Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a393a3a2f34382d3438203d3e203134363138.roa
File: 326130323a356265303a393a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: HVmBvbA55c/4y7CadPl7iRJN404fBn5zle3lNtcmch0=
Subject key identifier: AD:63:64:DD:ED:B2:C2:E9:79:85:BC:C1:5A:7F:EF:6B:D4:E8:CD:4A
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 33D849182ADB13BFA60F68D8B83E518AD049EC42
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a393a3a2f34382d3438203d3e203134363138.roa
Signing time: Fri 25 Apr 2025 00:32:15 +0000
ROA not before: Fri 25 Apr 2025 00:27:15 +0000
ROA not after: Fri 24 Apr 2026 00:32:15 +0000
asID: 14618
IP address blocks: 2a02:5be0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Apr 2025 21:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d8:49:18:2a:db:13:bf:a6:0f:68:d8:b8:3e:51:8a:d0:49:ec:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Apr 25 00:27:15 2025 GMT
Not After : Apr 24 00:32:15 2026 GMT
Subject: CN=AD6364DDEDB2C2E97985BCC15A7FEF6BD4E8CD4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:36:16:21:a7:c4:31:ad:ba:ba:3d:c2:d0:
a6:e8:3e:e4:c9:c4:2b:e0:88:ad:9f:4a:fb:1e:94:
87:07:61:0c:9c:1d:97:9a:bf:cc:cf:1b:ca:ae:a1:
54:b9:8e:9f:02:2d:8b:55:cd:f1:26:b1:d6:59:2d:
28:11:a2:83:9f:5a:21:f6:55:3b:ff:1d:cb:63:53:
0e:9f:bb:e5:61:80:2f:09:d3:39:e9:7e:74:14:13:
c6:b5:ae:bb:8a:c7:cb:8e:4d:d8:1e:39:99:55:bc:
b5:76:96:68:53:a5:1a:a2:d9:dd:d5:bd:ae:3a:b4:
e2:9c:41:ef:8a:8c:b5:ac:a1:57:1b:11:47:fd:2a:
f4:f5:d8:27:0e:ee:b9:4d:94:8a:1f:28:ee:8c:8c:
93:25:2e:c4:7e:be:6b:00:d2:67:6d:94:17:46:03:
5c:65:a9:85:e6:71:35:9d:56:c3:d6:11:68:e9:d8:
87:b9:f0:30:bc:77:13:e4:37:24:b7:77:7e:3b:b8:
d8:69:ed:6a:b2:26:97:68:f6:5f:80:8f:d7:80:3e:
e2:9a:ce:4a:5f:77:25:72:dd:f4:42:5c:2b:e3:04:
2e:44:42:25:84:dc:31:77:a8:67:ea:55:5b:66:b6:
7f:21:eb:4f:9e:a2:d0:1d:49:f7:20:b1:4a:30:4a:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:63:64:DD:ED:B2:C2:E9:79:85:BC:C1:5A:7F:EF:6B:D4:E8:CD:4A
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a393a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:9::/48
Signature Algorithm: sha256WithRSAEncryption
3d:33:68:6b:cb:9f:32:65:4b:23:41:54:5e:06:d2:dd:63:49:
b2:3c:ef:7a:0a:19:93:ab:16:0d:a8:57:3b:25:07:01:08:7f:
28:3a:b6:2e:5f:92:bd:ab:93:75:f0:f3:ec:42:e4:0b:5e:da:
6a:12:db:14:81:e5:c8:54:86:c6:19:03:43:06:8f:12:24:40:
68:60:83:f9:ae:ff:f1:33:a6:9d:78:7d:14:b5:3a:2c:4e:f2:
40:3c:eb:00:f6:e4:b2:66:26:cb:1d:63:2d:bb:f4:81:5b:54:
11:5b:f6:e9:52:c0:98:64:b7:48:5e:7d:27:25:03:73:d6:0f:
78:c2:3b:ba:05:79:bb:f4:a9:de:08:4f:c6:71:11:85:59:5b:
5a:4c:e2:1e:ab:f6:a9:2c:2b:49:61:c9:1d:58:07:c8:7b:0d:
e8:58:0f:ac:c0:73:81:9a:a6:df:96:94:62:f2:81:cd:9a:67:
5a:40:63:25:5e:e4:7f:46:d7:a8:9c:1b:e5:eb:a8:32:c1:42:
df:67:2c:12:36:de:13:d5:a5:87:e4:29:5c:99:44:6c:da:94:
62:7f:18:4e:64:2f:77:c2:40:0a:66:5d:a6:6e:59:6c:6e:94:
ee:57:63:36:1d:0b:63:78:c8:86:0d:e0:2a:0b:67:95:d2:7d:
e1:a2:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:45 2025 by rpki-client