Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a333a3a2f34382d3438203d3e203339353838.roa
File: 326130323a356265303a333a3a2f34382d3438203d3e203339353838.roa (raw, json)
Hash identifier: 70eqIpOuYjuKuwpejm0NHQiGVyhFdN4AHpuZ2EHdMQE=
Subject key identifier: B1:B0:4C:5D:CF:43:41:4D:CA:11:A8:8E:16:A2:7A:78:E8:B0:72:28
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 35A84501FA17AA12889749B6AC2295BEF485B4C0
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a333a3a2f34382d3438203d3e203339353838.roa
Signing time: Fri 05 Jun 2026 12:30:55 +0000
ROA not before: Fri 05 Jun 2026 12:25:55 +0000
ROA not after: Fri 04 Jun 2027 12:30:55 +0000
asID: 39588
IP address blocks: 2a02:5be0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a8:45:01:fa:17:aa:12:88:97:49:b6:ac:22:95:be:f4:85:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jun 5 12:25:55 2026 GMT
Not After : Jun 4 12:30:55 2027 GMT
Subject: CN=B1B04C5DCF43414DCA11A88E16A27A78E8B07228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:c9:78:8c:6f:f7:38:c2:1b:d8:a6:d7:4b:
03:86:79:f1:a2:12:84:85:33:03:8a:29:9d:ce:a7:
11:a4:35:76:cb:a6:e7:c4:56:05:c7:9c:b1:ec:c3:
b2:ec:1a:a8:59:d2:d4:16:e7:4e:81:b1:ad:92:a5:
5a:89:f0:9d:77:36:dd:fa:ff:7c:a7:0d:2e:5e:7b:
ad:78:25:b9:16:b0:47:0c:2e:73:c1:cd:9f:15:0e:
ff:24:36:f5:50:32:cf:a9:76:f4:ad:7b:b7:f6:88:
2e:6a:92:9d:b9:3d:62:3a:1b:54:ff:07:25:ce:f6:
38:5f:b1:29:6d:d2:9a:ad:c2:05:31:9f:bc:67:6e:
59:bf:01:0e:c1:2b:1c:55:71:72:4f:eb:94:e4:b8:
6f:b5:68:63:3b:d5:4f:9f:54:7c:39:51:1f:75:65:
5f:ed:90:fc:a3:fd:29:c4:2a:6f:3d:e1:e8:6d:1c:
3e:ee:54:50:83:be:6a:76:4a:91:e9:0e:52:92:c9:
45:13:37:a1:77:90:fe:3e:55:a6:1b:6c:88:c1:b1:
1b:32:63:30:4f:3a:25:0d:98:69:3f:91:e7:1f:fd:
36:33:95:13:73:30:55:fb:1d:cc:93:6a:66:71:b5:
14:68:f0:4f:36:14:ab:9a:ab:39:8c:18:43:6a:53:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:4C:5D:CF:43:41:4D:CA:11:A8:8E:16:A2:7A:78:E8:B0:72:28
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a333a3a2f34382d3438203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:3::/48
Signature Algorithm: sha256WithRSAEncryption
6b:17:d2:7b:08:d7:95:67:45:80:03:81:90:6d:71:c1:3e:bc:
c0:4c:ec:82:79:c3:32:2e:4b:1e:83:28:38:4f:8d:a6:5f:b6:
44:7b:fa:9b:37:4f:3e:6d:8b:40:ec:93:8f:b3:2c:e1:01:d9:
b6:c5:ea:23:57:e9:85:50:ca:2f:55:aa:df:61:ac:ce:34:2c:
82:3f:47:c3:9c:5b:19:8b:3c:23:ef:a8:c4:54:12:5a:89:84:
7f:fd:d9:3a:a7:39:16:aa:cc:5e:c4:ff:fa:8c:d0:21:c1:72:
a3:08:1e:6d:e2:7e:2f:af:77:b6:7c:c8:f9:0e:b2:e4:30:bc:
1d:55:ba:ff:f0:66:b1:e1:84:19:83:36:32:78:b7:e4:50:90:
ec:27:69:35:89:3a:48:28:34:27:65:94:fb:18:a8:5a:90:99:
11:6e:21:39:9a:8c:e1:aa:3b:af:1e:45:97:ec:c2:34:8e:6e:
52:a7:38:84:f9:ae:c5:20:d7:d5:b7:ff:50:08:d8:26:54:db:
d2:f8:3b:08:f5:e0:aa:46:55:ef:a7:57:4c:da:63:15:5a:dc:
a6:fc:21:cf:a4:e9:ca:68:45:70:9b:49:31:86:ba:8c:a1:f9:
35:c8:64:d3:07:5c:01:34:7d:88:31:7b:b8:46:a0:54:f8:31:
4a:23:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:59 2026 by rpki-client