Route Origin Authorization
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203136353039.roa
File: 326130323a356265303a383a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: 2enCPgQjGmPjUKrhfrTVnuKYA+53kzew9r5u0b8KqNY=
Subject key identifier: DA:7F:44:1E:FD:58:4D:65:7F:4C:51:E9:7A:89:C3:BC:35:BB:AB:B0
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 51C32BFB8DE56286158D57474C19593792D3DDE1
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203136353039.roa
Signing time: Mon 07 Sep 2026 17:46:43 +0000
ROA not before: Mon 07 Sep 2026 17:41:43 +0000
ROA not after: Mon 06 Sep 2027 17:46:43 +0000
asID: 16509
IP address blocks: 2a02:5be0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c3:2b:fb:8d:e5:62:86:15:8d:57:47:4c:19:59:37:92:d3:dd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Sep 7 17:41:43 2026 GMT
Not After : Sep 6 17:46:43 2027 GMT
Subject: CN=DA7F441EFD584D657F4C51E97A89C3BC35BBABB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:a7:89:6b:a1:a5:6d:62:63:94:cf:d5:99:
9f:d0:63:ad:cb:97:1a:eb:85:be:15:d1:bb:53:da:
50:9a:c6:c9:2a:2b:65:0d:7f:0e:b8:80:12:83:fe:
23:9f:af:eb:97:2b:8e:8a:e3:a4:8f:2e:b5:70:9f:
c9:91:2b:7d:c5:44:06:ee:5a:34:0d:eb:5f:ab:ef:
80:67:63:6e:d1:d2:eb:ef:86:40:3a:1c:14:b6:d3:
5e:7f:a8:3a:81:04:38:b1:f6:9c:3b:24:76:90:4c:
83:74:6f:f9:e3:e5:af:c6:43:80:2d:0c:1e:d2:9c:
0c:28:cc:07:12:68:b3:26:90:0d:9a:b4:b9:01:be:
cc:45:c4:91:0c:85:b2:8c:fa:13:bb:65:80:9a:fb:
64:d2:44:55:86:2a:66:4f:00:48:71:85:b6:db:12:
8b:ce:b8:18:a9:44:20:b4:db:5f:a9:00:94:79:57:
9e:1f:c6:44:e7:56:58:36:7a:e9:cc:8c:f7:c5:cc:
b1:35:82:b1:70:f2:cc:74:ad:89:a0:a1:82:d1:3f:
10:0f:5b:c8:33:1a:b5:41:d1:60:8b:f8:c1:69:51:
f9:0d:55:49:85:92:3e:24:ab:72:94:d4:ef:94:81:
40:5e:f6:15:50:42:a8:87:1e:3e:4d:3c:3f:80:13:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7F:44:1E:FD:58:4D:65:7F:4C:51:E9:7A:89:C3:BC:35:BB:AB:B0
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:8::/48
Signature Algorithm: sha256WithRSAEncryption
13:06:8f:5b:8c:ea:86:03:32:d3:1e:98:c1:95:00:af:e7:4d:
02:d0:6a:82:d1:97:c1:7c:85:8b:e8:2c:92:6c:39:b8:dd:5b:
3c:ef:d3:58:60:0d:80:25:f3:e9:84:99:86:64:97:28:b7:61:
8d:1a:ae:42:b3:c7:10:5d:c8:61:58:39:e0:d1:de:56:fc:b6:
c4:ab:00:97:ef:31:fc:fb:f4:be:5f:95:9a:84:89:d1:7f:0f:
9c:0d:1a:dc:13:df:dd:c2:05:48:8f:bc:58:1a:fc:30:22:7d:
cb:75:b9:07:e6:f6:c9:2e:34:2b:a8:9c:99:e5:a0:5e:46:77:
7a:a6:02:23:0f:78:a5:56:38:04:65:5c:45:01:5f:f3:6c:21:
8e:12:ab:09:7b:20:de:fd:2c:1a:55:bb:e6:0f:e7:73:27:c5:
ea:4c:f5:8f:e5:ad:bc:b3:b2:5d:b4:b3:a5:10:90:b0:6c:39:
ff:93:bf:3f:66:32:74:bc:ea:4a:58:4e:cf:79:6f:f2:c6:0e:
e1:ad:f3:19:ea:b1:07:b1:e2:58:69:11:3c:d3:48:1f:5d:16:
f9:88:8c:68:b1:1f:23:01:ca:bb:ef:f9:1f:ee:a8:6a:d8:0b:
e7:d8:f6:63:bd:bc:d8:27:cb:1f:32:46:b6:48:ec:e0:c2:09:
4a:c1:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:38:26 2026 by rpki-client