This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XvRv-1ThuYwjS6UTt1MiY1tTxo0.roa
File: XvRv-1ThuYwjS6UTt1MiY1tTxo0.roa (raw, json)
Hash identifier: zW2RQ96lkYNWMEP+HrG9Nl/ts8a1Ooa8AKGJ7W0UcRo=
Subject key identifier: 5E:F4:6F:FB:54:E1:B9:8C:23:4B:A5:13:B7:53:22:63:5B:53:C6:8D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1011
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XvRv-1ThuYwjS6UTt1MiY1tTxo0.roa
Signing time: Thu 01 Jan 2026 01:41:46 +0000
ROA not before: Thu 01 Jan 2026 01:41:46 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 19:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4113 (0x1011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 1 01:41:46 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=5EF46FFB54E1B98C234BA513B75322635B53C68D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:f2:da:df:e7:b4:68:17:3b:5c:c0:00:67:
40:d7:d1:61:72:6c:a0:97:61:73:3e:ab:19:ba:cb:
d9:e8:be:a8:5d:43:c4:62:64:b4:5b:39:ee:f8:62:
e3:3b:f5:36:37:38:b4:df:d1:10:a5:03:d3:18:04:
d3:8b:27:80:f1:61:0e:64:7f:ed:bb:27:59:d7:51:
f9:f9:21:61:7b:2e:23:00:97:5e:07:6b:41:b7:d6:
4d:db:b6:a4:fc:97:bc:1e:6a:36:5c:31:f2:4c:46:
2d:68:09:e9:82:08:40:b9:1f:0f:80:b5:7b:70:5b:
b5:8b:4e:15:c1:8b:9f:12:3c:63:fe:90:30:42:98:
db:aa:0f:22:47:a1:bd:40:d6:8f:42:2c:bc:c6:bd:
65:ea:f5:21:ba:a5:e7:91:e1:ae:20:99:9b:8a:a0:
49:1e:1d:23:e2:5a:b3:1d:53:5d:ed:ff:e6:61:96:
da:13:79:47:48:aa:c8:e6:ff:7b:4e:a2:ad:ed:ef:
64:85:96:99:3a:b2:9b:9c:0a:d8:be:23:dd:71:c0:
51:da:e2:7b:73:6b:7c:1b:b0:c6:fd:f3:ac:bc:6e:
0b:e6:92:a9:3e:fa:10:4e:d3:df:e1:02:a0:a8:4d:
53:68:d7:2b:19:0e:16:af:46:b7:36:08:df:44:39:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:6F:FB:54:E1:B9:8C:23:4B:A5:13:B7:53:22:63:5B:53:C6:8D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XvRv-1ThuYwjS6UTt1MiY1tTxo0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.3.0/24
Signature Algorithm: sha256WithRSAEncryption
02:72:f3:66:85:35:98:74:05:9c:af:b9:61:65:03:65:d7:3a:
1a:17:d5:22:44:dc:bd:b5:30:86:d8:62:4e:04:96:59:97:39:
5c:e0:40:b9:71:de:b8:59:b4:c4:d9:7b:e5:8b:c8:a4:cc:9e:
6c:da:bc:6e:cb:83:56:f2:44:34:55:f8:62:ca:11:d1:a1:ed:
d0:84:cc:12:d9:fd:6a:2d:87:ab:ec:ef:48:33:d3:3e:54:44:
9e:3b:b3:39:1c:ed:11:f8:ee:ca:33:38:61:51:6e:cc:de:0b:
cf:ae:81:32:a2:9d:d2:b0:e6:1e:12:2d:15:14:be:aa:a6:0a:
c1:2e:fb:a2:cc:a2:f0:dc:51:19:ec:21:f0:2e:35:30:74:aa:
e0:df:8e:e0:a3:b5:79:2b:59:3c:01:f5:d3:68:37:87:8f:ce:
ba:3b:2d:c5:fb:d1:1c:ca:2e:66:15:fb:08:a8:25:cb:67:bf:
90:36:ba:58:2d:dc:1d:36:15:b7:6a:02:d0:38:a0:a1:10:0a:
bb:33:83:3c:fb:65:70:6b:23:f3:57:38:73:f0:39:8c:5b:7b:
86:14:8c:47:2a:14:bd:ae:f3:73:ca:62:05:4a:fd:ef:59:bb:
eb:a2:1b:28:7b:a4:91:99:d7:28:c0:76:66:4e:62:b9:ad:c0:
89:43:8a:76
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAxMDEw
MTQxNDZaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFRjQ2RkZCNTRFMUI5
OEMyMzRCQTUxM0I3NTMyMjYzNUI1M0M2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRxPLa3+e0aBc7XMAAZ0DX0WFybKCXYXM+qxm6y9novqhdQ8Ri
ZLRbOe74YuM79TY3OLTf0RClA9MYBNOLJ4DxYQ5kf+27J1nXUfn5IWF7LiMAl14H
a0G31k3btqT8l7weajZcMfJMRi1oCemCCEC5Hw+AtXtwW7WLThXBi58SPGP+kDBC
mNuqDyJHob1A1o9CLLzGvWXq9SG6peeR4a4gmZuKoEkeHSPiWrMdU13t/+ZhltoT
eUdIqsjm/3tOoq3t72SFlpk6spucCti+I91xwFHa4ntza3wbsMb986y8bgvmkqk+
+hBO09/hAqCoTVNo1ysZDhavRrc2CN9EOedFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUXvRv+1ThuYwjS6UTt1MiY1tTxo0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1h2UnYtMVRodVl3alM2VVR0MU1pWTF0VHhvMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABSwMwDQYJKoZIhvcNAQELBQADggEBAAJy82aFNZh0BZyvuWFlA2XXOhoX
1SJE3L21MIbYYk4EllmXOVzgQLlx3rhZtMTZe+WLyKTMnmzavG7Lg1byRDRV+GLK
EdGh7dCEzBLZ/Woth6vs70gz0z5URJ47szkc7RH47sozOGFRbszeC8+ugTKindKw
5h4SLRUUvqqmCsEu+6LMovDcURnsIfAuNTB0quDfjuCjtXkrWTwB9dNoN4ePzro7
LcX70RzKLmYV+wioJctnv5A2ulgt3B02FbdqAtA4oKEQCrszgzz7ZXBrI/NXOHPw
OYxbe4YUjEcqFL2u83PKYgVK/e9Zu+uiGyh7pJGZ1yjAdmZOYrmtwIlDinY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:03:54 2026 by rpki-client