$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa File: EECBCEBE6E3511EABDE26D73C4F9AE02.roa (raw, json) Hash identifier: tiW51zPCEni34tefKfGb0te4DWKoSNtDHrcuOGks1io= Subject key identifier: DB:B2:2D:FB:2C:E2:80:6D:FD:5E:A0:93:BF:D1:54:94:78:27:89:1D Certificate issuer: /CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0 Certificate serial: 0A46 Authority key identifier: CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa Signing time: Tue 24 Jun 2025 19:54:49 +0000 ROA not before: Tue 24 Jun 2025 19:54:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9268 IP address blocks: 103.110.176.0/22 maxlen: 22 202.9.16.0/20 maxlen: 20 202.9.26.0/24 maxlen: 24 202.9.27.0/24 maxlen: 24 2405:db00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A27, serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0 Validity Not Before: Jun 24 19:54:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685b0289-9300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:80:52:4f:50:db:73:28:9f:a2:00:45:64: 9f:81:e4:e0:7d:cc:e5:d8:6a:54:71:07:5c:b7:b5: 66:74:36:c2:0f:dd:88:f3:1e:23:9a:15:b2:7a:45: 23:7f:18:6e:1a:96:e9:58:0a:ef:53:47:7a:29:97: c7:13:62:c3:92:6a:50:23:ef:ea:c9:7d:f4:74:aa: ac:67:44:82:34:1e:43:9f:fa:f9:9f:47:79:9e:6f: 8b:aa:13:f9:88:52:e4:01:55:2c:2c:38:ed:a3:95: 31:b7:7d:50:f9:93:58:84:13:04:7a:2d:f6:60:8a: ba:78:16:4e:79:61:d3:09:8f:67:b2:0a:df:3a:83: 0e:89:40:31:d8:2e:49:de:27:43:59:4c:c9:a0:a3: 02:7c:a3:7b:6d:a2:63:4b:4f:bc:e6:e5:f4:e4:b4: 5e:c5:15:b9:d0:55:55:1a:7c:6c:2d:9e:db:7f:db: 6e:67:32:ad:84:be:d8:4d:62:2f:1c:9a:23:bd:38: 3d:8a:9a:4a:63:6a:56:26:ef:85:78:b2:ec:e1:e9: 43:14:69:57:92:6e:8f:47:cb:83:2d:3d:67:e8:0f: 9b:2f:55:2b:a2:59:af:20:45:e7:91:a4:c6:0f:f6: f1:ad:5c:c9:47:5d:f3:61:b7:df:3b:dd:c4:78:18: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B2:2D:FB:2C:E2:80:6D:FD:5E:A0:93:BF:D1:54:94:78:27:89:1D X509v3 Authority Key Identifier: keyid:CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.176.0/22 202.9.16.0/20 IPv6: 2405:db00::/32 Signature Algorithm: sha256WithRSAEncryption 4a:51:d5:20:2d:ee:ca:94:69:c9:f2:27:96:c2:b3:02:a4:78: 3f:bc:32:74:ad:0a:aa:55:ec:e3:a8:b4:9a:e7:f8:c5:70:14: 19:c5:94:a8:58:81:62:db:08:99:11:0b:7b:65:e8:23:23:16: af:ff:81:20:d9:8e:54:18:85:02:b1:f2:e2:e9:e8:84:da:93: 1f:bb:f3:f3:80:ae:d9:87:78:68:d3:30:45:aa:9e:51:d4:b1: 92:87:bc:16:0d:df:41:01:ee:a7:d1:ef:a1:cb:9e:c7:cb:02: e7:be:27:7f:11:67:89:e4:c8:cb:97:a4:34:a2:01:d5:6d:a9: eb:c7:0f:3d:a3:c7:9b:10:58:cf:fb:b5:f2:f0:70:bf:c9:11: b8:7f:4b:d6:4c:7d:52:97:29:6d:67:b2:fb:87:25:19:98:3d: b4:fb:1f:f7:19:98:29:35:69:c0:6e:63:30:5d:3b:ac:17:db: 22:46:5b:c9:6c:b5:a2:48:97:8e:0a:29:d8:1e:37:58:3c:df: 27:8a:66:d8:b7:58:62:f0:ae:01:25:c7:11:2a:97:48:c1:7c: 66:7d:d7:7b:24:81:e3:67:72:e0:29:1c:71:cc:96:12:6c:c3: f0:38:35:a5:40:1f:d2:73:a1:97:39:5d:54:9b:ec:f3:32:bc: bd:50:d9:10 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBMjcxMTAvBgNVBAUTKENDRjU4MUY0QzMzQ0E0NDQxRTE4MDdFMzk2QzVFRkU3 NUZBODJERDAwHhcNMjUwNjI0MTk1NDQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViMDI4OS05MzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN2AUk9Q23Mon6IARWSfgeTgfczl2GpUcQdct7VmdDbCD92I8x4jmhWyekUj fxhuGpbpWArvU0d6KZfHE2LDkmpQI+/qyX30dKqsZ0SCNB5Dn/r5n0d5nm+LqhP5 iFLkAVUsLDjto5Uxt31Q+ZNYhBMEei32YIq6eBZOeWHTCY9nsgrfOoMOiUAx2C5J 3idDWUzJoKMCfKN7baJjS0+85uX05LRexRW50FVVGnxsLZ7bf9tuZzKthL7YTWIv HJojvTg9ippKY2pWJu+FeLLs4elDFGlXkm6PR8uDLT1n6A+bL1UrolmvIEXnkaTG D/bxrVzJR13zYbffO93EeBiHpwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNuyLfss 4oBt/V6gk7/RVJR4J4kdMB8GA1UdIwQYMBaAFMz1gfTDPKREHhgH45bF7+dfqC3Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUEyNy82NjI1MThCRTZF MzQxMUVBODQxRDQyNkVDNEY5QUUwMi96UFdCOU1NOHBFUWVHQWZqbHNYdjUxLW9M ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQV0I5TU04cEVRZUdBZmpsc1h2NTEtb0xkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFBMjcvNjYyNTE4QkU2RTM0MTFFQTg0MUQ0MjZFQzRGOUFFMDIvRUVDQkNFQkU2 RTM1MTFFQUJERTI2RDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnbrADBATKCRAwDQQCAAIwBwMFACQF2wAwDQYJKoZIhvcN AQELBQADggEBAEpR1SAt7sqUacnyJ5bCswKkeD+8MnStCqpV7OOotJrn+MVwFBnF lKhYgWLbCJkRC3tl6CMjFq//gSDZjlQYhQKx8uLp6ITakx+78/OArtmHeGjTMEWq nlHUsZKHvBYN30EB7qfR76HLnsfLAue+J38RZ4nkyMuXpDSiAdVtqevHDz2jx5sQ WM/7tfLwcL/JEbh/S9ZMfVKXKW1nsvuHJRmYPbT7H/cZmCk1acBuYzBdO6wX2yJG W8lstaJIl44KKdgeN1g83yeKZti3WGLwrgElxxEql0jBfGZ913skgeNncuApHHHM lhJsw/A4NaVAH9JzoZc5XVSb7PMyvL1Q2RA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:12 2025 by rpki-client