This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/gfDxSWs2oC6tlsPi1OEsIPDvtrM.roa
File: gfDxSWs2oC6tlsPi1OEsIPDvtrM.roa (raw, json)
Hash identifier: VEYxpiNijGi/MdFGKVeJvQ6OZseih8fflAPlmux5V4w=
Subject key identifier: 81:F0:F1:49:6B:36:A0:2E:AD:96:C3:E2:D4:E1:2C:20:F0:EF:B6:B3
Certificate issuer: /CN=32DB70FFB8A72289F56450768644658C54AA64E9
Certificate serial: 49
Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/gfDxSWs2oC6tlsPi1OEsIPDvtrM.roa
Signing time: Thu 11 Dec 2025 06:46:38 +0000
ROA not before: Thu 11 Dec 2025 06:46:38 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 18135
IP address blocks: 203.211.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 12:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9
Validity
Not Before: Dec 11 06:46:38 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=81F0F1496B36A02EAD96C3E2D4E12C20F0EFB6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:ef:9f:92:24:d6:c0:54:be:2e:58:0e:ec:
ef:c8:73:7e:25:59:81:0e:e5:d3:7d:26:70:a2:51:
89:4d:d0:4d:c3:1b:24:9d:88:65:93:b9:62:4d:ce:
57:15:5c:fc:ca:ea:d9:8c:a0:8a:0b:ad:73:8f:21:
41:f6:a1:f0:bc:d8:c3:9c:bb:d5:63:c9:ab:3b:62:
27:bc:5e:44:35:25:91:7a:36:5d:58:5c:e6:86:35:
67:ef:21:94:0c:63:1e:5f:00:ba:1e:e4:0e:0b:cb:
63:b5:b3:0b:4e:d1:fe:b7:7b:83:b3:21:2c:66:76:
50:98:59:b8:a6:8b:3c:13:bd:5e:f9:ee:db:e5:8a:
43:78:b4:b1:7f:9a:df:b7:21:f4:ee:a8:6b:39:5f:
ef:32:82:25:57:07:6b:3d:19:17:db:11:68:fa:b6:
0d:0c:4b:4e:71:fa:3f:b8:34:59:96:56:57:b9:aa:
90:b2:21:31:1a:af:59:7a:63:a6:5e:55:14:f4:3a:
2b:a3:73:56:49:12:cc:28:1c:43:7c:bd:45:fd:ce:
f5:52:f8:45:c9:97:d3:fe:e5:c1:ce:a7:cc:66:f6:
ad:27:11:2a:29:57:7b:b7:f7:b7:f5:12:27:58:5d:
06:6a:3a:92:e3:8d:c7:b3:9b:64:ad:37:f6:6f:29:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F0:F1:49:6B:36:A0:2E:AD:96:C3:E2:D4:E1:2C:20:F0:EF:B6:B3
X509v3 Authority Key Identifier:
keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/gfDxSWs2oC6tlsPi1OEsIPDvtrM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.211.32.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:fe:bb:d5:2f:30:10:c5:2a:de:a4:6f:01:83:49:01:d6:78:
da:9d:40:71:31:c1:06:22:72:52:11:f6:89:9b:d9:ee:4f:2c:
ac:57:97:82:1c:88:51:bf:6d:a6:bc:09:0d:56:5f:d9:0d:cf:
d9:46:e1:85:34:7f:c1:7d:a5:c9:f6:20:3f:77:78:ce:8c:8f:
dd:0c:d9:2a:f2:89:65:29:62:4d:68:53:78:9d:ba:29:f6:b6:
f7:dd:2a:2f:9c:6e:e6:87:51:2f:de:bc:6d:38:c8:82:95:7d:
b5:e0:f2:58:10:70:37:3a:67:cc:bd:fa:7c:39:42:a1:31:d3:
1d:7b:05:e0:37:91:0d:29:6c:2f:e9:54:ae:1d:2a:d1:18:33:
b0:83:85:10:25:81:4b:94:17:d4:e9:a9:48:66:d6:32:f8:99:
00:13:8c:ba:86:2e:ac:2a:08:0c:a0:0a:30:e5:2b:2a:10:93:
34:1a:1e:5f:f4:ed:68:78:b6:24:d3:1c:ac:17:b5:f0:b3:43:
53:c7:b3:31:5c:5b:f0:fd:20:95:50:31:56:ec:08:16:c4:72:
ea:a1:d3:bc:b1:b9:f8:c3:f2:71:b5:55:1a:3f:bd:44:d8:19:
45:ad:80:1e:d8:6a:dc:74:8c:e5:68:12:34:f6:5c:59:79:f3:
5f:1b:ee:a3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMkRC
NzBGRkI4QTcyMjg5RjU2NDUwNzY4NjQ0NjU4QzU0QUE2NEU5MB4XDTI1MTIxMTA2
NDYzOFoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoODFGMEYxNDk2QjM2QTAy
RUFEOTZDM0UyRDRFMTJDMjBGMEVGQjZCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMA675+SJNbAVL4uWA7s78hzfiVZgQ7l030mcKJRiU3QTcMbJJ2I
ZZO5Yk3OVxVc/Mrq2Yygigutc48hQfah8LzYw5y71WPJqztiJ7xeRDUlkXo2XVhc
5oY1Z+8hlAxjHl8Auh7kDgvLY7WzC07R/rd7g7MhLGZ2UJhZuKaLPBO9Xvnu2+WK
Q3i0sX+a37ch9O6oazlf7zKCJVcHaz0ZF9sRaPq2DQxLTnH6P7g0WZZWV7mqkLIh
MRqvWXpjpl5VFPQ6K6NzVkkSzCgcQ3y9Rf3O9VL4RcmX0/7lwc6nzGb2rScRKilX
e7f3t/USJ1hdBmo6kuONx7ObZK039m8p1McCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSB8PFJazagLq2Ww+LU4Swg8O+2szAfBgNVHSMEGDAWgBQy23D/uKciifVkUHaG
RGWMVKpk6TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjk2L010dHdfN2luSW9uMVpGQjJoa1JsakZTcVpPay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL010dHdfN2luSW9uMVpGQjJoa1JsakZT
cVpPay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82OTYvZ2ZEeFNXczJvQzZ0bHNQaTFPRXNJUER2dHJNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMvTIDANBgkqhkiG9w0BAQsFAAOCAQEAK/671S8wEMUq3qRvAYNJAdZ42p1A
cTHBBiJyUhH2iZvZ7k8srFeXghyIUb9tprwJDVZf2Q3P2UbhhTR/wX2lyfYgP3d4
zoyP3QzZKvKJZSliTWhTeJ26Kfa2990qL5xu5odRL968bTjIgpV9teDyWBBwNzpn
zL36fDlCoTHTHXsF4DeRDSlsL+lUrh0q0RgzsIOFECWBS5QX1OmpSGbWMviZABOM
uoYurCoIDKAKMOUrKhCTNBoeX/TtaHi2JNMcrBe18LNDU8ezMVxb8P0glVAxVuwI
FsRy6qHTvLG5+MPycbVVGj+9RNgZRa2AHthq3HSM5WgSNPZcWXnzXxvuow==
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:40 2025 by rpki-client