This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/857/Ih8EP5titRoVwAfML69FjWFe3vc.roa
File: Ih8EP5titRoVwAfML69FjWFe3vc.roa (raw, json)
Hash identifier: +jH9rox/FOpRBRpJi7llefBDeJGKFiAQCMQQtDc+PPs=
Subject key identifier: 22:1F:04:3F:9B:62:B5:1A:15:C0:07:CC:2F:AF:45:8D:61:5E:DE:F7
Certificate issuer: /CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Certificate serial: 4A
Authority key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/Ih8EP5titRoVwAfML69FjWFe3vc.roa
Signing time: Wed 03 Dec 2025 06:37:24 +0000
ROA not before: Wed 03 Dec 2025 06:37:24 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 23780
IP address blocks: 49.128.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 12:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Validity
Not Before: Dec 3 06:37:24 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=221F043F9B62B51A15C007CC2FAF458D615EDEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:4f:e5:8d:d1:e2:20:07:32:99:7f:15:22:
b1:f3:99:16:f7:89:1d:0f:fd:ed:94:c7:2a:81:ac:
91:01:1b:92:45:6b:65:54:5d:2b:cf:a0:8f:c2:8a:
49:25:87:bf:13:12:9a:a3:67:a0:8f:8b:0f:3c:87:
74:6a:34:69:24:71:03:35:61:ce:c6:ff:38:d7:9e:
f7:f3:f4:99:30:56:8e:09:f3:b1:3d:1d:6f:7c:d4:
1e:0e:70:48:cb:61:57:99:20:11:79:85:2b:b5:1a:
23:ad:8f:d4:08:1a:a1:7a:2f:a9:4b:17:71:a0:4d:
48:10:61:b5:cc:86:a7:e6:fa:bf:b9:f2:e2:cf:e6:
37:86:7b:39:35:33:c6:4c:79:d5:37:46:c2:3b:d8:
d6:8c:fd:72:96:32:ab:9d:b4:2d:d6:13:fa:8e:57:
9c:55:9d:62:53:2b:31:54:72:27:d4:ad:ef:b5:cc:
be:61:07:15:8f:aa:63:b5:43:0b:ee:17:c2:7f:8f:
b6:20:e0:2b:22:10:82:4c:ae:61:fc:7c:17:b0:85:
66:9d:9a:7a:64:c8:7f:f1:a2:fe:43:9c:a3:62:ef:
2c:3e:08:73:64:c6:0c:ec:db:bc:69:6e:da:86:0a:
3a:e8:ae:96:27:80:4d:ef:8b:5c:36:cd:89:f8:f3:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:04:3F:9B:62:B5:1A:15:C0:07:CC:2F:AF:45:8D:61:5E:DE:F7
X509v3 Authority Key Identifier:
keyid:A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/Ih8EP5titRoVwAfML69FjWFe3vc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.24.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:d9:8e:69:3f:83:da:d0:ae:b4:44:f0:ae:06:42:41:32:74:
ad:9f:a8:2b:93:fd:ea:62:ad:a6:a5:08:91:a0:76:9e:b1:8c:
ac:1f:91:03:62:82:74:6b:a7:b5:3f:7e:46:c2:4a:9a:a6:fa:
07:b9:e3:73:cb:aa:47:db:81:ca:3a:ed:bc:ac:9f:22:96:bf:
5c:9c:d0:0b:21:86:a8:52:2d:9f:63:17:4a:79:6d:66:04:1a:
c0:3f:bd:84:3b:75:15:49:10:0c:01:7a:ba:97:38:ab:81:03:
d3:25:59:15:44:fa:64:4e:d1:8f:9c:92:23:4f:5f:84:df:c2:
39:c7:8c:de:2e:7a:6f:01:0b:90:bf:d6:84:4a:85:55:6e:4e:
a1:df:6a:7f:3d:7a:68:f0:69:48:91:cc:77:1e:43:37:23:2c:
e4:33:fe:b5:fe:2f:45:a0:4a:ca:b9:a0:e1:f3:71:d3:81:67:
23:e0:1a:9d:2a:6f:6a:c2:c8:f9:fb:7b:96:1b:78:58:30:aa:
03:04:14:b5:8f:b7:ab:1c:ee:c4:3f:c4:53:88:c1:69:4e:a8:
5d:07:cd:7c:a0:2b:6c:dc:9a:2c:bd:77:d8:84:3c:fb:f4:df:
b2:1d:a6:75:7c:33:fa:a1:fc:fe:5f:b2:bc:22:a1:25:9d:11:
c5:ee:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:17 2025 by rpki-client