This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CKd7UFmwNMCzvP5N-NXAmnC_7wQ.roa
File: CKd7UFmwNMCzvP5N-NXAmnC_7wQ.roa (raw, json)
Hash identifier: aixHnzOlXDdLNy3o35bTWwXGMmMNatHCFKfYyqMlm2Y=
Subject key identifier: 08:A7:7B:50:59:B0:34:C0:B3:BC:FE:4D:F8:D5:C0:9A:70:BF:EF:04
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 070D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CKd7UFmwNMCzvP5N-NXAmnC_7wQ.roa
Signing time: Mon 01 Dec 2025 02:25:55 +0000
ROA not before: Mon 01 Dec 2025 02:25:55 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 2516
IP address blocks: 210.167.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 06:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 1 02:25:55 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=08A77B5059B034C0B3BCFE4DF8D5C09A70BFEF04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:47:9f:71:ff:7e:4c:48:b2:68:f1:2c:87:
ed:95:46:d6:a5:6e:e0:d1:e7:74:f2:80:12:dc:6f:
c6:c8:98:f4:78:ba:61:0f:02:c6:2b:dc:5b:e9:71:
0e:c8:2d:eb:41:89:59:82:bf:da:b9:af:70:a0:26:
36:2f:88:28:5e:93:70:cc:59:f1:98:87:2d:25:2b:
c1:b2:5e:a7:10:01:84:bc:1a:9a:98:e2:3e:b1:cc:
73:c2:da:85:61:51:6e:e4:54:c7:c0:e0:a0:a7:e8:
cf:9a:6f:40:5a:c4:fd:26:fd:f5:6f:ff:30:0a:89:
6d:be:0c:cc:6c:73:bd:a9:18:36:16:96:1f:39:e1:
6b:f1:06:91:a6:46:e9:8d:a5:d7:36:8b:95:95:43:
c7:f4:d3:9c:70:27:38:9e:5b:1e:79:2c:e3:ca:19:
5c:67:8c:51:28:e3:82:52:58:b4:74:66:0f:77:42:
d6:6b:4b:60:dd:9d:1b:53:93:95:6f:5e:46:3c:77:
33:27:32:61:60:83:ba:a2:91:0f:00:38:d6:ba:2e:
5d:19:d5:f4:09:0f:32:74:d0:03:ad:1e:35:b5:c3:
65:bc:bd:e0:dc:ed:2c:c4:ff:de:25:8d:82:99:b4:
08:f1:c5:39:a0:02:aa:0a:8c:44:d6:77:f9:88:67:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:7B:50:59:B0:34:C0:B3:BC:FE:4D:F8:D5:C0:9A:70:BF:EF:04
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CKd7UFmwNMCzvP5N-NXAmnC_7wQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.167.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:42:1c:a3:5c:15:a1:a6:7b:9b:d9:18:fb:90:6b:f1:02:62:
d7:11:26:6e:fd:89:6a:d3:83:e6:f5:9f:12:2f:c3:7e:69:8d:
1e:4d:34:c3:b1:f7:f5:b2:6c:ee:60:00:59:4b:e7:a9:f7:65:
a0:f5:d4:63:7f:7f:98:c1:3b:ea:78:28:27:f3:1c:68:6b:43:
4b:2a:80:69:1d:74:2c:4b:cb:ff:46:57:9b:15:11:45:0a:7e:
d8:6a:f3:30:ac:d5:f2:8b:3f:ba:c3:da:2d:22:db:94:1e:61:
73:36:69:9d:71:30:59:4c:03:76:6f:02:de:b6:02:69:7f:45:
85:9b:78:1e:f5:d7:62:80:23:91:02:a8:f8:39:2f:82:e0:bc:
c9:ec:f0:78:d1:ae:8c:ca:48:10:e6:16:1d:d8:94:3f:55:c7:
c1:e3:a6:5a:07:9e:1f:80:91:cf:3f:9e:e0:5d:e9:2f:7f:bf:
6a:18:73:7b:5d:3d:a3:e5:47:57:6f:23:ee:c8:88:d1:bf:aa:
55:a6:d9:e4:41:6d:80:41:28:3c:5a:96:3f:fc:73:ce:51:9f:
f4:1b:72:87:88:5d:73:46:59:5f:84:5b:3b:be:eb:74:71:cd:
27:08:14:65:67:c3:95:09:00:f7:12:e9:d4:27:93:5b:69:d1:
12:d1:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:42 2025 by rpki-client