This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rHA6JsneqZkIt33K1O9DhqAf1c4.roa
File: rHA6JsneqZkIt33K1O9DhqAf1c4.roa (raw, json)
Hash identifier: Xm2ht2XXs+IQeJAi6AVXkQU4GDidEgvOgN87ZAGQIR4=
Subject key identifier: AC:70:3A:26:C9:DE:A9:99:08:B7:7D:CA:D4:EF:43:86:A0:1F:D5:CE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0FE4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rHA6JsneqZkIt33K1O9DhqAf1c4.roa
Signing time: Mon 01 Dec 2025 01:31:19 +0000
ROA not before: Mon 01 Dec 2025 01:31:19 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4068 (0xfe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Dec 1 01:31:19 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=AC703A26C9DEA99908B77DCAD4EF4386A01FD5CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:a2:d8:7e:86:8f:aa:e6:74:21:cb:31:5a:
89:50:02:df:e3:22:b5:f3:f4:7b:2c:30:5b:eb:ad:
15:fe:8d:db:50:9b:1e:3b:92:12:35:71:58:c6:f5:
02:30:f5:f5:1b:cd:25:cb:61:af:24:60:f6:49:44:
42:c6:8b:6f:ed:7e:7a:06:ea:90:0d:bb:7e:22:82:
0a:65:55:5a:9d:be:08:c2:b0:ae:26:0f:de:af:16:
4f:ff:b7:6c:2e:5a:e6:7e:e8:b8:94:4e:2d:10:0d:
17:28:8e:67:7c:7b:11:4a:97:83:28:f6:20:10:92:
b4:18:ee:95:35:36:f6:d6:85:00:bd:fd:a9:79:5c:
e3:e1:cf:36:b7:54:59:d9:3a:45:b0:5b:95:ba:e3:
8c:77:61:04:54:4b:d1:84:b8:97:ac:7c:8d:25:d8:
69:d8:0d:8c:cd:68:c8:b6:75:c1:89:06:15:93:3b:
2a:b4:57:e4:c2:8e:04:6f:4d:ae:c1:6f:0b:20:69:
89:cf:fa:c3:f3:9e:86:49:25:68:4a:c9:1d:c1:1a:
c6:a5:ab:f3:db:6c:d6:c4:35:b9:b9:7e:42:9e:0d:
26:7d:ab:69:9e:a4:ad:a9:35:be:e2:76:9f:58:2d:
58:f9:02:e8:5b:b4:b2:af:8e:89:d6:4d:5d:cc:1e:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:70:3A:26:C9:DE:A9:99:08:B7:7D:CA:D4:EF:43:86:A0:1F:D5:CE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rHA6JsneqZkIt33K1O9DhqAf1c4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:80:35:8a:26:74:45:80:91:1e:23:17:34:7e:fe:61:d5:58:
b7:c8:44:2a:0b:bb:af:5b:8b:70:75:d0:e4:7b:b3:6a:33:fe:
31:86:89:4f:2b:57:b5:1c:87:a6:c6:5a:c9:5a:40:41:35:62:
cc:2a:06:cf:e9:ff:34:67:e6:c8:bc:53:6d:1e:cf:88:5f:1b:
61:84:84:ee:02:bb:4c:69:81:10:64:70:18:ea:ea:45:65:7d:
0d:4c:10:92:7d:36:cd:6e:55:bf:97:5d:1b:e1:e5:72:4b:d1:
ae:85:be:45:c7:84:35:e9:b2:5a:56:b8:d3:71:45:a2:e7:f9:
d8:8a:7c:30:e5:92:e7:eb:46:5f:76:d6:e6:0b:91:ae:21:5e:
e2:16:f7:07:10:8d:62:19:73:c9:b9:b4:28:b2:f3:34:dd:be:
74:56:14:8d:0c:10:1b:3f:24:0a:d2:03:74:16:e1:73:38:6b:
ea:d1:1d:27:c0:d4:48:b7:87:23:48:c0:52:50:ad:35:a2:9f:
47:ab:d6:58:e9:6e:3b:59:f6:5c:5c:e1:62:75:d1:8e:b8:f3:
89:03:8a:c2:49:0a:54:7c:ab:e8:95:57:44:e3:40:83:c4:99:
5d:2b:02:ad:56:44:b9:2f:2a:bf:57:31:cb:b3:5f:ee:94:fe:
db:f3:71:6b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICD+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTEyMDEw
MTMxMTlaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDNzAzQTI2QzlERUE5
OTkwOEI3N0RDQUQ0RUY0Mzg2QTAxRkQ1Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7k6LYfoaPquZ0IcsxWolQAt/jIrXz9HssMFvrrRX+jdtQmx47
khI1cVjG9QIw9fUbzSXLYa8kYPZJRELGi2/tfnoG6pANu34iggplVVqdvgjCsK4m
D96vFk//t2wuWuZ+6LiUTi0QDRcojmd8exFKl4Mo9iAQkrQY7pU1NvbWhQC9/al5
XOPhzza3VFnZOkWwW5W644x3YQRUS9GEuJesfI0l2GnYDYzNaMi2dcGJBhWTOyq0
V+TCjgRvTa7BbwsgaYnP+sPznoZJJWhKyR3BGsalq/PbbNbENbm5fkKeDSZ9q2me
pK2pNb7idp9YLVj5AuhbtLKvjonWTV3MHnhRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrHA6JsneqZkIt33K1O9DhqAf1c4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3JIQTZKc25lcVprSXQzM0sxTzlEaHFBZjFjNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQxbcAwDQYJKoZIhvcNAQELBQADggEBAB2ANYomdEWAkR4jFzR+/mHVWLfI
RCoLu69bi3B10OR7s2oz/jGGiU8rV7Uch6bGWslaQEE1YswqBs/p/zRn5si8U20e
z4hfG2GEhO4Cu0xpgRBkcBjq6kVlfQ1MEJJ9Ns1uVb+XXRvh5XJL0a6FvkXHhDXp
slpWuNNxRaLn+diKfDDlkufrRl921uYLka4hXuIW9wcQjWIZc8m5tCiy8zTdvnRW
FI0MEBs/JArSA3QW4XM4a+rRHSfA1Ei3hyNIwFJQrTWin0er1ljpbjtZ9lxc4WJ1
0Y6484kDisJJClR8q+iVV0TjQIPEmV0rAq1WRLkvKr9XMcuzX+6U/tvzcWs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:42:08 2025 by rpki-client