This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa
File: 323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa (raw, json)
Hash identifier: TjbV874XBMp8S2IZrVBVTYPXUStYMsZKMyuXH+6WAKg=
Subject key identifier: 7A:B7:C0:97:3C:F2:87:FC:95:C5:06:90:01:EC:17:14:1E:F9:07:85
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 3B8D8B8455A13AB22808E6339349CFFC8A8F6E42
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa
Signing time: Sat 20 Dec 2025 17:22:50 +0000
ROA not before: Sat 20 Dec 2025 17:17:50 +0000
ROA not after: Sat 19 Dec 2026 17:22:50 +0000
asID: 24322
IP address blocks: 2401:2060:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8d:8b:84:55:a1:3a:b2:28:08:e6:33:93:49:cf:fc:8a:8f:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Dec 20 17:17:50 2025 GMT
Not After : Dec 19 17:22:50 2026 GMT
Subject: CN=7AB7C0973CF287FC95C5069001EC17141EF90785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:d4:f9:1d:07:24:cc:5f:c4:38:3c:14:ee:
18:9f:f8:af:d2:e2:50:a7:fb:91:02:fe:1d:ce:98:
1d:70:29:74:52:8d:50:05:cf:44:a3:c3:ba:8c:ea:
c5:da:ae:19:d4:9c:08:80:4f:d3:63:52:f5:b4:11:
76:5d:ba:6f:7a:c8:4d:ff:4f:0c:52:65:67:74:1f:
e2:ee:f5:f2:aa:8d:d2:aa:51:1f:ce:ac:4d:49:8b:
b7:3a:98:a7:5b:cb:df:80:3e:51:71:72:cc:bf:1e:
d3:20:9c:74:b8:5b:d0:4f:e5:00:36:2e:36:c2:9d:
b4:f0:22:9e:12:19:bf:53:54:f2:2b:0f:6f:fb:d8:
14:3b:65:da:b7:04:34:b6:21:7b:76:45:58:ee:d2:
70:59:97:a0:e0:75:dc:f3:5d:f4:9a:c7:6a:5b:ad:
00:88:fa:6e:9c:b6:b0:f6:e6:43:e4:60:02:78:cd:
fe:38:ec:85:7e:ed:d0:0b:93:2a:f2:08:b0:43:d4:
6f:d6:3b:87:43:2f:bc:8f:35:79:c6:21:b0:23:2b:
76:1d:72:35:f8:e0:bc:5a:e2:32:6e:45:5b:24:d9:
a2:de:c0:e9:e1:2c:17:f6:ae:a0:ef:b5:dd:28:03:
d5:61:af:24:79:6d:e4:7b:3b:28:37:eb:0a:0a:21:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:C0:97:3C:F2:87:FC:95:C5:06:90:01:EC:17:14:1E:F9:07:85
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:2000::/48
Signature Algorithm: sha256WithRSAEncryption
9c:b3:e1:27:9d:3d:33:01:e3:75:89:52:ff:1f:1e:c8:00:89:
9f:5a:04:76:de:9b:7d:7c:60:08:74:ef:20:37:54:25:f2:d3:
57:3e:eb:36:39:a1:6b:49:8e:b0:42:b8:15:2d:f2:6e:d6:5b:
64:e6:fd:2d:eb:dc:64:96:37:d8:05:f7:76:24:5d:c9:80:0e:
48:ba:45:af:7b:d1:c7:41:38:d0:55:80:ee:7d:eb:45:84:09:
a7:dd:a1:9f:e6:db:8f:27:26:dd:50:2a:bb:b8:76:4e:44:0d:
52:ac:8a:ba:16:be:f1:ae:3d:9a:23:d6:ed:c5:66:ea:1c:c4:
ee:39:49:d8:2d:fc:cb:d1:4d:6d:e6:07:1d:9f:c6:86:66:1a:
a3:a3:ba:d0:3e:9c:d4:cf:fc:60:82:15:7c:4f:c5:33:36:20:
8e:c2:9d:d4:02:a1:f9:3b:4d:02:be:67:d7:fc:ad:f2:d6:07:
76:eb:8b:0a:ad:31:4b:40:37:73:2f:79:b5:b2:10:ce:7a:7f:
20:a1:1d:b6:6b:e3:71:de:07:6a:78:e0:cd:99:b3:13:84:50:
2e:d8:bd:84:6b:45:e1:c9:5e:49:e8:bd:f4:6c:54:6c:82:99:
07:b2:3d:2b:f6:d4:fa:5d:c8:df:b5:dc:c5:45:6d:0a:30:96:
5d:e1:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:42:01 2025 by rpki-client