This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xYkfhxwymqpal0x5-X5R1kgdHn4.roa
File: xYkfhxwymqpal0x5-X5R1kgdHn4.roa (raw, json)
Hash identifier: l03sCzNfS1GGWGN1Bh13Lfq2E2gMabim+F9rz3ZrMbU=
Subject key identifier: C5:89:1F:87:1C:32:9A:AA:5A:97:4C:79:F9:7E:51:D6:48:1D:1E:7E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1045
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xYkfhxwymqpal0x5-X5R1kgdHn4.roa
Signing time: Thu 01 Jan 2026 01:51:58 +0000
ROA not before: Thu 01 Jan 2026 01:51:58 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 19:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4165 (0x1045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 1 01:51:58 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=C5891F871C329AAA5A974C79F97E51D6481D1E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:e2:ce:21:c8:40:3f:f8:9e:ee:10:ba:23:
59:9d:fe:01:cd:a4:5a:10:f5:5f:18:29:cc:e8:d1:
43:ea:6b:0d:f4:7f:4f:7b:19:44:05:a3:05:9e:22:
3e:be:9b:0b:a6:bc:30:84:32:a1:47:b0:c9:a9:6b:
f2:df:57:18:70:1f:93:6f:0e:7f:f9:da:c3:d9:96:
6b:8a:54:f9:0b:f6:78:31:5c:a6:0d:8e:7e:7b:ea:
71:bb:c8:b0:39:8b:56:23:46:df:ba:db:c4:a2:4e:
b6:ea:de:b3:6c:f0:2a:7d:ae:c2:c5:8c:bd:f1:37:
3e:22:ee:43:91:96:3e:c4:08:05:0c:c6:fc:71:48:
74:7d:2f:ed:dd:4b:c6:3f:65:ad:88:2e:db:e0:cf:
4c:61:50:2c:3e:43:63:00:4a:ba:27:fb:70:56:96:
db:7b:ca:ea:81:e0:76:98:88:25:f3:d5:89:e2:28:
ec:06:f7:7f:69:cd:da:e5:dd:75:7c:48:d8:23:1b:
d8:d9:ae:20:cf:58:f1:1d:de:a6:fd:c1:94:fe:ba:
5d:07:76:3d:93:ab:9d:3c:3c:16:f3:6b:80:4e:26:
12:50:b5:d7:86:65:7a:fe:58:b4:e8:dd:48:4c:ff:
3f:07:b6:6d:aa:bb:70:4a:a7:d1:e7:37:8a:3f:e9:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:89:1F:87:1C:32:9A:AA:5A:97:4C:79:F9:7E:51:D6:48:1D:1E:7E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xYkfhxwymqpal0x5-X5R1kgdHn4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:32:e2:c7:34:9a:0c:59:c7:20:21:a9:80:ee:f2:69:ef:72:
ae:96:1a:e3:11:85:bb:12:67:43:8c:97:88:1e:f5:c2:98:99:
bd:82:cd:28:44:bf:49:7e:cc:ad:45:4a:0b:b8:65:2f:bc:f2:
dc:26:49:95:74:b8:a2:bf:06:60:9c:f6:64:a3:74:50:b4:fc:
29:eb:de:1b:e5:50:a4:69:8f:8e:81:73:00:cd:5a:43:1e:d8:
98:57:e5:8f:f8:aa:92:4f:6b:e4:be:37:57:99:b3:e2:a8:33:
9f:c0:0e:14:64:a7:4d:6f:d4:a8:d2:b4:74:f9:64:c2:ae:c8:
84:b4:02:f3:b3:94:9a:78:21:65:8e:e4:b1:bb:2b:56:38:58:
71:08:5b:0e:d2:49:77:1b:aa:ce:9b:d1:e5:2e:4d:fd:72:27:
c5:95:86:79:05:35:06:3f:d3:b3:29:b5:a8:25:45:43:86:f8:
a1:48:76:9f:4c:50:69:a9:b2:5b:ff:89:86:37:95:3b:6b:9e:
83:85:d7:17:a1:1e:71:90:48:04:a7:24:28:83:98:9f:19:d0:
81:87:cd:9e:f5:b6:ce:cf:83:28:2c:d2:5d:9d:94:c5:8a:01:
3e:77:33:b2:f1:a3:94:df:94:8b:99:bd:eb:10:ec:cb:c2:a1:
43:00:29:a9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAxMDEw
MTUxNThaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1ODkxRjg3MUMzMjlB
QUE1QTk3NEM3OUY5N0U1MUQ2NDgxRDFFN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC60OLOIchAP/ie7hC6I1md/gHNpFoQ9V8YKczo0UPqaw30f097
GUQFowWeIj6+mwumvDCEMqFHsMmpa/LfVxhwH5NvDn/52sPZlmuKVPkL9ngxXKYN
jn576nG7yLA5i1YjRt+628SiTrbq3rNs8Cp9rsLFjL3xNz4i7kORlj7ECAUMxvxx
SHR9L+3dS8Y/Za2ILtvgz0xhUCw+Q2MASron+3BWltt7yuqB4HaYiCXz1YniKOwG
939pzdrl3XV8SNgjG9jZriDPWPEd3qb9wZT+ul0Hdj2Tq508PBbza4BOJhJQtdeG
ZXr+WLTo3UhM/z8Htm2qu3BKp9HnN4o/6c9xAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUxYkfhxwymqpal0x5+X5R1kgdHn4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3hZa2ZoeHd5bXFwYWwweDUtWDVSMWtnZEhuNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYXQwDQYJKoZIhvcNAQELBQADggEBAG4y4sc0mgxZxyAhqYDu8mnvcq6W
GuMRhbsSZ0OMl4ge9cKYmb2CzShEv0l+zK1FSgu4ZS+88twmSZV0uKK/BmCc9mSj
dFC0/Cnr3hvlUKRpj46BcwDNWkMe2JhX5Y/4qpJPa+S+N1eZs+KoM5/ADhRkp01v
1KjStHT5ZMKuyIS0AvOzlJp4IWWO5LG7K1Y4WHEIWw7SSXcbqs6b0eUuTf1yJ8WV
hnkFNQY/07MptaglRUOG+KFIdp9MUGmpslv/iYY3lTtrnoOF1xehHnGQSASnJCiD
mJ8Z0IGHzZ71ts7Pgygs0l2dlMWKAT53M7Lxo5TflIuZvesQ7MvCoUMAKak=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:39:10 2026 by rpki-client