This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/317fHkYge4iX8eAxSs1d5NpXiD4.roa
File: 317fHkYge4iX8eAxSs1d5NpXiD4.roa (raw, json)
Hash identifier: 6p+5tXURkOH6KEI/WeZMF9hgIG1DhckpLFwwJgMfATM=
Subject key identifier: DF:5E:DF:1E:46:20:7B:88:97:F1:E0:31:4A:CD:5D:E4:DA:57:88:3E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0EE3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/317fHkYge4iX8eAxSs1d5NpXiD4.roa
Signing time: Tue 10 Jun 2025 11:12:31 +0000
ROA not before: Tue 10 Jun 2025 11:12:31 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 49.107.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3811 (0xee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:12:31 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=DF5EDF1E46207B8897F1E0314ACD5DE4DA57883E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:84:16:c0:de:61:f1:5d:ca:a6:03:f1:98:
36:cb:59:63:ef:9e:b4:9f:6d:96:05:0b:b9:bc:58:
d1:bf:c4:3a:4f:a9:06:e4:1a:c4:00:a1:02:69:28:
f5:b5:b8:2f:cd:fa:a5:a3:6f:0e:e1:82:38:65:67:
c4:e5:23:76:bb:ed:82:c5:66:ec:c5:42:f7:c3:cb:
11:f4:10:35:96:c9:09:28:91:74:5b:a0:eb:f3:cd:
61:9b:e8:b8:03:27:09:f2:c6:63:c7:ed:b8:a6:f4:
99:3b:72:06:50:35:d2:04:e3:f8:e1:a3:b8:33:ca:
ba:e9:88:e4:0c:29:55:0b:19:74:f8:f7:af:69:db:
a6:19:91:1e:57:f2:54:82:c2:d9:6c:0b:b6:f7:bb:
18:93:7a:78:99:68:0a:fe:fa:a7:d1:0c:10:7f:55:
c2:6c:23:06:99:53:2e:ce:26:fa:fb:e7:06:5c:a2:
3e:42:6e:32:55:39:71:9f:5c:39:8b:d5:6c:9d:06:
b7:df:a2:a8:fa:2f:b6:60:1c:ec:0a:37:8e:74:93:
07:44:d1:73:b1:a6:5d:92:23:76:8a:67:ce:c5:7c:
79:1a:1a:09:1a:a4:2a:dc:3d:68:42:1e:a2:07:6c:
73:7f:dc:e9:d0:21:14:92:84:1f:2b:96:35:00:ee:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:DF:1E:46:20:7B:88:97:F1:E0:31:4A:CD:5D:E4:DA:57:88:3E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/317fHkYge4iX8eAxSs1d5NpXiD4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.107.64.0/18
Signature Algorithm: sha256WithRSAEncryption
78:bc:33:86:31:a5:bb:47:e7:f2:3e:7c:22:49:9a:5f:23:8e:
5f:02:63:a7:e8:f9:ad:e2:d5:24:54:7f:78:b6:ad:9b:c4:db:
65:1c:a1:67:d7:c6:0d:e5:56:7d:2a:fb:f6:5a:3d:ae:78:14:
c9:57:59:80:d9:ab:0e:37:92:27:5f:e0:a1:3b:fc:5c:60:c2:
a4:8d:8a:06:f2:6b:df:30:7c:87:d4:f3:41:12:c8:49:b7:c8:
c7:6c:11:1e:6f:60:07:1e:00:ec:08:d7:c9:06:b8:f8:fc:fc:
24:c5:02:1d:e6:f3:fe:63:29:77:0c:d0:5c:74:6c:f3:b6:80:
d4:9d:58:f9:cc:b9:22:22:53:12:64:e4:d0:6e:a7:df:4a:8e:
aa:91:c1:3f:f0:a3:f1:76:60:96:0b:08:04:79:ec:87:f6:d1:
65:e1:12:2d:2c:1d:92:0f:47:9b:a9:26:91:2d:be:b0:d9:1f:
81:57:40:ee:ae:f0:2d:33:1d:e6:61:cc:61:c0:4b:21:e3:fe:
ac:1f:4a:84:e0:74:5d:e5:2a:d7:6b:7c:07:63:12:86:5a:c4:
f7:d1:45:3a:69:4c:3f:d9:f7:d2:b4:02:e2:72:d6:9f:ef:c7:
54:01:5a:55:2b:f1:02:e7:ea:58:c4:62:5f:c0:42:e3:7d:fc:
ae:72:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:24 2025 by rpki-client