This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFf8lrkZGep9wyaT39lTc4425vQ.roa
File: SFf8lrkZGep9wyaT39lTc4425vQ.roa (raw, json)
Hash identifier: /OgzSFap9SpsOgj/65foP80Gjo8OjJQa11yqQ2nBUDM=
Subject key identifier: 48:57:FC:96:B9:19:19:EA:7D:C3:26:93:DF:D9:53:73:8E:36:E6:F4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0FE8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFf8lrkZGep9wyaT39lTc4425vQ.roa
Signing time: Thu 01 Jan 2026 01:35:34 +0000
ROA not before: Thu 01 Jan 2026 01:35:34 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 23:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4072 (0xfe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 1 01:35:34 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=4857FC96B91919EA7DC32693DFD953738E36E6F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:8b:a5:c1:4c:c5:63:fa:11:f2:d6:e8:96:
ec:23:27:f5:94:0c:36:16:1c:c2:1a:9c:2b:b7:7e:
aa:fb:45:82:bd:ff:dd:12:8c:f7:fe:3d:e9:c9:29:
99:58:e3:eb:09:fb:14:46:e6:af:fa:53:8b:94:46:
3d:d4:5c:ec:64:c4:81:fb:02:15:51:ee:6f:05:2c:
fe:f3:2a:4a:0c:4c:aa:8d:5f:74:27:9f:09:cc:ee:
70:fc:f8:8f:29:3a:8b:61:0a:f2:0f:85:67:6e:18:
50:a0:40:b7:02:0e:4a:38:23:95:35:98:f1:7e:a5:
b3:a7:68:73:26:34:eb:65:ed:ae:a2:39:08:ae:09:
a0:4b:b5:dc:14:68:2d:19:3e:0b:57:a7:f0:47:85:
29:a8:fe:c6:a3:c6:7a:c4:11:de:a3:21:36:72:a5:
4c:25:08:1c:a5:11:54:08:ee:7c:49:0f:13:a7:45:
e9:c9:40:57:c9:91:a1:11:c5:d2:2b:8f:d5:a8:5d:
f7:b8:91:d3:3d:ff:97:36:bd:4f:db:08:6b:18:de:
6e:60:d9:c8:cd:f7:25:8b:6a:1f:a0:2e:c2:de:e4:
4d:08:90:eb:de:48:93:d8:4e:ec:79:96:74:37:35:
88:38:3a:05:5e:1d:48:d1:44:87:8d:13:34:ba:32:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:57:FC:96:B9:19:19:EA:7D:C3:26:93:DF:D9:53:73:8E:36:E6:F4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFf8lrkZGep9wyaT39lTc4425vQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.7.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7c:d2:2c:55:bf:fd:2f:14:43:25:0e:a3:31:64:5e:74:36:
f9:c8:08:0e:86:c2:39:e4:11:eb:16:4b:d3:08:af:43:be:32:
14:68:7c:e2:ba:29:44:82:e0:2c:5e:af:fd:90:8f:17:b1:09:
7e:aa:8b:b0:e0:54:90:ba:3d:23:69:b0:21:a0:88:7b:be:19:
bd:45:b9:81:f2:78:eb:29:f5:6d:ef:91:ca:6d:c1:54:b7:2e:
c0:7d:58:86:ad:e7:ea:b8:be:36:bf:4c:12:49:61:e0:e7:fd:
e6:79:0d:a5:46:08:34:74:80:9a:6c:32:b7:a9:4c:4b:db:8c:
16:b0:1d:a2:a9:c5:69:37:1b:0d:9e:fe:4b:84:ed:fd:c2:92:
23:f9:31:7d:6b:71:4d:ff:b7:e2:d7:17:29:3a:75:16:d8:68:
4f:3b:cb:75:d8:a0:1f:85:47:9d:e6:6f:cc:8b:23:44:4a:b5:
39:b4:1d:1b:4a:03:28:cb:cc:05:1f:46:94:c9:64:37:c1:19:
c0:10:2f:9a:d5:7e:05:29:7a:4a:af:b2:dc:ee:e1:21:20:13:
8e:dc:6e:7f:91:21:ba:a4:fe:fd:5b:2b:b6:32:43:3f:ec:47:
2b:07:de:65:c0:45:6f:0d:cf:a1:40:87:3c:5d:cc:7a:07:be:
c6:58:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:46 2026 by rpki-client