This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/onJzDUCSszKCFMa4kvtd7GPgdxo.roa
File: onJzDUCSszKCFMa4kvtd7GPgdxo.roa (raw, json)
Hash identifier: nJ/yXyFHifgAuKCiiuakWJBU9nOeXcu5Hfz4nI/4EmI=
Subject key identifier: A2:72:73:0D:40:92:B3:32:82:14:C6:B8:92:FB:5D:EC:63:E0:77:1A
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 59
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/onJzDUCSszKCFMa4kvtd7GPgdxo.roa
Signing time: Mon 01 Dec 2025 01:34:20 +0000
ROA not before: Mon 01 Dec 2025 01:34:20 +0000
ROA not after: Sun 15 Nov 2026 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Dec 1 01:34:20 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=A272730D4092B3328214C6B892FB5DEC63E0771A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2d:39:3c:5c:e9:71:03:9b:3d:b0:ce:a1:00:
66:f2:74:e2:50:ba:f5:07:a8:f4:05:bc:63:bf:15:
8f:e4:5e:fe:c2:f7:a3:95:a7:04:88:da:48:a4:1c:
97:df:fa:1c:66:5e:b5:55:e0:22:5b:8d:ca:be:e4:
4c:b9:c9:c1:2d:d2:2a:54:22:38:ab:7e:70:8a:d5:
47:20:7b:fc:cb:87:3d:48:db:cb:bd:03:06:59:88:
85:ac:61:c0:07:ca:20:7e:5e:03:d1:e5:62:dc:06:
f4:b3:2f:66:3d:db:89:ed:8d:1b:1e:88:d1:83:59:
41:16:60:0a:cb:bd:9e:0d:84:23:d8:7b:82:43:3f:
0a:80:fd:82:50:64:ab:02:cc:7c:eb:c4:a9:66:69:
9f:7f:93:42:48:28:1b:86:31:99:3e:29:f2:10:c0:
34:e8:6d:43:01:86:8f:08:57:90:89:05:ed:6a:a4:
33:96:4d:f3:c9:22:e6:88:e5:16:cc:23:93:29:3b:
54:41:6d:00:b0:9d:23:b2:78:f3:96:68:49:d5:af:
1d:9e:1a:2d:5c:8c:54:c5:b9:13:85:69:21:e9:4f:
cb:ac:5e:f7:68:b3:9f:dd:fa:50:8a:8d:c0:f0:5b:
5d:87:5e:2c:cd:df:d2:29:0b:c9:6c:38:c2:84:d2:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:73:0D:40:92:B3:32:82:14:C6:B8:92:FB:5D:EC:63:E0:77:1A
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/onJzDUCSszKCFMa4kvtd7GPgdxo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.141.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b7:05:cb:8f:02:48:fe:b8:c1:7d:21:68:47:0b:49:6f:19:
32:fe:80:9f:c5:f1:35:12:e7:27:d3:83:59:d5:fd:c9:19:57:
b6:91:43:ae:ee:df:ff:d5:aa:88:b9:fb:56:b8:7d:83:a4:25:
62:ea:f2:04:ba:b3:9d:ff:08:e7:a3:84:f8:47:01:a0:ec:6c:
21:16:5e:36:86:79:a3:47:32:fb:1f:ba:81:68:07:15:ae:49:
e1:5c:4f:09:60:c7:5b:55:d2:06:b4:72:e5:eb:8d:ca:2c:31:
6b:f0:01:89:e4:61:e6:77:72:7f:ad:83:2d:d5:6b:4b:1a:cd:
e0:a5:e2:5a:7c:c6:d0:f5:bf:4b:19:56:b1:d3:fe:74:42:fa:
da:ec:d8:97:c9:06:50:73:fd:43:57:99:a6:ad:55:7c:f4:59:
fb:86:47:4d:27:d0:12:85:6b:51:ec:3a:df:2c:f4:b0:5e:f6:
a1:e6:26:39:df:0d:f7:d8:73:6f:c4:5b:4e:bf:03:93:f1:fb:
20:87:38:c6:fb:a0:9f:56:c3:12:9a:42:ea:dc:5b:57:fd:27:
d8:04:5e:74:fc:1f:c9:97:e6:48:06:a6:7d:77:1a:e7:c8:5f:
52:af:1d:eb:0e:cc:d3:ad:02:20:72:5a:d9:b3:21:23:55:c2:
5d:9e:62:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:19 2025 by rpki-client