This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/TZhMguU14RSDsu6f6Po5541XVTw.roa
File: TZhMguU14RSDsu6f6Po5541XVTw.roa (raw, json)
Hash identifier: 9GpbRdW16SCQrJIC5vfmFAmXJaTfotIr5Ov25HB8r3U=
Subject key identifier: 4D:98:4C:82:E5:35:E1:14:83:B2:EE:9F:E8:FA:39:E7:8D:57:55:3C
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 84
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/TZhMguU14RSDsu6f6Po5541XVTw.roa
Signing time: Thu 01 Jan 2026 01:31:58 +0000
ROA not before: Thu 01 Jan 2026 01:31:58 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 37892
IP address blocks: 202.145.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 23:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: Jan 1 01:31:58 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=4D984C82E535E11483B2EE9FE8FA39E78D57553C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:91:17:6e:52:c3:60:19:b2:a5:80:78:82:09:
9b:0a:45:05:b1:98:01:82:fd:7d:d0:88:4b:70:98:
99:da:0e:49:ff:7b:c6:f4:9d:cd:e2:84:fa:dc:86:
ab:f0:e1:50:bf:5b:2f:5f:90:91:ba:5c:7f:45:6e:
62:5e:31:b9:af:c7:77:7f:55:7e:34:7e:24:a8:0d:
b6:dd:eb:73:05:21:01:f4:6d:43:7e:bd:c4:c5:9c:
2b:de:33:a0:e9:a7:5e:dd:76:7e:50:4e:2e:29:78:
be:c6:02:5c:99:58:af:0f:e8:d0:93:1b:37:0d:8d:
45:0e:e5:b9:dd:0f:e1:75:65:1b:5e:73:69:49:ca:
f0:52:b0:31:a8:8d:4b:dd:25:e2:4e:0d:eb:39:ba:
fb:da:34:b6:72:b0:c6:5f:b7:24:31:91:38:96:6d:
d5:53:2a:63:76:83:5c:23:59:ed:c0:47:45:4f:70:
59:52:55:56:18:67:a7:69:88:c7:3c:fe:a4:19:dc:
9d:71:c7:c6:08:34:fd:7d:12:56:0c:3e:6f:dd:81:
49:7e:50:df:44:55:fb:25:8a:07:b6:fb:f1:86:2c:
fe:79:66:72:96:57:1f:8b:ee:16:0a:d8:e2:8c:6e:
d4:a1:71:e1:95:c2:f4:16:b4:1d:f4:a5:ae:92:b9:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:98:4C:82:E5:35:E1:14:83:B2:EE:9F:E8:FA:39:E7:8D:57:55:3C
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/TZhMguU14RSDsu6f6Po5541XVTw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.145.20.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:f1:fd:8b:9d:3e:40:db:6f:20:f2:0b:7d:07:93:02:b3:d0:
d6:77:24:bc:2f:97:98:57:24:ec:16:ae:84:7d:54:55:a4:94:
00:95:84:07:3d:83:23:8c:9e:e1:ea:bc:1e:2c:e7:0b:9b:ad:
67:73:ba:74:bd:50:bf:a0:ef:9d:5f:13:f8:ee:d5:f0:c7:17:
5a:b3:e2:f5:7f:e7:bb:58:40:c6:32:1f:6b:1c:86:c3:ff:03:
7c:dd:d9:de:1d:9c:af:e7:ff:ae:fd:7a:d4:16:6e:f7:37:06:
12:b3:5a:1b:f4:b3:de:4b:50:e3:5d:72:54:0c:f5:de:17:15:
60:7c:97:17:81:28:80:75:97:44:5b:62:aa:46:ec:d2:3b:60:
48:05:f4:85:d7:58:c3:06:df:de:1a:74:93:bd:75:79:13:0e:
1c:67:f2:02:7e:38:57:ee:0b:33:cb:8f:e7:29:8f:a3:38:65:
53:37:3a:0f:dd:35:50:4f:44:cf:55:af:29:89:6e:de:79:36:
a9:1b:a4:17:99:f7:72:12:56:e1:8a:68:7d:ff:a2:7c:82:82:
45:43:54:87:41:27:a3:93:b0:91:be:42:45:07:3c:32:c3:1d:
e7:a9:9d:14:fd:ff:b3:61:5c:eb:63:f6:db:e2:f8:9c:69:de:
ba:72:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:53 2026 by rpki-client