This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/xgn42FYz8uC5TQcA488IyWOyHdU.roa
File: xgn42FYz8uC5TQcA488IyWOyHdU.roa (raw, json)
Hash identifier: E+jiSaRRgPehvBjWTEnaKy8UK9/aro37Iu0u/tz51V8=
Subject key identifier: C6:09:F8:D8:56:33:F2:E0:B9:4D:07:00:E3:CF:08:C9:63:B2:1D:D5
Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial: 51
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/xgn42FYz8uC5TQcA488IyWOyHdU.roa
Signing time: Thu 01 Jan 2026 01:32:21 +0000
ROA not before: Thu 01 Jan 2026 01:32:21 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 37908
IP address blocks: 202.236.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 06:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Validity
Not Before: Jan 1 01:32:21 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=C609F8D85633F2E0B94D0700E3CF08C963B21DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:d2:ea:f1:23:85:9f:98:31:64:bb:e9:fb:
9f:7f:70:00:69:dd:06:f5:3e:fd:26:22:87:53:49:
a8:9d:17:4b:8a:50:c6:8b:64:eb:f4:e0:1c:46:dc:
80:0e:73:11:6a:e2:a3:23:94:6b:33:0e:dc:75:f4:
6f:98:8d:a6:f0:dc:3e:f7:44:84:9d:21:03:dd:b4:
67:1a:7b:27:26:98:05:d4:54:22:99:74:19:e7:99:
d9:b8:c1:46:ee:e8:ec:0e:d9:e6:36:30:71:b8:25:
93:92:eb:2f:e2:ae:3a:c9:6f:4b:34:bf:a1:49:b2:
48:3d:e4:87:ca:11:47:de:8b:42:6c:af:e3:bf:58:
fc:98:19:15:a7:2e:c8:23:93:a6:fc:de:64:98:a2:
ee:43:b1:9c:d3:b0:37:33:32:ca:12:b3:4f:aa:e1:
35:88:e2:b9:7f:84:9f:df:6c:82:5d:0e:ba:c8:00:
9d:2b:7b:b7:5d:ab:4a:d8:3c:85:b2:67:ed:4d:cf:
72:1d:83:2b:24:8a:20:ff:56:6a:1a:34:5b:4d:a4:
3d:ec:13:7c:a8:dc:5f:72:87:df:00:b2:62:a0:14:
dc:45:52:e6:85:17:00:92:cc:71:62:58:4a:5f:42:
66:d9:c6:c8:93:8f:1d:bb:2e:26:55:a6:26:c8:3d:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:F8:D8:56:33:F2:E0:B9:4D:07:00:E3:CF:08:C9:63:B2:1D:D5
X509v3 Authority Key Identifier:
keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/xgn42FYz8uC5TQcA488IyWOyHdU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:43:c2:51:c2:52:36:81:1e:64:29:8a:88:1e:ab:79:c7:5b:
8f:30:e7:57:39:da:19:51:2b:89:64:a0:4c:d0:a1:60:d6:3a:
9a:67:b2:6b:a2:46:1c:8a:ee:69:a8:10:50:32:d7:e2:a5:95:
68:a9:e0:ff:15:a1:30:07:85:58:45:14:af:41:8e:f6:54:22:
64:24:14:62:97:1f:97:57:f0:0e:4e:9c:a4:55:d1:b9:9a:e5:
07:82:98:c4:bb:22:07:1d:78:de:db:27:fe:14:a9:dc:30:07:
81:fd:8e:7f:6f:49:38:7b:9a:17:a1:29:ea:d2:61:49:72:5b:
74:82:41:44:63:ae:c8:4d:ce:92:64:97:3f:bf:3c:8c:3f:e8:
55:86:63:8c:ba:53:4d:4f:91:5a:84:40:c1:8e:5d:a6:a4:94:
9c:b8:56:d5:5d:f0:af:c1:06:fd:39:0a:45:76:9a:d6:16:dd:
91:b4:03:75:62:93:98:5a:46:13:4c:8c:a6:cb:fd:d1:13:d9:
1c:1d:36:02:4b:31:96:19:9b:a9:b7:34:6f:15:1e:dd:28:c8:
13:f0:45:16:34:82:e7:43:89:68:02:48:b3:15:f1:1e:ca:75:
87:96:ff:7f:c5:0f:d2:87:c0:a6:0e:7b:cc:71:db:67:31:fa:
a0:49:1f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:42:37 2026 by rpki-client