This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/HNr1B4gUavUqVS-r4iG8PfVQgc4.roa
File: HNr1B4gUavUqVS-r4iG8PfVQgc4.roa (raw, json)
Hash identifier: mwqnU9qgiD+5wMa6gBjW4TEFMsiaXdpjoJFjT+ZXDCo=
Subject key identifier: 1C:DA:F5:07:88:14:6A:F5:2A:55:2F:AB:E2:21:BC:3D:F5:50:81:CE
Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial: 34
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/HNr1B4gUavUqVS-r4iG8PfVQgc4.roa
Signing time: Fri 23 Jan 2026 03:08:21 +0000
ROA not before: Fri 23 Jan 2026 03:08:21 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 23831
IP address blocks: 219.100.128.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 03:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Validity
Not Before: Jan 23 03:08:21 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=1CDAF50788146AF52A552FABE221BC3DF55081CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:62:2c:74:33:ae:bd:2d:f8:2a:f3:b9:16:
5b:b4:2a:fd:8b:86:ae:18:82:94:f6:d5:8e:2c:55:
44:70:33:88:5d:9f:7d:11:8c:d7:17:7e:fc:b4:f1:
95:4a:f2:65:7c:3c:10:be:8e:d5:8e:b5:2c:48:0e:
ad:de:5a:ee:b6:f7:0b:44:5b:90:7d:18:ea:7b:29:
75:48:86:23:6e:97:44:fe:26:3d:e9:81:55:53:d1:
37:b0:e9:e5:72:5d:2d:83:85:8e:46:54:94:25:47:
62:40:5a:56:7c:f8:06:33:84:59:a1:ae:9c:72:aa:
ff:fd:2d:a2:ea:b6:db:86:1c:72:8a:74:ac:9d:1c:
b7:c1:fe:fd:05:d0:80:c7:6d:83:5e:e7:e6:ec:01:
83:ad:69:b8:90:2c:89:0a:ec:a6:0e:9c:22:f4:84:
5d:89:b4:c6:4c:cd:e5:e0:c4:0b:bc:ee:87:eb:a9:
66:e7:d6:89:88:96:51:88:7d:f5:0d:22:f9:6a:12:
17:44:dc:79:68:b6:6d:97:9a:0e:d0:1a:51:3c:5b:
5a:10:58:0b:9b:b0:4a:e8:34:4c:05:ab:54:77:10:
f7:ff:3b:0a:b5:d5:55:2f:c7:a3:9e:f4:35:71:45:
ce:b7:77:80:45:6b:14:87:ba:d2:6a:ef:61:5b:72:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DA:F5:07:88:14:6A:F5:2A:55:2F:AB:E2:21:BC:3D:F5:50:81:CE
X509v3 Authority Key Identifier:
keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/HNr1B4gUavUqVS-r4iG8PfVQgc4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.128.0/22
Signature Algorithm: sha256WithRSAEncryption
32:87:03:69:fc:34:fa:a0:53:2d:48:40:05:60:c0:cb:ca:93:
f1:7a:26:77:e1:6f:16:f2:75:2c:14:6a:73:04:f3:16:4c:8d:
fb:f1:97:f6:9a:ec:ba:1f:b0:bb:d9:d1:34:c5:1c:82:ea:4d:
85:19:1b:71:0a:67:e3:3c:f0:32:07:f8:a8:dc:31:8b:21:a6:
84:c1:6d:28:25:0f:ea:fd:5b:2c:aa:1d:d4:a0:2e:f7:03:2b:
bd:e7:98:26:18:91:8c:65:d8:d9:6d:02:1b:2a:3b:76:d2:40:
f0:37:45:58:38:92:55:b2:f1:76:99:61:a2:b7:f0:a0:7f:39:
8b:6e:e5:a7:c1:25:be:1f:2f:bb:f4:2c:90:f1:fb:34:2e:0e:
94:e4:23:46:b3:64:7d:37:cc:0a:1d:7c:65:d5:95:3b:a2:8a:
ec:8b:2d:41:2a:aa:7a:b0:57:dc:c4:2d:63:da:22:15:4c:91:
a1:95:e7:77:8d:5b:48:30:65:28:c2:d1:5a:94:30:5c:07:f4:
d7:84:24:53:89:5e:c1:88:f1:da:59:69:44:1b:45:7f:1a:2d:
25:d9:81:bb:0f:d9:85:d9:f6:8f:54:7e:2b:2b:fa:f8:ba:2e:
8f:30:21:57:08:19:a1:ca:ed:15:26:45:aa:8d:4d:1e:d5:3d:
62:9d:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:08:10 2026 by rpki-client