Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
File:                     7D2D672CDED711F0AB94945E506F56BC.roa (raw, json)
Hash identifier:          I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=
Subject key identifier:   F2:A3:96:81:D7:D3:87:8E:5C:63:EE:78:CE:1B:06:6A:81:F2:1C:48
Certificate issuer:       /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial:       35
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
Signing time:             Sun 01 Mar 2026 05:57:35 +0000
ROA not before:           Fri 13 Feb 2026 06:25:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149014
IP address blocks:        45.146.112.0/22 maxlen: 22
                          45.146.112.0/24 maxlen: 24
                          45.146.113.0/24 maxlen: 24
                          45.146.114.0/24 maxlen: 24
                          45.146.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
        Validity
            Not Before: Feb 13 06:25:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d54f-9756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:d2:03:d1:f9:b1:c5:c3:19:d5:cf:ee:c6:
                    3d:47:cd:7e:da:01:8b:6f:ed:df:db:8c:53:fb:63:
                    0e:9f:71:08:74:7e:b8:dd:9d:f9:63:d0:b0:3e:36:
                    ff:21:2b:05:4f:21:5e:0a:82:e6:ef:0c:21:8e:61:
                    f6:33:4e:50:9c:98:ef:a2:90:59:ab:5f:0d:65:56:
                    c6:f8:3d:d9:c0:76:d0:c0:6f:ef:ea:9f:f5:c1:c0:
                    78:9f:fb:a6:10:e3:5c:82:0f:6d:4c:db:38:82:c3:
                    d9:7d:aa:79:8a:f5:b1:70:7c:75:66:63:79:8e:53:
                    b2:57:54:6a:95:1a:9d:f9:06:c5:76:d9:7f:50:64:
                    5a:ff:81:0d:02:0c:ea:b1:4b:4c:31:a8:87:f9:f3:
                    b7:e0:fc:35:ab:02:69:83:a7:d4:67:ad:e1:d7:5f:
                    cb:2d:dd:93:f9:bd:e0:fc:79:d1:52:4a:3f:e1:0a:
                    ca:8e:d4:f8:70:62:aa:9c:6c:56:7b:2f:90:d5:be:
                    84:21:4e:1e:c1:37:e5:0a:60:24:ce:bb:3d:0c:33:
                    f3:69:4a:ec:20:2c:09:78:01:b8:6c:9e:29:53:3e:
                    ba:af:8f:dc:b8:2a:78:0f:fc:d3:83:fd:34:1c:0b:
                    01:02:70:fa:65:80:d9:a1:e8:1e:67:80:70:95:a6:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A3:96:81:D7:D3:87:8E:5C:63:EE:78:CE:1B:06:6A:81:F2:1C:48
            X509v3 Authority Key Identifier:
                keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:81:ad:19:9c:96:f8:0d:b5:dc:d6:cd:df:e5:dc:87:a3:11:
         14:c2:44:5e:05:91:04:ff:36:e6:2d:66:f0:83:52:c7:a8:f9:
         68:76:af:ba:d7:95:56:6b:05:46:7e:ad:0c:21:5b:de:3a:9a:
         39:9c:b4:61:9d:fc:ec:a7:55:19:2e:cc:58:30:27:45:8b:c4:
         55:93:3d:92:ff:47:43:45:55:e5:73:62:f7:2f:7e:ed:6c:63:
         dc:9d:05:17:23:41:63:c5:5e:ad:0c:e1:22:c7:21:11:09:9b:
         ee:00:de:55:86:89:3b:8b:2a:6b:67:70:f8:46:f7:e8:d9:fa:
         9f:55:81:e3:a1:fb:60:64:de:da:51:28:63:8d:d6:20:a9:bb:
         96:64:36:ab:90:52:75:e3:11:17:bc:f3:f6:64:eb:d2:19:5c:
         cb:ec:7c:6c:52:c7:be:00:3d:6d:31:71:70:b6:d7:4e:60:21:
         de:9a:8c:48:8a:26:98:05:d8:83:4d:ff:42:d1:c0:3c:22:2a:
         a1:5c:92:ca:52:14:4b:1c:4c:b4:f4:2c:39:8e:8b:ac:7f:c7:
         0a:eb:71:db:5e:2b:96:d7:3d:f7:76:41:bb:12:29:01:3b:fa:
         31:9c:e7:0a:da:e2:8d:26:4b:6a:cf:0c:bb:54:62:09:d5:02:
         d5:c4:0f:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:14 2026 by rpki-client