Route Origin Authorization
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203337323335.roa
File: 326130323a356265303a383a3a2f34382d3438203d3e203337323335.roa (raw, json)
Hash identifier: 7RbmPA7VLOt5f9mLfUuUMSTKMfGHzDKznVK6oqXiBXY=
Subject key identifier: 5B:23:5B:6C:A1:17:BB:40:E5:31:82:18:EB:BC:A8:50:75:8D:64:61
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 4C32FC9A3E72366B7129099BCA79F47ED8BC4E6F
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203337323335.roa
Signing time: Mon 07 Sep 2026 17:46:43 +0000
ROA not before: Mon 07 Sep 2026 17:41:43 +0000
ROA not after: Mon 06 Sep 2027 17:46:43 +0000
asID: 37235
IP address blocks: 2a02:5be0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:32:fc:9a:3e:72:36:6b:71:29:09:9b:ca:79:f4:7e:d8:bc:4e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Sep 7 17:41:43 2026 GMT
Not After : Sep 6 17:46:43 2027 GMT
Subject: CN=5B235B6CA117BB40E5318218EBBCA850758D6461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:fb:6d:5a:fd:cc:6b:97:b2:b2:43:d4:d1:
e2:8f:fd:42:3f:f2:e2:5a:c0:54:54:f7:28:4f:8b:
85:8d:f1:d5:c8:a1:22:8a:2f:27:ef:25:c0:df:c3:
f3:93:bb:b9:c0:27:17:39:d5:8e:fd:af:6b:2c:b1:
be:f2:11:71:b5:a2:76:60:77:87:6f:9f:72:53:f2:
08:5b:7b:76:51:9b:d7:d3:8e:8c:ea:35:8e:a4:04:
97:f2:2e:03:52:14:38:da:3d:ba:d1:88:ac:21:50:
70:57:3a:ee:dc:b7:2f:5c:0b:fd:8f:a4:27:c9:b0:
a3:61:c8:8b:05:c0:b2:5e:01:64:df:bd:66:49:de:
39:e6:d5:ac:1f:91:4f:4c:2b:ac:21:e3:20:81:cf:
eb:44:53:28:8b:09:d4:7f:d2:b6:3b:85:d8:0b:20:
64:21:70:75:34:3d:e9:a4:09:92:9a:34:a1:ed:1d:
6c:7d:16:54:77:99:eb:a0:10:7d:52:23:9f:6d:32:
2e:65:05:ed:f5:79:3b:f3:7f:68:1a:56:1a:c9:5b:
3e:39:34:0e:8f:ec:38:3a:a8:a2:12:5e:18:df:d6:
46:df:08:79:08:13:9e:78:9f:c9:79:ec:70:4d:67:
a0:44:48:47:b9:41:82:2e:f7:be:be:06:7f:7b:00:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:23:5B:6C:A1:17:BB:40:E5:31:82:18:EB:BC:A8:50:75:8D:64:61
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a383a3a2f34382d3438203d3e203337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:8::/48
Signature Algorithm: sha256WithRSAEncryption
98:44:1e:fe:fb:93:47:7c:8d:92:31:f0:ea:39:ed:c8:c6:2e:
4c:a0:c4:19:1f:4a:f3:34:ce:d5:7f:1b:6c:23:26:96:02:5f:
c2:57:6d:9c:61:44:1d:3e:07:3d:81:04:8b:db:ad:e9:7e:6d:
c2:74:94:f8:9b:a7:6e:cf:21:49:92:03:7b:f2:59:f4:88:91:
ed:92:31:a9:de:04:32:f7:e3:b2:92:55:30:88:bc:c6:81:ce:
bb:f1:a7:05:06:1c:37:20:80:63:22:a7:e3:8e:da:f9:f9:7a:
80:a6:24:60:91:10:42:47:d7:af:cd:ba:05:7f:99:77:02:2f:
da:e9:60:a4:f1:f6:54:69:c4:34:1d:1d:15:16:c0:94:98:66:
18:78:cf:96:97:70:b1:aa:23:71:cd:62:13:56:87:58:25:77:
b0:38:43:d9:fd:d9:3d:bd:2a:99:c3:8d:e6:87:83:d0:c0:bf:
35:8f:72:56:37:21:6f:06:ca:56:bb:e6:e9:1a:8e:50:ae:19:
da:9c:b2:c3:12:2e:77:3e:0f:aa:58:4c:9f:4f:d4:c0:90:7f:
b3:ad:b2:bf:01:aa:74:68:9c:40:5d:38:8f:e4:7f:eb:f9:c3:
2b:1c:60:87:15:7e:4f:82:8b:54:18:e9:06:9f:84:50:f7:e1:
94:3e:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:37:58 2026 by rpki-client