This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/lFmYe9c2x58oU5CV-xzaQsFBnoU.roa
File: lFmYe9c2x58oU5CV-xzaQsFBnoU.roa (raw, json)
Hash identifier: Ckc6balJaHukNsfs/UXhwjIkb5tBG1meYM/bID0TzMw=
Subject key identifier: 94:59:98:7B:D7:36:C7:9F:28:53:90:95:FB:1C:DA:42:C1:41:9E:85
Certificate issuer: /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial: 2D
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/lFmYe9c2x58oU5CV-xzaQsFBnoU.roa
Signing time: Mon 01 Dec 2025 01:32:32 +0000
ROA not before: Mon 01 Dec 2025 01:32:32 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 151374
IP address blocks: 202.126.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 11:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Validity
Not Before: Dec 1 01:32:32 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=9459987BD736C79F28539095FB1CDA42C1419E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:9c:ac:9c:6c:1c:35:e8:4e:24:6b:4a:32:
d5:31:a9:92:4f:82:3c:68:ae:72:b1:c8:48:99:88:
51:65:3f:74:31:75:91:e1:42:33:ab:39:da:45:31:
bf:36:53:a3:47:cf:d5:21:05:0a:ce:6c:da:ac:66:
b7:3b:65:e3:ea:7b:49:c4:89:56:da:0d:f7:aa:ce:
82:b0:2b:bc:6e:ee:2a:c4:fc:6d:9e:71:19:50:80:
60:29:51:b2:51:9b:6a:67:61:42:56:9a:4b:61:4d:
28:5a:75:4b:bb:2a:3d:85:9a:69:78:66:37:54:a1:
26:b4:69:05:02:46:33:5c:d3:fb:ff:14:be:26:db:
2e:6f:3b:d5:bf:33:fa:ff:67:fb:ea:93:2a:dc:d2:
b9:82:e4:7c:28:98:14:67:8a:af:51:a9:27:73:5f:
63:d1:d9:d8:70:96:4e:80:4e:e6:ea:00:44:cd:7b:
55:ac:b8:56:ee:b4:4e:d3:11:07:b3:d0:ea:b2:db:
bb:92:6f:48:7f:b2:c1:18:f9:e8:71:e5:ae:6c:df:
e6:ca:05:7c:ca:d2:d8:8a:b4:28:41:b4:37:e3:9a:
26:99:97:94:c3:a8:b3:48:32:65:05:e7:79:e8:dc:
da:94:42:a0:fa:89:62:5c:cb:49:2f:66:5f:83:a9:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:59:98:7B:D7:36:C7:9F:28:53:90:95:FB:1C:DA:42:C1:41:9E:85
X509v3 Authority Key Identifier:
keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/lFmYe9c2x58oU5CV-xzaQsFBnoU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.126.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:0c:37:d2:25:c6:62:f0:58:1d:8c:c4:88:8e:2b:55:36:43:
16:8c:5e:76:67:13:6d:d1:db:14:9a:5c:c3:a7:78:f9:bc:63:
c3:ea:68:9d:43:ef:b0:30:8e:29:65:64:e0:3c:bf:81:11:f0:
5c:35:e5:95:fe:b0:06:72:9c:66:f7:af:f3:e5:00:c3:ca:2f:
98:8d:83:7a:86:6f:df:17:73:97:95:b5:7e:24:bd:ce:8d:48:
b0:d5:9d:e7:f3:b0:5d:1a:75:3b:43:f4:ac:c8:47:b6:54:33:
ce:e1:99:d8:83:c1:7c:07:6c:8b:ed:2a:19:9a:43:d5:54:0a:
02:05:9d:e8:21:f3:09:9b:b6:af:42:30:8c:b7:b4:b1:7d:6c:
ef:14:69:f1:e2:70:1e:fc:0a:2c:fe:6c:6b:34:61:96:61:2e:
7e:a5:1e:c5:1b:37:ea:26:2b:27:5c:5e:21:ea:ff:e7:2e:a7:
92:0b:64:5d:5e:1c:de:64:d8:bd:90:f8:eb:6b:b2:ee:bf:c4:
08:03:45:37:46:75:4e:ec:a9:6a:39:e5:2e:14:3b:38:02:4b:
f8:a2:a2:41:db:e0:4a:56:59:36:29:65:3e:3d:cb:29:3d:68:
a2:23:1f:27:c5:b0:ff:c9:9c:b5:53:04:18:53:18:9f:8e:43:
67:ed:84:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:57:53 2025 by rpki-client