This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZKul2kFy6wPOm8QyI-kUSmCCWI.roa
File: 9ZKul2kFy6wPOm8QyI-kUSmCCWI.roa (raw, json)
Hash identifier: /Zqj0qIvWrlwnxEAPaMsSXghNJu9yb2Jsj2Wj483gD0=
Subject key identifier: F5:92:AE:97:69:05:CB:AC:0F:3A:6F:10:C8:8F:A4:51:29:82:09:62
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1040
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZKul2kFy6wPOm8QyI-kUSmCCWI.roa
Signing time: Thu 01 Jan 2026 01:51:54 +0000
ROA not before: Thu 01 Jan 2026 01:51:54 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 23:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4160 (0x1040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 1 01:51:54 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=F592AE976905CBAC0F3A6F10C88FA45129820962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:38:3b:c4:59:78:0e:cd:e4:cb:d8:ec:7f:
68:ba:fd:62:8d:9e:75:e8:07:f5:42:92:5a:44:ba:
19:b8:34:a6:2d:f6:ab:a2:c0:8e:c8:c9:ef:b6:ac:
c6:76:8d:cb:e2:8a:d0:05:71:9e:e6:f4:bc:fc:d6:
02:0a:da:30:0b:1e:f4:b2:57:c7:42:eb:a9:1c:2b:
4f:f1:7e:f2:d6:18:89:51:b4:93:2e:b8:b3:37:37:
58:15:ea:e0:06:23:ff:eb:9f:05:8b:f2:36:0d:12:
52:2e:9e:33:7e:06:c0:5f:ea:a7:06:bd:b7:76:e1:
3d:39:3f:e1:15:e8:86:e0:75:06:5d:03:e6:11:86:
11:7e:22:e6:49:23:db:24:56:f8:78:3b:53:a8:b1:
d0:51:ba:e8:89:ba:61:68:14:dd:b1:b4:34:b2:13:
a3:b7:73:92:0b:be:49:e7:d1:14:50:a8:ec:6a:8c:
28:a0:eb:05:8d:f0:37:60:8e:cf:ae:65:fd:c9:16:
17:35:11:46:0b:c9:aa:3c:f6:ce:1b:cc:3c:1c:39:
9c:15:ce:a4:29:69:1c:f7:fd:01:45:f3:eb:8e:5a:
f6:e2:99:e2:6f:6a:02:7c:b0:8b:e2:b3:10:45:7a:
3b:de:26:da:f0:8f:11:f3:8e:f7:87:41:b4:de:cd:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:92:AE:97:69:05:CB:AC:0F:3A:6F:10:C8:8F:A4:51:29:82:09:62
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZKul2kFy6wPOm8QyI-kUSmCCWI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.108.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:e1:1c:13:5a:a3:ed:be:36:9b:e6:91:9b:43:d2:59:07:1d:
53:6c:b0:3c:6d:67:6a:70:18:f2:f3:89:7b:2a:6f:ff:ef:0f:
15:27:27:40:02:95:a6:a4:79:29:7d:5a:2a:97:d9:4d:15:7b:
18:83:60:46:1a:94:2c:f0:6a:89:0f:ad:34:02:9e:7d:81:10:
d7:50:10:3b:c3:e2:0d:39:b6:d1:00:9d:c8:12:8b:1e:01:90:
78:66:52:91:e8:e8:e9:65:9b:79:95:31:41:37:0a:44:7c:b4:
e7:f6:a5:ea:3f:de:2b:6d:da:34:a9:b6:91:de:e0:69:ed:83:
82:14:57:d3:7b:1b:35:da:30:24:da:32:aa:03:ff:1c:77:bc:
01:56:37:ac:8f:fe:f0:b6:d2:fa:23:d1:3a:de:d0:d6:07:5d:
aa:11:a1:24:15:de:6b:7e:19:7d:0b:95:fe:7f:41:e1:e0:f6:
71:bd:cd:43:cf:86:22:19:47:92:3d:ed:4c:c8:8e:d9:aa:cf:
d5:9a:76:e9:65:96:84:bb:a3:44:fb:a9:20:22:49:6e:36:f3:
ed:95:69:dc:ee:2c:01:ec:ba:95:ff:41:f4:2f:2f:f5:81:8c:
ff:7f:b2:3e:66:e3:74:9a:9e:c6:73:ff:21:11:28:da:f6:8c:
f9:9b:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:06 2026 by rpki-client