This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2kbCTefQXpm4sTM7qMQUzGq-lZY.roa
File: 2kbCTefQXpm4sTM7qMQUzGq-lZY.roa (raw, json)
Hash identifier: WJADvm4jwz9cuFI9wXOiNIXEPZJ/GZ7yoiS6G9ICoxI=
Subject key identifier: DA:46:C2:4D:E7:D0:5E:99:B8:B1:33:3B:A8:C4:14:CC:6A:BE:95:96
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0668
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2kbCTefQXpm4sTM7qMQUzGq-lZY.roa
Signing time: Mon 01 Dec 2025 01:58:13 +0000
ROA not before: Mon 01 Dec 2025 01:58:13 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 2516
IP address blocks: 211.10.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 06:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1640 (0x668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 1 01:58:13 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=DA46C24DE7D05E99B8B1333BA8C414CC6ABE9596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9a:8e:65:5e:45:04:b2:43:25:bb:c2:a9:aa:
15:69:a3:5d:1e:fc:74:ee:79:6c:2c:78:c7:a2:80:
7f:cd:73:f0:45:e0:29:f5:ff:b5:8d:33:d8:b0:82:
db:11:63:88:fd:50:f4:ec:19:e0:ed:ee:20:ae:10:
e5:fb:a9:82:a9:a6:69:8b:f6:74:bf:a8:7d:16:67:
96:30:5e:32:3f:05:1a:3a:ff:ef:e7:01:c1:1e:f8:
1e:8b:62:ea:4c:14:c2:35:de:c2:57:5d:75:8a:6c:
9a:39:6b:fd:2d:37:56:a9:82:3d:91:af:5c:c9:4d:
7f:bd:88:52:e6:71:ad:ab:9f:e4:bf:c0:09:fd:26:
7e:7c:2f:56:fd:88:fc:11:99:39:bd:f6:d6:9f:86:
4b:a1:00:64:e7:db:c1:42:8d:f2:de:1e:41:a7:09:
59:56:b8:88:ea:1b:87:68:5c:e4:60:03:88:73:6d:
58:a5:66:5e:ad:b3:67:aa:a5:9c:0f:41:b4:1f:0a:
e4:03:84:b0:33:f6:5b:b0:f9:3a:d3:5d:f3:01:bc:
e1:a2:98:f1:7d:24:30:8a:bd:8c:de:ae:7a:6a:07:
e3:20:1d:5b:96:95:9d:c0:55:d7:ed:74:2e:61:bb:
0e:08:c4:52:db:61:0f:11:b3:78:26:12:82:c1:5f:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:46:C2:4D:E7:D0:5E:99:B8:B1:33:3B:A8:C4:14:CC:6A:BE:95:96
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2kbCTefQXpm4sTM7qMQUzGq-lZY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.195.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2f:59:28:bd:8a:3f:0f:ea:98:29:8b:fe:e6:cd:bb:56:d7:
e1:75:5d:34:6f:ec:32:53:3b:a6:de:b7:a4:2f:c9:d6:0d:17:
96:ad:0e:f3:5b:95:3a:69:04:ed:42:d4:49:23:37:76:f8:9a:
ec:be:d4:92:45:ee:1a:37:d3:3a:96:28:47:d2:76:bc:a6:fe:
c6:52:0e:40:d1:b1:6f:2d:f9:87:b7:34:8e:ef:59:0b:38:c4:
a4:13:db:35:37:a9:7c:cf:7b:8b:1f:51:76:4f:ae:fc:14:ae:
01:87:43:02:bc:c3:66:3c:c6:95:8f:a1:e0:bb:8f:d4:03:7d:
9f:66:25:4e:6d:6d:cd:f9:9c:21:ce:d8:54:d0:27:48:20:2f:
4c:62:9d:7d:db:0a:5a:37:d0:7b:74:ea:84:08:a9:9a:c7:3d:
f2:91:12:28:df:4b:35:0e:7e:29:2b:50:e6:15:cf:cb:26:16:
28:d7:41:7a:0f:0b:a6:59:b6:06:3d:22:c2:08:f1:3e:d3:8c:
b8:91:d1:47:c1:ae:f8:21:b4:2c:76:21:bb:be:7b:95:02:dc:
31:6e:26:fa:bc:b5:76:31:ce:7d:42:5a:48:75:3b:91:be:24:
c3:1d:36:3b:9e:46:e0:5f:6b:69:3f:e4:80:a8:8d:e8:1c:6e:
fc:43:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:55 2025 by rpki-client