This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OHyHvriTrglkN9jTTEdo2A8Veow.roa
File: OHyHvriTrglkN9jTTEdo2A8Veow.roa (raw, json)
Hash identifier: qgh+pFEQPw5Bp+ldELDhp5MdHS2a6UhVDc7jykNXFEc=
Subject key identifier: 38:7C:87:BE:B8:93:AE:09:64:37:D8:D3:4C:47:68:D8:0F:15:7A:8C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1028
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OHyHvriTrglkN9jTTEdo2A8Veow.roa
Signing time: Thu 01 Jan 2026 01:46:17 +0000
ROA not before: Thu 01 Jan 2026 01:46:17 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 9605
IP address blocks: 1.66.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 19:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4136 (0x1028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 1 01:46:17 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=387C87BEB893AE096437D8D34C4768D80F157A8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:b5:37:23:35:e7:1f:74:70:de:7c:75:b7:
44:74:c1:42:b9:f8:58:7c:25:41:fb:22:24:bf:c7:
97:a7:70:3d:a9:60:c5:41:f3:d0:99:2d:3e:d4:b1:
bc:76:59:3d:1e:59:8c:34:47:32:c4:b7:13:e3:60:
67:d5:a7:3d:33:8b:42:50:33:59:cc:c3:3e:46:f1:
12:f8:f2:f9:a2:ee:fa:7b:f2:3a:04:ac:ab:d8:77:
1c:99:52:b9:65:d7:c1:6a:a6:2a:cc:29:5a:b1:1a:
fc:35:69:3c:03:de:4a:ca:e5:33:3e:48:94:59:a9:
de:70:4d:9d:74:e7:f0:c6:c5:21:fd:7d:32:d8:0e:
61:77:35:da:4a:06:be:3f:45:bb:58:08:9d:77:8e:
5b:f2:4f:e2:2b:4e:8f:11:a4:c6:c4:20:3d:49:2e:
7a:cc:21:70:7c:a3:48:1d:9c:42:7b:48:ca:e9:75:
83:24:eb:6d:84:04:f7:3a:46:31:9c:58:27:91:73:
5d:44:6e:38:73:31:32:39:a0:ee:02:ab:d2:32:3d:
27:2c:ea:f9:9f:76:8d:9a:cd:8b:2f:ac:ca:55:eb:
04:25:8b:62:e4:ba:e0:e4:ef:31:d6:0d:30:e5:ee:
22:3c:96:6d:2f:9c:f0:63:7d:c6:6b:0b:8b:20:09:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7C:87:BE:B8:93:AE:09:64:37:D8:D3:4C:47:68:D8:0F:15:7A:8C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OHyHvriTrglkN9jTTEdo2A8Veow.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.96.0/22
Signature Algorithm: sha256WithRSAEncryption
87:37:96:b4:83:35:94:82:23:ac:81:fa:2e:7f:2a:17:23:39:
f7:0e:fb:17:0e:f2:0b:14:f5:38:92:e8:91:3d:dc:a9:c2:77:
4d:93:20:e1:d1:88:5b:0a:7d:51:5c:e9:fc:17:e1:9f:ee:82:
dc:7b:90:03:fb:58:1a:bc:2f:a3:96:19:78:14:6f:61:c9:81:
2c:c2:0d:d8:1a:51:4b:48:6c:86:49:90:7c:d1:7d:98:1a:bb:
3b:81:e8:21:f0:40:4f:62:79:50:c3:2e:f1:89:df:2a:43:f2:
b2:66:b3:c3:fc:82:8f:6e:ba:f0:2a:4d:97:68:8f:59:23:71:
67:9c:7b:b0:38:36:49:cc:61:70:5e:42:d0:3d:c1:20:e6:1a:
8c:f2:9e:f2:f4:c1:3b:a6:ec:6a:d0:65:92:31:aa:67:1a:b4:
99:0d:83:b4:ce:8d:35:3c:14:d1:11:e3:dd:be:25:a7:97:3f:
93:1d:25:71:7d:b0:e2:3b:8c:79:27:f7:92:cb:db:5b:af:ec:
5a:29:bc:dd:7d:84:a5:e6:4e:7b:3b:4b:1c:2f:71:6a:ca:77:
c5:a6:bb:32:99:d8:97:99:0a:0c:e3:80:59:03:0d:cf:a6:70:
b0:cc:13:07:1b:9e:f4:8e:99:a4:49:07:f2:62:9f:96:3c:83:
b5:8c:eb:02
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICECgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAxMDEw
MTQ2MTdaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4N0M4N0JFQjg5M0FF
MDk2NDM3RDhEMzRDNDc2OEQ4MEYxNTdBOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8gbU3IzXnH3Rw3nx1t0R0wUK5+Fh8JUH7IiS/x5encD2pYMVB
89CZLT7Usbx2WT0eWYw0RzLEtxPjYGfVpz0zi0JQM1nMwz5G8RL48vmi7vp78joE
rKvYdxyZUrll18FqpirMKVqxGvw1aTwD3krK5TM+SJRZqd5wTZ105/DGxSH9fTLY
DmF3NdpKBr4/RbtYCJ13jlvyT+IrTo8RpMbEID1JLnrMIXB8o0gdnEJ7SMrpdYMk
622EBPc6RjGcWCeRc11EbjhzMTI5oO4Cq9IyPScs6vmfdo2azYsvrMpV6wQli2Lk
uuDk7zHWDTDl7iI8lm0vnPBjfcZrC4sgCSaDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUOHyHvriTrglkN9jTTEdo2A8VeowwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L09IeUh2cmlUcmdsa045alRURWRvMkE4VmVvdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBQmAwDQYJKoZIhvcNAQELBQADggEBAIc3lrSDNZSCI6yB+i5/KhcjOfcO
+xcO8gsU9TiS6JE93KnCd02TIOHRiFsKfVFc6fwX4Z/ugtx7kAP7WBq8L6OWGXgU
b2HJgSzCDdgaUUtIbIZJkHzRfZgauzuB6CHwQE9ieVDDLvGJ3ypD8rJms8P8go9u
uvAqTZdoj1kjcWece7A4NknMYXBeQtA9wSDmGozynvL0wTum7GrQZZIxqmcatJkN
g7TOjTU8FNER492+JaeXP5MdJXF9sOI7jHkn95LL21uv7FopvN19hKXmTns7Sxwv
cWrKd8WmuzKZ2JeZCgzjgFkDDc+mcLDMEwcbnvSOmaRJB/Jin5Y8g7WM6wI=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:37:27 2026 by rpki-client