This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/BXQfTC9hMaJwUvio3AISJn_Itdw.roa
File: BXQfTC9hMaJwUvio3AISJn_Itdw.roa (raw, json)
Hash identifier: doz48hee3VdN4uFSu/5MRpZ8WfelAHCsxWyuFSCcJnM=
Subject key identifier: 05:74:1F:4C:2F:61:31:A2:70:52:F8:A8:DC:02:12:26:7F:C8:B5:DC
Certificate issuer: /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
Certificate serial: 34
Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/BXQfTC9hMaJwUvio3AISJn_Itdw.roa
Signing time: Mon 01 Dec 2025 01:34:29 +0000
ROA not before: Mon 01 Dec 2025 01:34:29 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 9619
IP address blocks: 2001:cf8:ace::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
Validity
Not Before: Dec 1 01:34:29 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=05741F4C2F6131A27052F8A8DC0212267FC8B5DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:21:59:15:6c:fb:9b:37:9a:8d:d9:00:a2:
ed:68:70:a2:dd:7d:d8:23:5a:8d:a5:6e:9f:98:7d:
92:0f:0f:22:31:3b:60:b8:3e:0f:40:fb:42:ae:0e:
99:54:d8:82:9c:f3:39:80:4b:78:22:55:6d:db:e3:
65:e4:f3:94:aa:6d:44:1d:d4:3b:5e:9b:2a:c2:8e:
b2:bf:cb:43:e1:f7:41:09:28:3e:7e:24:d9:a7:4c:
f5:88:1d:bd:9a:2b:53:13:23:f3:0d:c1:7d:1d:26:
bb:c9:71:49:ba:ca:61:6b:0e:ee:51:96:0e:b5:30:
dd:a6:17:48:93:d9:61:93:f9:87:d7:e9:6e:ae:a6:
82:b5:92:bc:bc:32:49:d6:77:ae:b4:fb:80:97:f8:
b6:ad:6b:4e:29:96:09:23:b5:46:93:fa:c4:7c:8e:
4f:a6:7a:75:fa:e5:60:3d:c7:1b:ba:52:7c:12:06:
ac:a9:60:af:53:ba:f7:36:77:76:eb:9a:8e:b1:95:
ad:5b:63:50:cb:b3:68:37:22:04:81:9b:77:1d:d3:
10:2d:db:9f:cd:69:6f:f3:a8:c4:2a:80:c6:08:83:
b3:c0:98:8a:de:76:50:d1:87:3a:43:1a:49:3c:03:
bf:11:13:6d:1e:2a:0a:50:94:01:13:6d:9f:50:1b:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:1F:4C:2F:61:31:A2:70:52:F8:A8:DC:02:12:26:7F:C8:B5:DC
X509v3 Authority Key Identifier:
keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/BXQfTC9hMaJwUvio3AISJn_Itdw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:cf8:ace::/48
Signature Algorithm: sha256WithRSAEncryption
85:72:7c:22:9c:8f:e5:5b:ac:a4:cd:6f:e5:28:2d:6b:4b:60:
f8:bd:09:4e:21:68:f6:f6:7e:38:a2:df:41:30:15:5d:7e:8d:
4b:04:d4:e8:a3:d6:db:06:ff:42:03:e3:7b:73:2a:fe:4e:96:
5f:8d:b9:ae:2c:10:0c:ae:fa:08:35:73:84:59:af:b0:70:bd:
5e:4b:bd:37:1a:ba:95:05:33:0c:70:d6:5d:63:62:7c:80:83:
fe:11:40:d7:04:98:d0:2b:e5:11:dd:f6:c4:c2:75:5f:78:1a:
f1:2f:30:e1:18:21:57:6a:c4:f1:f0:58:df:47:2b:ea:d5:fb:
aa:a8:ef:10:95:93:60:da:a2:31:fd:0e:2d:3e:d2:bf:e9:d8:
02:78:52:6d:d5:4f:3d:11:d0:df:23:bf:3a:9f:f2:49:6f:a0:
c4:2f:1b:db:af:a0:32:8a:74:19:26:fe:3a:4b:8a:41:52:01:
5c:05:c7:f2:69:39:dd:14:af:d5:1f:c2:d3:3e:97:a0:c5:5c:
e8:df:10:a7:5e:29:b7:67:16:78:a7:06:ce:62:39:b7:c1:9e:
ad:e3:4c:6a:c8:37:86:e8:4b:e9:87:71:32:74:fa:f8:fc:fc:
ed:90:f6:60:fe:c5:a2:c5:c8:24:eb:c5:03:ae:a9:dd:1c:90:
9a:0c:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:41:28 2025 by rpki-client