This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/857/cdvcDd0TjZ_z9GUu5JuxjTQT8ns.roa
File: cdvcDd0TjZ_z9GUu5JuxjTQT8ns.roa (raw, json)
Hash identifier: PncWYoh4nOEX+/+sqvBIt3oSWOcHIwFUBjfCUWqxG3Q=
Subject key identifier: 71:DB:DC:0D:DD:13:8D:9F:F3:F4:65:2E:E4:9B:B1:8D:34:13:F2:7B
Certificate issuer: /CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Certificate serial: 4B
Authority key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/cdvcDd0TjZ_z9GUu5JuxjTQT8ns.roa
Signing time: Wed 03 Dec 2025 06:37:27 +0000
ROA not before: Wed 03 Dec 2025 06:37:27 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 23780
IP address blocks: 49.128.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 12:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Validity
Not Before: Dec 3 06:37:27 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=71DBDC0DDD138D9FF3F4652EE49BB18D3413F27B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:bc:59:27:cb:31:d5:85:d1:7e:77:1a:2f:
2c:71:92:9e:ec:fe:87:bf:27:0e:b8:57:6f:27:42:
d1:e4:63:b6:be:eb:c5:08:f7:89:bf:d3:e0:d4:66:
7d:d7:40:63:28:7e:39:9b:7b:ba:6a:42:93:aa:8f:
e5:8b:d7:d9:37:75:93:ff:6d:af:d4:28:36:9b:94:
b7:d7:9a:d4:91:cd:39:c2:3a:00:fd:7e:e1:71:db:
fe:c5:88:24:a9:93:cf:dc:e7:bb:f1:92:3f:bd:21:
96:f6:c3:34:07:31:aa:1f:b9:9d:dd:b4:27:b4:95:
36:5c:90:d3:e4:2c:cd:11:dd:3a:13:37:9c:db:b6:
d9:66:f8:a8:ea:34:07:60:01:dc:25:d9:15:55:a7:
d4:f3:52:39:38:db:be:0a:aa:2a:20:5a:cc:96:6a:
0f:42:72:61:c1:b3:ff:86:69:47:3a:34:da:80:53:
9e:02:b2:6f:9a:4d:19:ed:e1:69:44:3e:69:b7:0c:
a4:7c:71:98:34:71:13:f1:37:a8:ee:2d:82:5f:fc:
d8:93:1b:04:57:30:e9:7b:c6:f3:34:01:79:3a:a0:
e2:b9:87:da:b4:f7:7d:2f:d6:22:1f:88:a4:29:47:
04:67:1e:0c:62:a6:db:15:8b:a6:a2:e2:e6:17:1c:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:DC:0D:DD:13:8D:9F:F3:F4:65:2E:E4:9B:B1:8D:34:13:F2:7B
X509v3 Authority Key Identifier:
keyid:A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/cdvcDd0TjZ_z9GUu5JuxjTQT8ns.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.96.0/22
Signature Algorithm: sha256WithRSAEncryption
57:2a:86:73:59:2b:33:06:4e:48:a0:69:01:15:97:df:fe:27:
56:b7:d5:ad:49:9e:e2:e4:dd:9d:3f:e2:ed:f9:67:3c:bf:90:
4c:6a:7a:5a:b8:34:ee:25:0a:25:b2:f3:6c:ed:f1:93:d2:e1:
90:9d:ab:06:61:2f:8f:ad:45:b2:26:7b:1e:c2:d6:db:c4:98:
7f:7a:ff:e6:f0:b9:ec:8a:55:3b:3f:d0:1d:f2:67:14:b2:75:
f7:e3:f7:a5:ab:f3:90:ad:54:75:aa:fa:e9:f2:e3:3d:70:a1:
7d:69:0c:5e:84:ad:e1:51:dd:3d:24:13:35:1e:a9:f4:2b:c1:
69:a2:38:3e:f7:ce:aa:97:3f:31:47:81:21:b2:b4:6f:65:90:
2c:bb:5d:a1:28:a5:8c:35:ce:a7:12:99:db:e4:9e:73:ae:7a:
74:79:d5:42:0b:01:63:00:72:03:a7:ca:26:13:ac:32:57:f2:
fe:d5:84:d7:d4:fc:34:42:69:85:11:52:28:a0:2d:99:5f:73:
8e:e8:db:53:a1:0a:56:94:dc:b6:4a:62:dd:30:a8:e3:e4:54:
70:d7:74:7f:3b:44:01:f9:16:cc:17:57:15:25:ac:bf:f7:d0:
ce:84:c6:d4:d9:f9:8f:68:06:a8:0e:bb:63:c9:de:f4:09:bb:
fe:f4:c9:84
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOURF
N0MxMzM4MTIzN0M1Qjg5OEQ1QTI0RjJDOUE2Q0IzQzE5NzFCMB4XDTI1MTIwMzA2
MzcyN1oXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoNzFEQkRDMERERDEzOEQ5
RkYzRjQ2NTJFRTQ5QkIxOEQzNDEzRjI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALVPvFknyzHVhdF+dxovLHGSnuz+h78nDrhXbydC0eRjtr7rxQj3
ib/T4NRmfddAYyh+OZt7umpCk6qP5YvX2Td1k/9tr9QoNpuUt9ea1JHNOcI6AP1+
4XHb/sWIJKmTz9znu/GSP70hlvbDNAcxqh+5nd20J7SVNlyQ0+QszRHdOhM3nNu2
2Wb4qOo0B2AB3CXZFVWn1PNSOTjbvgqqKiBazJZqD0JyYcGz/4ZpRzo02oBTngKy
b5pNGe3haUQ+abcMpHxxmDRxE/E3qO4tgl/82JMbBFcw6XvG8zQBeTqg4rmH2rT3
fS/WIh+IpClHBGceDGKm2xWLpqLi5hcc5KECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRx29wN3RONn/P0ZS7km7GNNBPyezAfBgNVHSMEGDAWgBSp3nwTOBI3xbiY1aJP
LJpss8GXGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODU3L3FkNThFemdTTjhXNG1OV2lUeXlhYkxQQmx4cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FkNThFemdTTjhXNG1OV2lUeXlhYkxQ
Qmx4cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTcvY2R2Y0RkMFRqWl96OUdVdTVKdXhqVFFUOG5zLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAjGAYDANBgkqhkiG9w0BAQsFAAOCAQEAVyqGc1krMwZOSKBpARWX3/4nVrfV
rUme4uTdnT/i7flnPL+QTGp6Wrg07iUKJbLzbO3xk9LhkJ2rBmEvj61FsiZ7HsLW
28SYf3r/5vC57IpVOz/QHfJnFLJ19+P3pavzkK1Udar66fLjPXChfWkMXoSt4VHd
PSQTNR6p9CvBaaI4PvfOqpc/MUeBIbK0b2WQLLtdoSiljDXOpxKZ2+Sec656dHnV
QgsBYwByA6fKJhOsMlfy/tWE19T8NEJphRFSKKAtmV9zjujbU6EKVpTctkpi3TCo
4+RUcNd0fztEAfkWzBdXFSWsv/fQzoTG1Nn5j2gGqA67Y8ne9Am7/vTJhA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:12 2025 by rpki-client