This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/cPVp03GNf3_2jq4Ry1A6qBtZxm0.roa
File: cPVp03GNf3_2jq4Ry1A6qBtZxm0.roa (raw, json)
Hash identifier: l/TzeGVQCr4x/HRQ/ZvLOwtC/D5WgdgXe5WEvDFli4I=
Subject key identifier: 70:F5:69:D3:71:8D:7F:7F:F6:8E:AE:11:CB:50:3A:A8:1B:59:C6:6D
Certificate issuer: /CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Certificate serial: 1B
Authority key identifier: 1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/cPVp03GNf3_2jq4Ry1A6qBtZxm0.roa
Signing time: Sat 01 Nov 2025 01:35:52 +0000
ROA not before: Sat 01 Nov 2025 01:35:52 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 7677
IP address blocks: 157.101.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Validity
Not Before: Nov 1 01:35:52 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=70F569D3718D7F7FF68EAE11CB503AA81B59C66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:3c:5c:70:36:19:a4:40:d2:e9:d5:28:e5:
22:0e:f6:b9:e2:f7:0e:c5:93:67:77:52:93:66:7f:
1c:06:31:49:2e:ce:ac:b7:e0:61:a7:42:f9:24:80:
52:a8:38:22:76:73:b2:c6:5e:cb:34:a8:dd:0f:22:
6c:50:b0:9e:ce:72:23:40:18:7d:6c:91:07:49:de:
14:11:1f:4b:74:06:05:c1:47:1d:86:14:8c:8e:b8:
81:c8:f2:94:b6:c0:e8:93:d5:dd:34:64:4e:a1:ce:
d2:aa:3b:49:7f:4d:07:7a:3d:1d:0d:1d:22:ac:8f:
62:7d:29:6f:aa:f0:83:6b:cd:5e:58:06:0c:8a:3c:
eb:d9:3d:2a:d6:90:3a:ba:5d:5e:d7:ea:9e:b9:30:
87:03:34:79:73:46:98:55:30:a1:51:ed:00:dd:84:
ca:a4:70:42:f4:75:68:f2:0a:ab:3e:7e:e0:df:53:
b8:f6:fe:ea:41:81:f5:ee:24:bf:71:65:db:1f:c7:
e0:68:ba:0c:db:1c:b2:4d:c1:bf:74:b1:cd:2d:05:
da:de:ff:fa:f6:5d:34:c8:9f:b8:3a:7f:f9:26:ee:
e6:1c:02:e3:42:fe:4d:91:41:51:7a:6f:62:68:74:
bc:f0:75:fb:82:a2:c7:2e:49:e2:03:bc:d6:f4:52:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:69:D3:71:8D:7F:7F:F6:8E:AE:11:CB:50:3A:A8:1B:59:C6:6D
X509v3 Authority Key Identifier:
keyid:1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/cPVp03GNf3_2jq4Ry1A6qBtZxm0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.101.252.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5b:e4:fa:e8:f2:ab:f0:e1:12:53:73:a1:9c:c3:65:27:ee:
91:ff:84:42:a4:d6:8d:0d:b1:55:fe:70:cb:dc:ef:76:01:82:
05:8c:34:03:d9:af:88:24:06:bc:dd:8a:c4:76:98:63:c6:6f:
2c:00:9f:1e:0c:9a:22:58:1a:b1:94:4d:e4:57:ad:14:75:53:
b2:da:4e:77:45:8e:6e:87:c3:4c:bf:6d:99:54:36:16:a5:e9:
3e:05:ad:fb:91:43:b1:e7:59:66:f8:ac:57:c8:65:eb:73:94:
2b:56:e6:93:ed:96:86:2c:e6:40:56:ed:6f:65:3f:a9:ea:ad:
f8:6f:65:47:20:d0:a3:0b:7d:bd:b8:95:df:44:3c:32:b9:dc:
63:24:35:5b:45:5e:1e:e0:b6:81:d9:15:86:14:8f:48:da:6a:
a1:85:bc:31:f8:1e:e5:95:55:e7:e5:53:80:1e:c7:6c:b1:1d:
05:37:5d:11:22:48:ba:ea:98:03:58:ab:9b:0e:e0:14:de:e8:
6d:c3:3e:80:ad:db:b0:9a:0a:c7:ed:aa:6b:14:60:df:77:7c:
c9:0d:ed:61:19:ec:fe:21:80:d4:ca:13:40:a6:9a:3c:a6:c4:
13:1e:32:59:6c:fa:1e:cd:13:f0:29:1a:82:56:8d:6b:dd:cd:
db:35:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:10:52 2025 by rpki-client