Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a333a3a2f34382d3438203d3e203339353838.roa
File: 326130323a356265303a333a3a2f34382d3438203d3e203339353838.roa (raw, json)
Hash identifier: yVzoWdoD64PHNCLSQp7iFYpgoQZ93X00YGRegEN0Jmg=
Subject key identifier: 30:86:96:8F:C3:EA:A3:C0:90:FD:F4:9F:2B:8B:7D:99:5F:21:E8:C9
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 59218888D0940DC3189BC1DC29A4212A5ED71502
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a333a3a2f34382d3438203d3e203339353838.roa
Signing time: Fri 04 Jul 2025 12:05:12 +0000
ROA not before: Fri 04 Jul 2025 12:00:12 +0000
ROA not after: Fri 03 Jul 2026 12:05:12 +0000
asID: 39588
IP address blocks: 2a02:5be0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:21:88:88:d0:94:0d:c3:18:9b:c1:dc:29:a4:21:2a:5e:d7:15:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jul 4 12:00:12 2025 GMT
Not After : Jul 3 12:05:12 2026 GMT
Subject: CN=3086968FC3EAA3C090FDF49F2B8B7D995F21E8C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:2f:03:e6:1a:c7:29:97:97:e1:7c:e0:d0:
02:c2:a1:06:b3:8e:3e:6e:6c:5b:21:ac:45:fe:79:
a2:d2:ac:d5:21:a9:f3:b4:3f:9f:52:cf:71:06:e2:
11:36:64:29:f3:72:33:69:a6:9a:9d:66:ab:de:8c:
82:02:a9:5d:0b:fa:64:18:d5:a9:fd:26:73:c1:7f:
c5:69:70:69:a4:3c:1e:0a:56:7b:19:1f:66:bb:cf:
ca:d3:de:f8:a4:d4:f4:5d:16:da:89:a8:14:b5:84:
20:46:4f:ee:33:36:ac:c3:98:2e:a1:1f:8b:4c:c8:
77:ed:04:87:48:28:e8:4a:91:dc:08:92:b3:2d:f5:
8f:a8:75:40:c9:4c:5c:b9:bd:ff:2d:60:97:ec:f9:
30:7e:6e:61:35:8a:b9:f5:7f:59:92:af:0d:b9:2d:
24:93:24:1e:2a:bf:44:70:76:2a:c9:86:72:5c:1d:
ff:dd:ff:fa:86:9e:a2:ee:bf:41:f4:32:e1:91:71:
6a:e3:51:da:bd:a8:93:a9:12:2d:9f:38:b1:e4:cb:
51:12:f6:0b:b5:ff:29:d3:71:6a:7a:50:d6:11:98:
ed:15:9b:6c:dd:a2:f2:3c:3e:e9:90:24:bd:e4:b7:
d4:8e:bf:23:31:21:72:61:c3:14:e4:a1:bb:f1:cd:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:86:96:8F:C3:EA:A3:C0:90:FD:F4:9F:2B:8B:7D:99:5F:21:E8:C9
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a333a3a2f34382d3438203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:3::/48
Signature Algorithm: sha256WithRSAEncryption
04:f3:b8:80:53:48:cf:ef:df:58:8f:cd:67:c7:7d:b2:5d:ef:
84:53:9b:5a:89:6c:22:13:d4:61:f7:3b:4c:b0:a1:fe:9e:67:
27:72:4d:b9:fe:fc:e4:0b:bd:1f:d9:25:80:04:18:6f:8b:0a:
2f:4f:e2:16:f6:91:c5:64:3b:8f:c2:1b:71:51:a4:e5:e6:2c:
42:6f:bf:31:f1:95:a5:cc:43:9c:0b:b3:ac:a0:64:19:f6:b4:
32:32:60:28:ef:3f:fe:2c:1e:07:06:06:84:b9:d6:25:e5:6a:
87:fe:40:63:50:ae:0f:eb:7a:10:5e:f7:db:8c:12:1e:e9:49:
d8:9a:c7:f7:b1:b6:14:25:7b:a5:24:5e:f0:1d:7d:e8:ce:fc:
97:2d:4d:2f:17:29:0b:c3:d1:3b:9d:61:e0:f2:46:a5:68:94:
c9:cf:47:6f:5a:44:39:f1:b8:a8:78:9d:5b:ce:41:5f:37:61:
01:e5:b3:34:0e:ad:35:19:50:a7:75:4b:ee:08:de:ef:d2:67:
c5:91:60:e2:9b:8d:cb:a8:a8:e9:02:4b:83:fa:4b:9e:13:cf:
ec:3a:9c:ff:6c:59:0a:76:a8:52:ae:e3:63:5d:83:c9:69:34:
b2:73:32:67:fa:65:a4:76:71:57:85:27:04:67:ba:3f:28:a6:
35:9e:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:06:04 2025 by rpki-client