This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTSCRsxRfUAnCjFI4OGe6uKpkbA.roa
File: OTSCRsxRfUAnCjFI4OGe6uKpkbA.roa (raw, json)
Hash identifier: 2JH4sUi6YMEtqXylBA10sBT2nbpS/giIcoiB97GXgi8=
Subject key identifier: 39:34:82:46:CC:51:7D:40:27:0A:31:48:E0:E1:9E:EA:E2:A9:91:B0
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0652
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTSCRsxRfUAnCjFI4OGe6uKpkbA.roa
Signing time: Mon 01 Dec 2025 01:58:00 +0000
ROA not before: Mon 01 Dec 2025 01:58:00 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 2516
IP address blocks: 219.125.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 06:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 1 01:58:00 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=39348246CC517D40270A3148E0E19EEAE2A991B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:f3:c6:91:16:79:d9:2b:a6:02:b1:d6:d9:
5a:df:6f:b5:63:05:44:c9:69:3f:cb:ab:12:15:76:
0e:e5:6f:3b:5e:88:f5:6f:d9:60:76:ba:c6:59:33:
72:73:52:a4:aa:41:ed:5f:4f:d1:df:6b:62:ea:b1:
15:c0:ba:1e:f6:21:d2:4e:ba:52:6f:39:87:83:28:
da:c8:17:e8:64:38:40:7d:38:67:2b:a9:46:2a:99:
f3:63:5e:15:f7:9f:d5:3f:0e:fb:09:a4:fb:ee:88:
b9:b6:61:fa:17:a6:3d:3b:8a:57:6c:91:7e:bb:30:
a6:79:cf:f9:bd:65:e6:46:5b:8e:7c:33:0b:b1:01:
b3:fa:fa:78:09:49:6c:fc:8d:42:da:96:8f:9f:a8:
87:bb:21:a3:e1:a7:13:b5:7d:96:18:e0:c3:eb:bc:
6b:aa:51:1f:51:60:b2:9d:d8:ff:02:e7:31:95:f2:
4e:65:c2:8b:8b:11:28:83:ae:b0:3d:78:2e:0c:e6:
59:48:8e:80:17:e9:1c:aa:77:98:18:d8:a5:9d:7e:
19:02:7f:3a:e3:e9:fa:d8:fd:05:9d:8e:c8:20:b5:
9d:31:95:2d:d2:16:d6:c9:88:10:48:86:ec:63:24:
a4:62:8d:5d:2a:91:ca:e5:37:2e:3b:0c:b9:80:3a:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:82:46:CC:51:7D:40:27:0A:31:48:E0:E1:9E:EA:E2:A9:91:B0
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTSCRsxRfUAnCjFI4OGe6uKpkbA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:31:75:e1:fc:5a:06:58:06:b0:4d:b1:36:82:12:11:75:c2:
17:c2:f5:68:75:d2:ab:db:cb:6e:bf:ee:df:c3:e4:c9:e8:40:
8e:21:5d:44:52:26:64:02:c1:70:59:df:cb:b6:1c:1d:ea:85:
c8:2f:70:74:8c:c4:83:2a:84:d9:1b:78:d0:de:8b:81:ae:8c:
3e:1d:f5:cf:e2:1d:67:b5:ec:b9:37:69:28:38:f0:9e:4f:38:
f5:c3:49:6a:d6:31:4f:87:01:65:2f:a8:a0:f4:3a:80:1f:5e:
06:eb:26:bc:8b:07:59:91:f5:c0:d2:8f:22:b6:64:51:04:c5:
8d:58:81:b6:f5:b7:e2:05:72:54:8f:d1:84:63:03:c6:95:ee:
b9:d2:28:e3:d8:b6:39:17:c2:cd:9a:cb:fd:7d:a5:22:8e:6e:
db:1e:fe:05:c0:ed:5e:d3:aa:60:11:e9:42:fa:e1:25:1b:a0:
0b:3c:9a:b6:6f:41:cf:ce:a6:b8:ec:56:23:73:15:9e:6a:eb:
c9:7d:0d:37:ca:30:57:ae:76:47:ae:e1:d3:40:5c:40:2e:b4:
39:a0:54:f2:5c:54:eb:4f:5e:07:ad:75:eb:79:6d:0a:f3:50:
ee:f7:39:c8:8e:2a:37:b8:5a:4f:05:ea:0c:07:20:93:38:84:
4e:8d:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:48 2025 by rpki-client