
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa
File: EECBCEBE6E3511EABDE26D73C4F9AE02.roa (raw, json)
Hash identifier: r1pD0Q+gqTEwuW8+FxM3DxEOTWIuAGXXddrFG01zuI0=
Subject key identifier: 8A:E1:21:20:AC:E5:6D:AD:16:5A:9E:D8:2D:41:1D:91:D2:45:E1:8E
Certificate issuer: /CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Certificate serial: 0ACB
Authority key identifier: CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:00:23 +0000
ROA not before: Tue 24 Jun 2025 19:54:49 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 9268
IP address blocks: 103.110.176.0/22 maxlen: 22
202.9.16.0/20 maxlen: 20
202.9.26.0/24 maxlen: 24
202.9.27.0/24 maxlen: 24
2405:db00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2763 (0xacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111A27, serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Validity
Not Before: Jun 24 19:54:49 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a44677-cf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:2f:e3:95:63:55:41:e1:72:bd:7b:0a:bc:
0b:c9:35:ad:d6:19:90:4c:dc:fc:64:49:b2:ed:fa:
0d:dd:a2:c4:30:97:96:9b:9b:dd:e5:5b:47:54:e2:
f1:a4:f6:a7:aa:6e:b0:80:43:50:03:56:18:4f:f2:
46:f0:75:51:c6:c9:89:b8:d1:67:b7:47:b8:8c:77:
3a:53:7d:80:5a:46:fd:4c:9c:d9:86:c9:62:02:4b:
a2:60:30:c6:f5:64:ee:ba:45:ad:a7:e8:fb:90:13:
f6:a5:b8:10:c2:f6:ae:bd:c3:b5:5f:5c:9e:32:bc:
0b:86:3e:b4:23:a4:94:31:34:0a:88:6e:9a:05:b1:
ee:9e:84:8a:bd:b5:27:12:e5:5f:9d:cd:79:04:37:
70:74:c1:33:1f:fd:0b:52:68:e9:b6:70:73:1c:1f:
ea:58:ea:1e:b4:6f:a7:9c:45:75:03:90:89:d5:04:
f6:2a:3a:15:97:7a:2b:48:99:55:09:db:70:6f:21:
b1:8f:df:45:e6:18:f1:90:64:07:e9:a7:ef:c0:12:
77:b8:d1:a4:b9:d5:f9:22:05:63:bd:92:2c:82:af:
a6:f0:8c:d2:2d:ad:b7:ca:46:16:7d:5e:f4:0e:7d:
ac:bc:1a:87:86:cb:c3:72:e3:27:aa:38:11:cd:56:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:21:20:AC:E5:6D:AD:16:5A:9E:D8:2D:41:1D:91:D2:45:E1:8E
X509v3 Authority Key Identifier:
keyid:CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.176.0/22
202.9.16.0/20
IPv6:
2405:db00::/32
Signature Algorithm: sha256WithRSAEncryption
31:dd:fc:c0:c3:d6:ab:1e:db:18:e5:ba:47:dd:16:8d:bd:79:
4e:32:57:a6:11:ce:19:50:29:b8:a5:ed:80:34:c8:3e:2c:56:
4c:3b:a2:2b:ac:44:30:02:45:3b:43:3b:23:44:3c:db:81:2d:
17:00:b3:02:bb:4b:1e:4f:36:d8:e3:da:0a:73:c6:4b:e0:b4:
2f:9e:17:d5:b6:79:6e:08:69:6d:92:d8:d6:e3:ae:ec:79:9b:
06:fd:68:6e:8b:a7:b5:ff:8a:e0:fa:22:6d:e1:3d:81:00:73:
ee:b9:5f:d0:30:36:29:d5:25:3a:4a:31:b2:a1:76:9f:71:3b:
8c:38:0d:9c:fc:71:9f:a8:72:7d:79:cb:b7:1f:0c:95:c3:a1:
88:90:9a:1e:83:51:d8:51:5d:16:85:57:47:7b:99:59:32:1c:
47:24:a9:17:68:4d:20:67:0d:b3:69:37:d1:db:77:48:73:be:
97:47:a4:51:f1:26:62:23:81:75:c5:e3:cd:2d:5a:73:43:cb:
5b:57:3b:06:50:7a:2c:66:28:8b:26:c9:c4:81:8d:d9:2d:00:
7c:e3:dd:68:40:3d:b8:04:4e:ca:96:f3:b2:c2:b9:17:a0:c4:
38:3b:ee:72:19:15:34:46:5f:0c:6c:4f:52:ad:9c:a5:02:cc:
8c:bd:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:56 2026 by rpki-client