This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ZeDeBUck9GiqehHrSIShDu0bXwI.roa File: ZeDeBUck9GiqehHrSIShDu0bXwI.roa (raw, json) Hash identifier: jf7cPcuAW8m+arH/MIMfQO+gMaJDWGIxY7WgyHhzE4U= Subject key identifier: 65:E0:DE:05:47:24:F4:68:AA:7A:11:EB:48:84:A1:0E:ED:1B:5F:02 Certificate issuer: /CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF Certificate serial: 5E Authority key identifier: 86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ZeDeBUck9GiqehHrSIShDu0bXwI.roa Signing time: Thu 01 Jan 2026 01:30:17 +0000 ROA not before: Thu 01 Jan 2026 01:30:17 +0000 ROA not after: Tue 15 Dec 2026 01:30:02 +0000 asID: 9607 IP address blocks: 208.111.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 09:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF Validity Not Before: Jan 1 01:30:17 2026 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=65E0DE054724F468AA7A11EB4884A10EED1B5F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:ec:c7:8d:c6:93:df:5d:de:9d:ec:f2:96: dd:7f:bd:02:66:63:30:1f:68:d1:36:e9:f3:aa:8f: 3f:d9:68:dd:23:50:40:3b:41:43:35:31:2e:35:d0: ec:c6:2e:ca:6c:6d:36:94:14:c2:2a:c4:87:11:91: 07:91:ea:c3:15:5a:a5:e2:c4:86:08:08:aa:fb:68: 8f:45:6c:a4:c7:e6:ba:c1:24:e1:1e:09:45:13:d3: dc:c0:69:89:06:33:3b:82:06:07:cb:0e:73:2d:9a: b8:28:ec:c3:42:a7:2d:bb:a5:f3:ca:15:e3:88:fd: 28:7b:df:36:ac:b3:74:d5:6e:1c:47:cc:30:5c:83: 96:57:25:c9:1d:62:32:2c:f5:d3:6f:1b:77:fc:9c: b6:54:4c:11:96:50:75:cb:5d:1a:ac:33:78:f0:cb: b2:10:a1:96:a0:09:e4:05:04:10:fb:db:4e:47:d8: 60:57:85:84:d4:a5:9e:81:3f:c4:47:a6:d9:79:48: 91:e5:ea:e3:00:4c:24:69:a0:7a:e3:a8:4b:9e:84: 9b:4e:2b:a1:41:9a:96:51:26:ea:df:42:09:e8:69: 5b:83:11:16:31:fd:c4:7b:f2:10:46:5a:16:fb:96: ae:87:55:d8:ae:d1:ec:26:38:7c:35:36:64:f9:10: 98:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:DE:05:47:24:F4:68:AA:7A:11:EB:48:84:A1:0E:ED:1B:5F:02 X509v3 Authority Key Identifier: keyid:86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ZeDeBUck9GiqehHrSIShDu0bXwI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 208.111.48.0/21 Signature Algorithm: sha256WithRSAEncryption 72:c0:97:c3:f9:5c:72:13:9d:6b:05:b4:4d:8d:c6:34:95:ba: f8:78:c8:f6:1d:79:42:98:7b:19:41:38:0c:cd:63:e0:df:46: 3e:6f:a4:35:09:bf:88:25:2e:82:5b:24:8b:0d:61:e4:71:c8: 7e:cb:e8:2c:94:7f:c4:2d:c4:0a:0e:69:28:14:a9:28:1a:6c: f5:53:93:ec:d0:43:17:77:77:fd:90:31:ac:0c:ca:f9:ea:fd: 79:82:de:21:c8:3e:af:6a:38:03:9a:46:9c:96:3b:1a:33:24: b1:f7:73:33:d8:12:3f:6b:7a:a8:72:ff:51:d8:a1:8e:f3:2a: 4f:e1:2d:a1:7d:10:65:59:28:81:44:74:a7:0f:1f:43:8d:4f: ac:00:64:21:b4:78:ad:d1:dc:37:13:c9:f3:95:e3:d8:81:3a: 05:40:29:a8:c7:8a:0e:84:db:4b:3c:99:47:47:d8:38:ac:51: 72:b8:ba:f1:33:12:67:6d:9d:fb:52:cb:3d:96:5f:90:46:66: 9d:63:3c:6d:fc:fb:0c:06:b1:4f:be:e9:3e:82:32:74:f2:48: 69:88:31:62:2f:e1:a3:a8:f2:f4:89:33:d8:1f:3a:7b:27:55: b8:17:aa:b1:e6:0f:ad:f9:0e:c7:53:57:be:f1:22:65:42:18: 42:7c:00:8a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NkEw QkUwMkQ0OTFGMzVBNTYxQ0M0OTA0QkVCN0VCMUFENEVDMkZGMB4XDTI2MDEwMTAx MzAxN1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNjVFMERFMDU0NzI0RjQ2 OEFBN0ExMUVCNDg4NEExMEVFRDFCNUYwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJte7MeNxpPfXd6d7PKW3X+9AmZjMB9o0Tbp86qPP9lo3SNQQDtB QzUxLjXQ7MYuymxtNpQUwirEhxGRB5HqwxVapeLEhggIqvtoj0VspMfmusEk4R4J RRPT3MBpiQYzO4IGB8sOcy2auCjsw0KnLbul88oV44j9KHvfNqyzdNVuHEfMMFyD llclyR1iMiz1028bd/yctlRMEZZQdctdGqwzePDLshChlqAJ5AUEEPvbTkfYYFeF hNSlnoE/xEem2XlIkeXq4wBMJGmgeuOoS56Em04roUGallEm6t9CCehpW4MRFjH9 xHvyEEZaFvuWrodV2K7R7CY4fDU2ZPkQmPsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRl4N4FRyT0aKp6EetIhKEO7RtfAjAfBgNVHSMEGDAWgBSGoL4C1JHzWlYcxJBL 636xrU7C/zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzU0L2hxQy1BdFNSODFwV0hNU1FTLXQtc2ExT3d2OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hxQy1BdFNSODFwV0hNU1FTLXQtc2Ex T3d2OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNTQvWmVEZUJVY2s5R2lxZWhIclNJU2hEdTBiWHdJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9BvMDANBgkqhkiG9w0BAQsFAAOCAQEAcsCXw/lcchOdawW0TY3GNJW6+HjI 9h15Qph7GUE4DM1j4N9GPm+kNQm/iCUuglskiw1h5HHIfsvoLJR/xC3ECg5pKBSp KBps9VOT7NBDF3d3/ZAxrAzK+er9eYLeIcg+r2o4A5pGnJY7GjMksfdzM9gSP2t6 qHL/UdihjvMqT+EtoX0QZVkogUR0pw8fQ41PrABkIbR4rdHcNxPJ85Xj2IE6BUAp qMeKDoTbSzyZR0fYOKxRcri68TMSZ22d+1LLPZZfkEZmnWM8bfz7DAaxT77pPoIy dPJIaYgxYi/ho6jy9Ikz2B86eydVuBeqseYPrfkOx1NXvvEiZUIYQnwAig== -----END CERTIFICATE-----Generated at Tue Jan 13 10:53:51 2026 by rpki-client