
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
File: 7D2D672CDED711F0AB94945E506F56BC.roa (raw, json)
Hash identifier: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=
Subject key identifier: F2:A3:96:81:D7:D3:87:8E:5C:63:EE:78:CE:1B:06:6A:81:F2:1C:48
Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial: 35
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
Signing time: Sun 01 Mar 2026 05:57:35 +0000
ROA not before: Fri 13 Feb 2026 06:25:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 149014
IP address blocks: 45.146.112.0/22 maxlen: 22
45.146.112.0/24 maxlen: 24
45.146.113.0/24 maxlen: 24
45.146.114.0/24 maxlen: 24
45.146.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Validity
Not Before: Feb 13 06:25:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d54f-9756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:d2:03:d1:f9:b1:c5:c3:19:d5:cf:ee:c6:
3d:47:cd:7e:da:01:8b:6f:ed:df:db:8c:53:fb:63:
0e:9f:71:08:74:7e:b8:dd:9d:f9:63:d0:b0:3e:36:
ff:21:2b:05:4f:21:5e:0a:82:e6:ef:0c:21:8e:61:
f6:33:4e:50:9c:98:ef:a2:90:59:ab:5f:0d:65:56:
c6:f8:3d:d9:c0:76:d0:c0:6f:ef:ea:9f:f5:c1:c0:
78:9f:fb:a6:10:e3:5c:82:0f:6d:4c:db:38:82:c3:
d9:7d:aa:79:8a:f5:b1:70:7c:75:66:63:79:8e:53:
b2:57:54:6a:95:1a:9d:f9:06:c5:76:d9:7f:50:64:
5a:ff:81:0d:02:0c:ea:b1:4b:4c:31:a8:87:f9:f3:
b7:e0:fc:35:ab:02:69:83:a7:d4:67:ad:e1:d7:5f:
cb:2d:dd:93:f9:bd:e0:fc:79:d1:52:4a:3f:e1:0a:
ca:8e:d4:f8:70:62:aa:9c:6c:56:7b:2f:90:d5:be:
84:21:4e:1e:c1:37:e5:0a:60:24:ce:bb:3d:0c:33:
f3:69:4a:ec:20:2c:09:78:01:b8:6c:9e:29:53:3e:
ba:af:8f:dc:b8:2a:78:0f:fc:d3:83:fd:34:1c:0b:
01:02:70:fa:65:80:d9:a1:e8:1e:67:80:70:95:a6:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A3:96:81:D7:D3:87:8E:5C:63:EE:78:CE:1B:06:6A:81:F2:1C:48
X509v3 Authority Key Identifier:
keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.146.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:81:ad:19:9c:96:f8:0d:b5:dc:d6:cd:df:e5:dc:87:a3:11:
14:c2:44:5e:05:91:04:ff:36:e6:2d:66:f0:83:52:c7:a8:f9:
68:76:af:ba:d7:95:56:6b:05:46:7e:ad:0c:21:5b:de:3a:9a:
39:9c:b4:61:9d:fc:ec:a7:55:19:2e:cc:58:30:27:45:8b:c4:
55:93:3d:92:ff:47:43:45:55:e5:73:62:f7:2f:7e:ed:6c:63:
dc:9d:05:17:23:41:63:c5:5e:ad:0c:e1:22:c7:21:11:09:9b:
ee:00:de:55:86:89:3b:8b:2a:6b:67:70:f8:46:f7:e8:d9:fa:
9f:55:81:e3:a1:fb:60:64:de:da:51:28:63:8d:d6:20:a9:bb:
96:64:36:ab:90:52:75:e3:11:17:bc:f3:f6:64:eb:d2:19:5c:
cb:ec:7c:6c:52:c7:be:00:3d:6d:31:71:70:b6:d7:4e:60:21:
de:9a:8c:48:8a:26:98:05:d8:83:4d:ff:42:d1:c0:3c:22:2a:
a1:5c:92:ca:52:14:4b:1c:4c:b4:f4:2c:39:8e:8b:ac:7f:c7:
0a:eb:71:db:5e:2b:96:d7:3d:f7:76:41:bb:12:29:01:3b:fa:
31:9c:e7:0a:da:e2:8d:26:4b:6a:cf:0c:bb:54:62:09:d5:02:
d5:c4:0f:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:14 2026 by rpki-client