29:f9:75:dc:87:10:f3:a4:cf:02:6d:
f3:9e:08:69:a4:6b:76:99:6a:54:fb:f7:17:34:05:
83:be:9a:f0:b0:d4:08:05:7c:0a:c6:84:02:a9:dd:
50:a6:f3:e0:45:24:6d:70:a4:7b:f6:dc:a0:fb:a9:
3e:fa:ef:98:a2:30:d7:0b:78:67:57:a9:60:c3:c0:
4f:5e:e5:4e:af:78:55:e4:16:2b:f9:75:ce:db:0b:
7d:a0:79:20:a2:11:44:a9:67:30:ce:00:2b:ed:e3:
5f:b4:3b:38:be:a9:cd:85:18:08:10:c1:a2:2f:a6:
2e:f4:64:ab:15:93:d6:07:b9:56:30:93:b9:f1:e3:
9e:0e:92:10:a1:dc:03:45:8e:67:d6:0d:bd:2e:c0:
53:ac:fc:df:1f:a6:a9:be:10:4a:cf:12:0c:eb:ed:
7c:9e:d5:26:13:67:ae:1b:5e:8a:a1:5e:f9:7a:1d:
42:be:ea:9f:38:a1:02:2b:e8:b4:b6:f8:73:7a:da:
06:19:d3:6b:23:40:55:a7:2b:2c:62:6c:a8:7e:6d:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:2F:E3:E2:3C:D1:B1:59:82:BD:87:AD:7F:EB:0C:24:E4:36:CC
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3139352e3133302e3231372e302f32342d3234203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.217.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c7:05:5c:6a:55:4c:5a:07:02:35:9f:6e:18:9a:56:ae:62:
67:95:ba:28:c1:e7:ea:72:fd:6b:4e:0f:69:88:f8:5a:e0:53:
fd:9e:01:f4:b2:5d:3e:bd:5b:61:c6:eb:23:53:19:65:b7:c1:
19:a7:83:1b:3b:ea:59:05:52:3f:8a:08:08:c5:6d:43:1e:42:
83:be:10:d8:31:c7:fe:f3:93:3e:58:a5:b5:9a:bf:f1:54:fe:
2f:c1:ba:97:7e:1c:aa:69:2c:79:27:41:3a:2a:53:e8:b7:91:
31:1f:5d:93:15:3c:7d:ba:18:6f:f9:e3:eb:66:7d:78:cb:d4:
c7:b2:5c:22:88:e5:a7:6f:d1:64:46:14:54:3b:d4:90:2c:a8:
7f:a8:e6:01:d8:eb:56:cf:be:c5:c4:8b:53:42:e0:f7:0c:d1:
fc:cd:0b:5f:39:44:9f:e8:34:2c:e5:db:13:ed:4f:a9:79:05:
92:eb:ec:7c:9d:66:97:37:cd:62:54:9e:c6:29:2a:f4:1a:24:
32:0a:16:47:c1:ea:d6:f9:f2:af:20:21:c3:fe:28:79:40:3e:
4b:d2:68:64:80:44:0f:2f:c7:ac:3b:6e:25:ed:d6:79:c4:9d:
32:b5:3d:f5:b2:57:99:a9:af:1f:11:32:61:c2:38:df:44:a2:
7c:a1:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:09:50 2026 by rpki-client