Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a393a3a2f34382d3438203d3e203136353039.roa
File: 326130323a356265303a393a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: hf5GLbkblN1TfAomPkEsgQ0+GQcIzcoCvfh06uPtZSA=
Subject key identifier: 2C:B0:80:07:5B:11:6D:C0:A8:3F:36:BD:46:1A:D8:A2:1A:58:96:DE
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 0FF180137555771227D6D542BEE7B28A5D512D89
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a393a3a2f34382d3438203d3e203136353039.roa
Signing time: Fri 18 Apr 2025 19:29:45 +0000
ROA not before: Fri 18 Apr 2025 19:24:45 +0000
ROA not after: Fri 17 Apr 2026 19:29:45 +0000
asID: 16509
IP address blocks: 2a02:5be0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Apr 2025 21:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f1:80:13:75:55:77:12:27:d6:d5:42:be:e7:b2:8a:5d:51:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Apr 18 19:24:45 2025 GMT
Not After : Apr 17 19:29:45 2026 GMT
Subject: CN=2CB080075B116DC0A83F36BD461AD8A21A5896DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f8:79:e7:2b:84:a7:2d:b6:aa:4a:fd:c8:8b:
9e:7c:48:91:ad:b1:b6:05:ce:62:d0:5c:85:42:76:
26:1d:e6:02:84:91:66:15:62:09:4c:bc:09:e0:19:
97:6b:b9:84:8e:33:ac:18:ca:d9:10:a4:69:33:a2:
dc:81:c3:82:b2:6b:26:34:d9:92:0c:31:ab:f5:b1:
1c:18:7d:d3:ed:57:89:4a:8a:ef:a8:fc:2b:c4:d5:
55:ac:b1:6a:ac:1c:3c:89:2e:a9:06:47:cd:cc:34:
ca:01:69:9a:9f:17:e1:13:ba:66:bf:19:4d:7d:43:
7b:fa:b7:d7:db:11:49:53:56:5b:e9:98:8e:96:40:
9d:ce:45:c3:7e:3d:ba:98:c0:c8:de:ad:8e:fb:cc:
51:1f:2c:22:77:42:03:ac:5d:19:4c:f2:85:c5:43:
be:5e:d7:00:86:47:b3:de:0b:27:ee:46:a4:9d:fd:
44:8d:24:47:e7:ec:97:09:24:8c:91:54:7e:29:7d:
7d:a0:95:d6:9a:70:60:d8:24:de:8b:f0:4a:ae:f6:
96:f7:d3:3a:0d:93:d0:88:73:fa:7a:f9:0a:6e:29:
85:5c:ff:e4:40:ef:ab:71:96:7b:6e:1f:eb:3f:37:
29:07:f9:3e:4b:ff:98:cb:b6:5b:0e:40:15:fa:5f:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:80:07:5B:11:6D:C0:A8:3F:36:BD:46:1A:D8:A2:1A:58:96:DE
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a393a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:9::/48
Signature Algorithm: sha256WithRSAEncryption
8e:3d:11:d6:80:94:c8:f5:92:51:fd:89:c9:5e:a8:bc:81:8d:
bf:8d:35:fc:f5:10:93:3d:71:90:68:06:ff:6a:77:0f:45:c2:
4d:18:b8:20:a1:79:e0:26:ae:5a:7f:db:08:21:c3:83:db:08:
f0:39:7c:7f:df:c2:4f:05:96:ec:9b:cb:0b:4b:43:dd:5c:66:
76:a9:76:25:ba:09:d2:d6:65:94:39:87:92:6b:a5:43:70:29:
70:58:4a:93:94:7a:f3:f7:de:37:5b:93:1e:af:51:8b:ec:0d:
16:85:7f:3a:95:b4:5d:e2:e3:82:27:62:e5:e0:f2:1a:ee:eb:
ab:7f:85:12:f7:1d:5c:e0:6f:77:77:49:d8:d6:d6:48:57:a2:
c6:6e:45:27:3c:d4:5a:d6:a2:00:4d:f4:08:7d:1d:5b:b9:f1:
97:72:23:41:71:81:a8:14:20:50:85:35:04:2f:15:1b:cd:a9:
41:15:c4:77:bf:73:e3:ad:52:e8:67:70:52:0d:83:3c:2a:b7:
3d:17:22:89:84:33:54:f6:27:f8:f1:b8:28:de:56:b8:ca:3c:
be:f1:1e:96:21:8f:53:6b:4f:4c:b7:dd:43:2f:a4:4d:2d:86:
28:37:1a:f4:ff:1d:d0:c0:99:a7:6c:78:8a:01:37:8f:11:fc:
3d:9b:a7:43
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUD/GAE3VVdxIn1tVCvueyil1RLYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNTA0MTgxOTI0NDVaFw0yNjA0MTcxOTI5NDVaMDMxMTAvBgNV
BAMTKDJDQjA4MDA3NUIxMTZEQzBBODNGMzZCRDQ2MUFEOEEyMUE1ODk2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx+HnnK4SnLbaqSv3Ii558SJGt
sbYFzmLQXIVCdiYd5gKEkWYVYglMvAngGZdruYSOM6wYytkQpGkzotyBw4KyayY0
2ZIMMav1sRwYfdPtV4lKiu+o/CvE1VWssWqsHDyJLqkGR83MNMoBaZqfF+ETuma/
GU19Q3v6t9fbEUlTVlvpmI6WQJ3ORcN+PbqYwMjerY77zFEfLCJ3QgOsXRlM8oXF
Q75e1wCGR7PeCyfuRqSd/USNJEfn7JcJJIyRVH4pfX2gldaacGDYJN6L8Equ9pb3
0zoNk9CIc/p6+QpuKYVc/+RA76txlntuH+s/NykH+T5L/5jLtlsOQBX6X+TpAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQULLCAB1sRbcCoPza9RhrYohpYlt4wHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUH
MAuGcXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzMvMzI2MTMwMzIzYTM1NjI2NTMwM2EzOTNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDMxMzYzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqAlvgAAkwDQYJKoZIhvcNAQEL
BQADggEBAI49EdaAlMj1klH9icleqLyBjb+NNfz1EJM9cZBoBv9qdw9Fwk0YuCCh
eeAmrlp/2wghw4PbCPA5fH/fwk8FluybywtLQ91cZnapdiW6CdLWZZQ5h5JrpUNw
KXBYSpOUevP33jdbkx6vUYvsDRaFfzqVtF3i44InYuXg8hru66t/hRL3HVzgb3d3
SdjW1khXosZuRSc81FrWogBN9Ah9HVu58ZdyI0FxgagUIFCFNQQvFRvNqUEVxHe/
c+OtUuhncFINgzwqtz0XIomEM1T2J/jxuCjeVrjKPL7xHpYhj1NrT0y33UMvpE0t
hig3GvT/HdDAmadseIoBN48R/D2bp0M=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:02:56 2025 by rpki-client