This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PAj7mvULlkWPRl6tNC7dMbYLuM0.roa
File: PAj7mvULlkWPRl6tNC7dMbYLuM0.roa (raw, json)
Hash identifier: XLhz4qHLwNnjmWuDW8kNyjbFMpe7Hg9d8xNjiakwggw=
Subject key identifier: 3C:08:FB:9A:F5:0B:96:45:8F:46:5E:AD:34:2E:DD:31:B6:0B:B8:CD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1041
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PAj7mvULlkWPRl6tNC7dMbYLuM0.roa
Signing time: Thu 01 Jan 2026 01:51:54 +0000
ROA not before: Thu 01 Jan 2026 01:51:54 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 23:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4161 (0x1041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 1 01:51:54 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=3C08FB9AF50B96458F465EAD342EDD31B60BB8CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3b:8e:66:1a:c8:bf:99:65:d8:2b:62:9c:12:
4f:48:8a:2c:17:87:77:e7:e4:95:57:11:be:58:e4:
53:d3:8d:97:18:74:b1:06:05:16:e3:6f:a7:38:9b:
71:b1:8d:74:bf:fd:ee:07:82:01:78:ed:27:9b:fd:
2f:1a:bf:6e:c8:0a:08:96:a1:85:c6:ff:e6:1b:ac:
07:70:b5:26:21:58:7c:d3:5f:82:3b:70:97:e7:9b:
55:6c:5c:c2:77:8d:86:09:7d:cc:3e:a1:05:99:07:
a1:6c:22:b5:f5:b3:f0:58:f3:c1:4a:1c:49:39:d5:
2f:6c:07:d0:c1:b0:46:b8:d5:24:1a:3c:c9:5b:e2:
b9:80:7d:11:ad:13:ec:42:86:1c:03:2c:df:49:0f:
58:a9:c9:e1:3d:ac:06:04:4c:26:ae:e8:7f:0a:cc:
87:46:aa:b8:be:d0:8a:05:c8:ab:96:d6:e9:67:13:
ad:89:f8:b3:97:1b:7f:76:a3:b1:1d:76:f5:b1:f1:
ef:69:b5:71:b0:7c:cd:32:13:46:22:8c:39:87:de:
a6:20:ba:19:43:8d:88:8f:f6:59:d6:94:50:2e:3a:
d1:68:94:25:16:72:b4:b4:d6:c2:02:fa:80:37:71:
e9:8a:ca:39:3e:ea:e6:d1:aa:35:e1:d5:c1:0c:4c:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:08:FB:9A:F5:0B:96:45:8F:46:5E:AD:34:2E:DD:31:B6:0B:B8:CD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PAj7mvULlkWPRl6tNC7dMbYLuM0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.20.0/22
Signature Algorithm: sha256WithRSAEncryption
92:6c:1f:f5:d1:09:14:c2:37:cb:9f:7e:82:d7:39:12:e2:2a:
37:d4:6e:9c:2e:dd:01:62:f1:06:85:a8:cf:b3:a9:23:ee:4d:
78:37:18:ff:8a:f0:ad:5d:0f:87:77:b5:99:d7:c8:43:c8:49:
5c:2d:7c:6f:41:50:2b:91:a4:52:d4:ac:c2:75:ff:8c:e9:77:
55:ef:33:0e:97:7e:09:9b:69:60:37:09:fe:fd:f1:03:cc:9d:
a9:ba:31:1b:f5:78:0b:81:f8:08:12:77:ef:e4:c4:65:62:ce:
65:48:d0:80:13:20:3a:70:fc:0b:17:52:77:3d:38:00:80:00:
b0:07:3f:1b:d0:bc:2a:38:ed:4f:bf:fb:80:fe:dd:f5:0e:32:
ac:7f:ca:e3:ea:1b:4e:66:ee:88:b5:fb:90:94:fa:48:5a:b4:
d5:ca:89:76:07:d5:8d:d5:f4:d6:31:80:60:12:97:ca:5b:f7:
a5:c5:52:01:44:88:46:bc:4a:38:d9:de:4c:22:c2:82:ba:7a:
7c:49:84:c3:50:91:dd:9a:00:4f:a8:f4:29:13:a7:b7:b0:0c:
e2:9c:96:00:3c:47:b3:6c:ea:da:71:5b:ec:a9:41:70:c8:93:
f2:09:41:d5:ee:44:09:36:00:41:83:29:1a:f3:06:77:62:9d:
9a:2a:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:40 2026 by rpki-client