Route Origin Authorization
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203134363138.roa
File: 326130323a356265303a383a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: pQ/TIDgRsghTtK5eoTETj0NRlRwiJ8my/d/wacFndbY=
Subject key identifier: C4:2C:C7:DD:A8:6E:1C:AE:87:DF:43:14:30:DB:13:83:A9:53:91:45
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 5D4ED63D59E35360504AB457A9F6F057AE564312
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203134363138.roa
Signing time: Mon 07 Sep 2026 17:46:43 +0000
ROA not before: Mon 07 Sep 2026 17:41:43 +0000
ROA not after: Mon 06 Sep 2027 17:46:43 +0000
asID: 14618
IP address blocks: 2a02:5be0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4e:d6:3d:59:e3:53:60:50:4a:b4:57:a9:f6:f0:57:ae:56:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Sep 7 17:41:43 2026 GMT
Not After : Sep 6 17:46:43 2027 GMT
Subject: CN=C42CC7DDA86E1CAE87DF431430DB1383A9539145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:d1:0b:04:d1:b0:d6:ff:a7:69:03:6f:37:
c5:8a:fa:f0:d3:f1:7d:84:1b:61:ca:1e:a4:04:bf:
b9:40:3d:cd:ae:fe:68:c2:92:fd:17:d6:cc:a5:23:
35:e6:dd:67:a1:6b:10:9e:52:7a:55:8b:dd:12:4d:
57:45:37:a6:92:f6:f7:b0:d8:0c:f0:82:67:65:bf:
f3:ab:8d:ba:11:08:9a:83:25:1c:55:d9:f3:33:a0:
98:40:dd:c1:ca:0b:ef:01:5c:cb:f4:06:2d:fa:12:
4a:64:e0:70:88:a3:d7:3c:b9:78:b3:9d:86:64:a6:
64:ae:2d:ad:18:ac:bf:23:9b:d0:bc:41:1e:f3:d5:
64:1c:f9:f6:88:2d:9f:69:59:b3:38:07:9a:72:a8:
0e:fd:48:92:b9:fe:4e:2d:d9:8e:ac:77:bc:e9:3c:
01:6f:9c:0a:17:5e:14:7e:48:b5:d6:7d:02:50:7e:
92:d1:da:89:1c:32:7a:c3:bd:bc:d7:1d:e8:82:be:
27:4c:f7:93:bf:7f:be:78:92:9f:a9:c2:7f:e2:47:
a2:a3:a6:c7:48:4d:5f:5a:b8:d2:0c:38:84:4e:9f:
8c:7b:83:95:b8:5b:e2:ae:12:26:e3:c9:68:84:03:
f2:9b:3e:19:9d:82:19:6e:11:23:f7:1c:b1:1f:6b:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:C7:DD:A8:6E:1C:AE:87:DF:43:14:30:DB:13:83:A9:53:91:45
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:8::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f4:b7:c7:30:81:b7:c1:19:0b:45:23:a4:e8:e7:0b:7c:7c:
52:85:3d:16:71:af:cc:f4:e0:e0:26:26:70:ef:32:07:30:fd:
61:0e:9f:47:b1:73:d6:20:70:71:ac:d7:8e:34:cd:e7:86:c9:
54:9f:2e:34:5a:80:2a:52:3e:37:ef:99:e8:91:a0:00:55:05:
97:f1:9a:a2:cc:64:5f:04:11:37:21:56:8f:4d:c6:47:7d:6d:
52:67:9a:0d:42:e5:25:f9:dd:b2:46:ba:1e:49:16:62:85:15:
b1:d4:79:31:a9:9e:81:6a:0f:5e:ce:6a:a7:12:e7:92:e3:e3:
25:62:6b:7d:87:0f:78:df:a6:9c:b7:71:d3:65:f5:43:3a:0c:
fe:7e:7e:f2:ab:44:6d:a2:76:db:a7:1c:a0:29:c4:fe:75:21:
48:c1:2d:8c:62:23:83:01:19:ef:7e:4b:5a:37:f7:96:ce:1a:
43:02:26:61:cc:3c:3f:af:b9:54:7a:61:34:d0:da:c6:01:65:
d8:46:86:f6:b0:c3:86:0d:14:8d:f8:14:4f:09:c0:5e:1c:86:
17:32:7d:81:20:2b:52:87:66:e9:6a:b1:7b:33:65:97:44:5e:
5f:04:7e:bd:a4:92:55:2c:a7:aa:39:6d:f6:f0:e1:c8:cf:41:
82:fe:67:3f
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUXU7WPVnjU2BQSrRXqfbwV65WQxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNjA5MDcxNzQxNDNaFw0yNzA5MDYxNzQ2NDNaMDMxMTAvBgNV
BAMTKEM0MkNDN0REQTg2RTFDQUU4N0RGNDMxNDMwREIxMzgzQTk1MzkxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9I9ELBNGw1v+naQNvN8WK+vDT
8X2EG2HKHqQEv7lAPc2u/mjCkv0X1sylIzXm3WehaxCeUnpVi90STVdFN6aS9vew
2Azwgmdlv/OrjboRCJqDJRxV2fMzoJhA3cHKC+8BXMv0Bi36Ekpk4HCIo9c8uXiz
nYZkpmSuLa0YrL8jm9C8QR7z1WQc+faILZ9pWbM4B5pyqA79SJK5/k4t2Y6sd7zp
PAFvnAoXXhR+SLXWfQJQfpLR2okcMnrDvbzXHeiCvidM95O/f754kp+pwn/iR6Kj
psdITV9auNIMOIROn4x7g5W4W+KuEibjyWiEA/KbPhmdghluESP3HLEfa6Y1AgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUxCzH3ahuHK6H30MUMNsTg6lTkUUwHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUH
MAuGcXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzMvMzI2MTMwMzIzYTM1NjI2NTMwM2EzODNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDMxMzQzNjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqAlvgAAgwDQYJKoZIhvcNAQEL
BQADggEBACr0t8cwgbfBGQtFI6To5wt8fFKFPRZxr8z04OAmJnDvMgcw/WEOn0ex
c9YgcHGs1440zeeGyVSfLjRagCpSPjfvmeiRoABVBZfxmqLMZF8EETchVo9Nxkd9
bVJnmg1C5SX53bJGuh5JFmKFFbHUeTGpnoFqD17OaqcS55Lj4yVia32HD3jfppy3
cdNl9UM6DP5+fvKrRG2idtunHKApxP51IUjBLYxiI4MBGe9+S1o395bOGkMCJmHM
PD+vuVR6YTTQ2sYBZdhGhvaww4YNFI34FE8JwF4chhcyfYEgK1KHZulqsXszZZdE
Xl8Efr2kklUsp6o5bfbw4cjPQYL+Zz8=
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:23:50 2026 by rpki-client