Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a373a3a2f34382d3438203d3e203134363138.roa
File:                     326130323a356265303a373a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          U0LZ1D8AZ2T7pLL682y3ytK6BFwahUg6ItIlTrBWNo0=
Subject key identifier:   00:80:CE:9A:E4:9D:3C:AC:58:3E:07:2C:A8:EC:A0:D3:25:7F:6C:A0
Certificate issuer:       /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial:       6FCCCB8D2C6ED9D78C797900268985B5EE600DC3
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a373a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 21 May 2026 11:15:48 +0000
ROA not before:           Thu 21 May 2026 11:10:48 +0000
ROA not after:            Thu 20 May 2027 11:15:48 +0000
asID:                     14618
IP address blocks:        2a02:5be0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cc:cb:8d:2c:6e:d9:d7:8c:79:79:00:26:89:85:b5:ee:60:0d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
        Validity
            Not Before: May 21 11:10:48 2026 GMT
            Not After : May 20 11:15:48 2027 GMT
        Subject: CN=0080CE9AE49D3CAC583E072CA8ECA0D3257F6CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:ef:cb:fc:a7:fc:1d:da:da:0d:87:78:a4:
                    55:7a:ba:a8:a8:b3:56:9d:04:f8:78:80:d5:cd:14:
                    f2:a3:85:e8:af:ab:17:c4:7f:34:0a:cd:de:ca:88:
                    7b:e0:dd:9b:7a:07:9c:1b:46:8d:c3:a6:7f:81:4e:
                    e7:2d:e3:6c:5b:4d:16:f9:37:66:16:c5:7b:38:74:
                    c1:10:4b:01:28:81:4d:87:8c:1e:f7:d0:ad:1f:63:
                    7e:3a:42:48:63:4f:9c:d9:32:6d:b3:ab:1f:5f:af:
                    7b:0c:87:13:6d:e0:e7:73:aa:45:14:89:bd:43:20:
                    d3:e6:7c:3b:68:f5:d7:14:c2:bd:af:fa:b4:90:14:
                    be:f5:0e:0f:72:5c:92:a6:d5:56:cc:d7:cb:8a:29:
                    af:c7:c0:5f:87:04:31:36:1a:2c:76:24:5e:3b:1d:
                    9c:82:ce:ad:fc:fc:2b:bc:43:29:fe:13:a3:4a:a2:
                    7f:76:7f:de:80:68:fe:a3:61:a1:f4:1e:b3:92:1c:
                    7b:c9:81:0a:c0:05:48:52:4c:e8:36:0d:62:15:fc:
                    3b:3c:32:1d:5e:03:eb:98:18:53:22:88:2c:e6:5c:
                    08:1a:16:94:61:a1:33:1c:93:56:a1:df:7d:c9:45:
                    32:00:dd:e6:07:b6:86:14:06:22:f6:2c:66:0e:6b:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:CE:9A:E4:9D:3C:AC:58:3E:07:2C:A8:EC:A0:D3:25:7F:6C:A0
            X509v3 Authority Key Identifier:
                keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a373a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:5be0:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:9b:11:10:1f:1c:17:68:bc:d7:9b:0f:51:8b:ea:15:b0:
         e5:b0:74:bd:97:ea:0c:f1:c4:29:65:02:b3:ac:de:59:a9:08:
         21:df:50:c5:85:15:23:58:b7:0b:10:01:24:3c:e6:ab:d1:aa:
         98:20:ad:ce:17:95:c5:91:2e:cf:10:b4:a2:26:6f:8f:25:6a:
         20:42:e1:82:79:5f:23:94:09:5e:7c:f7:ed:b3:07:c9:47:4a:
         c3:2d:07:91:07:44:e2:79:8d:fb:89:36:6c:41:fa:1b:61:4c:
         23:0f:33:01:05:b1:83:e6:c7:d7:87:cf:45:7f:00:e2:f3:c8:
         a4:83:99:83:bc:a4:ba:2a:c9:fd:57:5c:d8:77:fb:34:d6:c8:
         c0:a2:e1:4e:0b:d5:f9:43:b2:92:01:d6:ef:dd:ea:f4:d5:13:
         7c:62:ba:01:32:b9:94:55:66:af:a5:58:ee:3b:6f:9d:f2:8e:
         70:6a:48:be:7d:52:6c:98:b0:ba:bf:c2:c5:a0:8a:db:a1:8a:
         b9:ae:20:74:0d:c8:54:fc:b3:93:ac:ab:47:bd:2e:5b:c5:c7:
         51:77:1c:a9:0e:46:0f:41:9b:f4:3a:f6:04:8b:21:b0:b6:97:
         73:21:5c:bc:b6:c6:62:e7:0e:13:13:8d:ba:c4:ac:8b:91:aa:
         26:06:dc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:19 2026 by rpki-client