This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/xvm_cddR8zPMMNAmCsTsUIVre28.roa
File: xvm_cddR8zPMMNAmCsTsUIVre28.roa (raw, json)
Hash identifier: CuEbSZWaUqCECTLu6UG/YrXDjY+pMe9Z7AehNK+MNZk=
Subject key identifier: C6:F9:BF:71:D7:51:F3:33:CC:30:D0:26:0A:C4:EC:50:85:6B:7B:6F
Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial: 5F
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/xvm_cddR8zPMMNAmCsTsUIVre28.roa
Signing time: Thu 01 Jan 2026 01:38:06 +0000
ROA not before: Thu 01 Jan 2026 01:38:06 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 131934
IP address blocks: 221.132.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 06:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
Validity
Not Before: Jan 1 01:38:06 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=C6F9BF71D751F333CC30D0260AC4EC50856B7B6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:25:56:71:80:47:c7:89:1e:1d:e8:a5:6b:
db:34:1d:8f:f6:8c:68:e0:b1:09:df:af:c1:76:3c:
ba:38:0d:e3:75:83:4b:a2:84:d5:a4:13:de:18:56:
1c:ff:e7:b3:01:e2:18:d9:b5:89:5b:9b:ea:3d:fd:
41:3b:45:43:12:bf:68:96:0d:e8:3b:be:4b:b0:5e:
d8:39:0b:54:1d:7f:37:0e:c0:7c:21:b2:af:21:74:
5b:df:de:30:ea:cc:dd:38:16:d7:e2:3d:c4:02:f7:
39:cb:da:7b:6d:a1:4b:16:90:74:c5:b1:a2:9a:30:
97:29:21:0c:c6:5b:5a:6c:66:2f:56:e8:07:d3:4f:
0f:80:77:ed:20:a3:0e:5a:10:67:a2:c2:89:d7:ae:
05:b6:b8:eb:10:b1:ec:f2:00:c8:cf:b6:8e:78:5d:
97:ad:db:60:01:5d:3c:8f:7a:5e:5c:65:3c:61:10:
24:1c:a2:84:b5:a1:29:9c:29:5d:d1:e8:b7:3b:3e:
c2:4c:a3:41:a5:56:65:52:02:26:d2:d7:df:59:b1:
b6:b0:94:dd:2c:92:dc:a0:11:c8:42:87:78:5c:d8:
7b:6e:81:9b:bf:60:07:f1:bd:d8:0b:de:f0:77:05:
97:3d:ff:43:d0:84:f2:5b:40:e6:2d:74:4e:86:7e:
b7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:BF:71:D7:51:F3:33:CC:30:D0:26:0A:C4:EC:50:85:6B:7B:6F
X509v3 Authority Key Identifier:
keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/xvm_cddR8zPMMNAmCsTsUIVre28.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
221.132.96.0/20
Signature Algorithm: sha256WithRSAEncryption
07:1b:43:b7:d7:a8:3f:bb:9a:65:ca:bb:ad:8f:4d:bd:e0:30:
f8:8c:4a:26:cb:b1:47:3b:4f:c8:ef:f5:4b:e8:69:5e:e7:7d:
2c:ed:31:5d:92:0d:f1:88:ce:f3:e4:83:72:3a:65:d0:1d:51:
1b:c5:a1:e9:d7:19:a3:57:c2:c6:de:98:5d:e7:5d:e1:03:c1:
01:c2:7a:9b:3c:65:0d:42:20:99:30:0f:35:33:63:90:75:77:
18:53:31:11:b1:d4:ae:2f:cb:24:7d:35:42:e7:dc:97:74:47:
c4:56:4a:06:3a:6d:32:5e:84:ad:00:97:95:92:5c:7e:5b:bb:
02:40:4c:5c:43:b6:40:aa:fc:d4:4c:a4:2a:bc:52:11:a6:0b:
84:f8:ed:82:7c:15:dc:ae:31:4a:a1:a0:12:c2:3b:fe:9d:6e:
d6:90:de:da:e1:51:55:b8:e0:e8:e8:6b:6d:44:0e:77:1e:24:
d2:fc:44:9a:40:22:ae:3c:39:6f:a0:b5:ff:b0:89:70:96:00:
5c:89:5c:b2:3f:4c:7f:e9:ca:a7:33:08:f6:da:63:27:b4:18:
90:b4:65:ed:f0:e7:5b:0f:03:4d:db:fb:24:25:c3:7b:4f:70:
52:2e:5a:bb:ab:e0:c7:21:51:6b:bb:4c:e6:79:c1:cb:6b:5b:
74:89:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:56:23 2026 by rpki-client