This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/HkYtJFlA-6rPQN0poB5ciNeGcok.roa File: HkYtJFlA-6rPQN0poB5ciNeGcok.roa (raw, json) Hash identifier: Wl3VB8T1SWzR3IburkIi7LaIZW1Qoou184gbhzmmC+I= Subject key identifier: 1E:46:2D:24:59:40:FB:AA:CF:40:DD:29:A0:1E:5C:88:D7:86:72:89 Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Certificate serial: 3255 Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/HkYtJFlA-6rPQN0poB5ciNeGcok.roa Signing time: Thu 01 Jan 2026 01:30:24 +0000 ROA not before: Thu 01 Jan 2026 01:30:24 +0000 ROA not after: Tue 15 Dec 2026 01:30:02 +0000 asID: 7671 IP address blocks: 210.233.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 03:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12885 (0x3255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Validity Not Before: Jan 1 01:30:24 2026 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=1E462D245940FBAACF40DD29A01E5C88D7867289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:71:4f:1c:7e:0c:3a:31:63:3b:ef:d6:d6: 25:d1:de:4b:56:2b:e2:e2:b8:c7:3d:29:d9:30:f6: 81:96:72:fb:1f:3e:92:e5:fc:ea:ce:db:42:b1:ee: e0:e2:1d:0b:c4:43:36:43:57:2d:e7:35:0d:0b:cc: fc:7a:48:0e:b0:52:31:f2:25:0a:c2:91:2b:6e:25: dd:e0:3b:44:5e:2d:f6:87:44:a7:64:78:1f:5c:b1: b0:69:63:17:52:2c:50:14:1b:5a:de:f0:c5:49:cb: dc:1d:ad:f1:3f:99:32:3a:61:9a:a1:68:13:be:46: 55:95:49:8d:6e:2c:7e:95:59:e3:df:5f:ab:bb:bc: c1:13:19:82:ef:c8:e8:9b:af:d5:52:78:0d:ea:dc: b7:7d:f7:01:d6:4d:76:73:33:17:4e:e8:e5:8d:9b: 29:8c:11:9f:b2:da:4b:7e:04:73:f4:5c:11:e2:36: 13:ab:43:24:12:a9:06:77:ea:1a:34:78:e0:60:ed: 6f:6c:6d:fa:e6:d4:7c:3e:80:97:e8:ad:c8:dd:33: 81:9d:25:9a:72:db:21:f9:73:0b:1a:60:0b:83:17: 8f:3b:7d:01:b7:7e:e4:50:03:d5:03:b9:88:34:f3: af:0c:62:83:5f:06:a4:e4:4a:0a:b4:49:b4:d1:a5: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:46:2D:24:59:40:FB:AA:CF:40:DD:29:A0:1E:5C:88:D7:86:72:89 X509v3 Authority Key Identifier: keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/HkYtJFlA-6rPQN0poB5ciNeGcok.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.233.240.0/20 Signature Algorithm: sha256WithRSAEncryption 68:5a:d9:f1:b0:c1:10:0c:19:56:6d:01:c0:cf:fc:67:9d:74: ab:55:b1:47:66:9b:5c:9f:46:6e:42:c3:10:48:ba:41:69:20: ff:d0:24:a6:d6:ff:80:8c:74:c6:e5:d8:55:c1:77:70:fa:db: c5:10:8e:6c:ed:96:b6:68:4e:1a:69:42:2c:44:35:20:f5:e9: af:66:6f:6c:5f:b8:0d:3f:05:4f:33:1e:a7:50:c4:3d:38:c9: 9d:41:43:d1:8b:a0:f9:8d:78:4e:cc:2b:38:09:fa:0e:56:d1: 71:51:7a:e1:6e:e4:08:22:2a:a6:49:5a:b8:13:6a:ea:4f:58: 7a:1d:05:6f:fe:18:16:ef:5b:10:be:24:47:fb:80:d3:8a:ff: 58:67:cc:03:20:bc:4d:97:99:3a:8d:4d:4e:bb:0a:6c:96:7d: 93:3f:4e:35:47:87:b8:fd:e7:f4:01:a2:9c:32:01:56:7c:f0: 0c:e7:a9:11:32:e0:3d:b5:cf:9f:16:76:85:db:41:6a:92:ed: 51:99:89:28:f7:1d:a4:5e:15:1a:a3:17:3a:56:96:85:da:45: d6:97:48:0c:dc:c3:96:d2:37:12:fb:84:bd:46:89:49:de:07: 23:01:83:4a:7b:1e:ff:98:60:7e:0a:fa:0d:31:c7:4e:65:16: fe:3e:05:a1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICMlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNjAxMDEw MTMwMjRaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFNDYyRDI0NTk0MEZC QUFDRjQwREQyOUEwMUU1Qzg4RDc4NjcyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdKnFPHH4MOjFjO+/W1iXR3ktWK+LiuMc9Kdkw9oGWcvsfPpLl /OrO20Kx7uDiHQvEQzZDVy3nNQ0LzPx6SA6wUjHyJQrCkStuJd3gO0ReLfaHRKdk eB9csbBpYxdSLFAUG1re8MVJy9wdrfE/mTI6YZqhaBO+RlWVSY1uLH6VWePfX6u7 vMETGYLvyOibr9VSeA3q3Ld99wHWTXZzMxdO6OWNmymMEZ+y2kt+BHP0XBHiNhOr QyQSqQZ36ho0eOBg7W9sbfrm1Hw+gJforcjdM4GdJZpy2yH5cwsaYAuDF487fQG3 fuRQA9UDuYg0868MYoNfBqTkSgq0SbTRpf8tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHkYtJFlA+6rPQN0poB5ciNeGcokwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjk5L0hrWXRKRmxBLTZyUFFOMHBvQjVjaU5lR2Nvay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATS6fAwDQYJKoZIhvcNAQELBQADggEBAGha2fGwwRAMGVZtAcDP/GeddKtV sUdmm1yfRm5CwxBIukFpIP/QJKbW/4CMdMbl2FXBd3D628UQjmztlrZoThppQixE NSD16a9mb2xfuA0/BU8zHqdQxD04yZ1BQ9GLoPmNeE7MKzgJ+g5W0XFReuFu5Agi KqZJWrgTaupPWHodBW/+GBbvWxC+JEf7gNOK/1hnzAMgvE2XmTqNTU67CmyWfZM/ TjVHh7j95/QBopwyAVZ88AznqREy4D21z58WdoXbQWqS7VGZiSj3HaReFRqjFzpW loXaRdaXSAzcw5bSNxL7hL1GiUneByMBg0p7Hv+YYH4K+g0xx05lFv4+BaE= -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:44 2026 by rpki-client