This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2-RO9o-Zfno-QObtiUbtxZ9niXE.roa
File: 2-RO9o-Zfno-QObtiUbtxZ9niXE.roa (raw, json)
Hash identifier: GbeEO6reF1gl+p236REvb82fManCNV/yTxPDSVayjbI=
Subject key identifier: DB:E4:4E:F6:8F:99:7E:7A:3E:40:E6:ED:89:46:ED:C5:9F:67:89:71
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 067E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2-RO9o-Zfno-QObtiUbtxZ9niXE.roa
Signing time: Mon 01 Dec 2025 02:06:04 +0000
ROA not before: Mon 01 Dec 2025 02:06:04 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 2516
IP address blocks: 118.159.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 06:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 1 02:06:04 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=DBE44EF68F997E7A3E40E6ED8946EDC59F678971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:67:3b:e8:75:ec:51:24:ce:fb:a1:d4:d5:
13:78:2d:22:e8:2b:3e:f1:62:9e:c2:c7:60:09:aa:
ca:b1:3c:e2:e6:13:40:07:e8:c9:6a:13:33:27:0a:
72:63:ae:63:12:e5:73:e6:2f:dd:ae:10:cf:c6:ee:
74:8d:09:9d:a8:ba:4a:9f:cb:80:4b:90:76:0a:40:
fe:76:c2:6f:9c:e8:a6:d3:c6:17:32:0b:bc:e5:78:
fe:7a:4e:92:a4:93:e7:ce:af:66:70:20:52:6b:d4:
eb:fd:d9:15:b5:0c:8a:44:71:07:df:d6:49:a4:22:
7b:86:58:30:e6:09:e4:6e:ba:be:fe:54:79:fb:17:
8f:83:77:e3:d6:e6:48:11:3a:23:3b:b4:2d:ca:80:
8e:7e:bb:4d:4f:f2:db:68:fb:f3:fb:04:e0:9a:ac:
6e:db:b3:e4:92:1c:2b:c9:e4:07:b7:39:1e:b3:b9:
ae:7b:79:80:dd:af:d8:ec:44:47:cd:1a:f2:d4:17:
38:47:22:82:80:87:fa:07:ea:ae:a9:17:8d:fe:41:
aa:4c:da:94:e6:03:3f:27:25:f1:26:82:0c:69:df:
aa:6b:9b:84:19:6c:e3:9e:24:26:02:36:9c:76:6f:
b9:6f:99:61:3d:f4:ea:70:e9:39:b9:37:48:71:a2:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E4:4E:F6:8F:99:7E:7A:3E:40:E6:ED:89:46:ED:C5:9F:67:89:71
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2-RO9o-Zfno-QObtiUbtxZ9niXE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.159.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:99:a5:be:90:aa:ea:9d:98:7d:cc:87:cf:f8:54:19:80:58:
48:9e:3f:13:83:22:6f:5c:45:e4:94:b5:88:d0:26:82:9b:9e:
60:a0:30:8d:26:4c:c8:3a:65:5d:cb:3e:44:f4:62:27:2e:46:
fc:d1:ab:30:f2:97:64:0b:ee:7c:c2:94:2b:7e:aa:16:db:58:
5a:eb:13:c7:38:b9:39:d6:61:ef:6a:67:63:75:ef:9c:c7:e6:
9d:fc:65:57:61:7f:a9:27:43:95:22:92:8d:9f:8f:49:35:09:
0e:f6:1d:99:09:82:08:c8:d9:72:74:f6:26:2b:d8:1c:d0:45:
55:12:e9:d8:0c:c7:d9:75:20:0f:2d:a5:eb:36:ec:a6:ef:86:
2f:5b:2e:bd:ca:42:17:d7:d0:bd:64:a6:3b:96:c6:34:66:9b:
16:d2:67:12:4c:3b:11:d8:32:7e:f6:8d:da:0c:33:09:19:6d:
2b:1a:8a:4e:b4:f8:b6:d8:75:f9:1a:c4:53:ca:7b:7e:eb:2b:
7e:4c:5a:b6:f2:f3:27:06:1c:2d:0f:dd:73:e5:20:a6:fc:f8:
d6:9e:1b:c0:91:28:65:6a:5c:b9:39:ba:06:c5:36:ee:ad:86:
02:96:4f:c1:92:91:59:fa:3b:29:73:2c:ea:cb:bd:6a:01:79:
4f:f2:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:56 2025 by rpki-client