This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/CSMu1ryvQioKDyD7cSxBe7ofaFc.roa
File: CSMu1ryvQioKDyD7cSxBe7ofaFc.roa (raw, json)
Hash identifier: YQ/qkuHtT+RdEiGqEt4CbHQh9IDnyoMgVQrj/u4CtQc=
Subject key identifier: 09:23:2E:D6:BC:AF:42:2A:0A:0F:20:FB:71:2C:41:7B:BA:1F:68:57
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: D9
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/CSMu1ryvQioKDyD7cSxBe7ofaFc.roa
Signing time: Thu 01 Jan 2026 01:30:52 +0000
ROA not before: Thu 01 Jan 2026 01:30:52 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 18126
IP address blocks: 210.173.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 19:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Jan 1 01:30:52 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=09232ED6BCAF422A0A0F20FB712C417BBA1F6857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:d9:9d:85:aa:27:bf:cd:97:0b:a2:a1:88:
04:bd:e4:3d:ac:18:14:e2:aa:4c:6c:78:80:15:d1:
b7:de:79:ac:5e:35:6e:7d:31:24:1b:25:a9:d8:eb:
e0:09:52:cf:ab:b4:4d:c7:10:22:22:39:ab:74:08:
4e:be:e1:bd:8e:4c:d7:37:8f:02:7a:8a:c6:8b:5c:
fc:e6:26:59:1c:e5:2d:a4:c5:f6:e5:3f:dc:2f:ca:
c7:c9:ed:08:06:4e:01:d1:5d:2b:50:fc:18:4e:b3:
5b:8d:91:f7:55:01:59:52:a7:ed:4c:5f:a0:cf:a5:
84:8a:99:cc:9f:2f:f7:66:70:c1:b2:2b:f8:38:98:
95:bc:d4:cd:2e:3d:d2:e0:ee:5f:7d:40:65:65:3e:
a2:fa:c6:98:4e:8c:b9:50:ce:e0:f5:44:68:b0:70:
64:6c:da:be:c7:8e:9f:a7:99:5c:ac:e3:fd:81:e4:
54:bf:a0:4b:59:30:4b:3c:c8:40:a9:83:cc:de:4f:
d5:2e:e4:20:8f:a6:7f:3f:a0:0e:9e:42:58:76:9e:
3d:a4:62:84:ef:3d:00:00:50:a3:e5:eb:e1:ec:98:
6c:f6:54:07:63:e4:65:1a:7f:43:f4:fd:0b:8d:25:
3f:0d:1a:c1:8b:ee:21:22:0d:a6:a6:74:7c:26:08:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:2E:D6:BC:AF:42:2A:0A:0F:20:FB:71:2C:41:7B:BA:1F:68:57
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/CSMu1ryvQioKDyD7cSxBe7ofaFc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.173.144.0/20
Signature Algorithm: sha256WithRSAEncryption
13:c7:40:66:93:bf:f2:e5:b4:03:67:56:9f:fe:24:ea:c4:f0:
8d:f5:a3:29:4f:05:15:6e:d0:d7:50:c5:20:c6:26:2c:6d:20:
dd:e4:0c:be:43:60:90:6e:19:bb:ad:36:52:a5:4a:08:5e:87:
16:e4:5c:92:1b:56:47:6d:69:f0:ea:3e:7f:72:30:6f:fc:e4:
00:45:e7:c1:14:84:9b:7e:30:35:5a:6d:77:c1:27:4a:8d:75:
3f:aa:ec:62:13:3c:d0:a6:c7:0f:e9:56:03:02:83:cf:19:59:
c4:1a:a3:33:b7:c1:55:96:5c:a3:a3:a8:32:55:7a:74:72:f6:
5d:06:8a:b9:d8:fa:19:58:6f:c8:7b:56:a6:fd:4f:a7:9e:85:
60:b8:57:b5:5b:b0:c7:ce:f6:46:3b:55:73:c8:8e:52:88:dd:
c2:b2:f4:93:77:e0:ac:a1:2f:1a:2e:ba:68:80:69:27:93:97:
10:81:e7:19:b2:b6:19:76:c2:ea:c5:6d:13:a0:0f:7f:74:67:
e5:3e:9c:fb:1c:d1:b5:e9:3e:fb:1a:56:4e:16:59:4d:d8:97:
38:80:d3:54:68:d7:84:3d:8a:23:53:8e:e0:0a:54:f5:7f:21:
1b:d5:a7:15:03:4d:32:2e:86:e0:14:09:d8:76:be:63:79:6d:
12:6e:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:27:00 2026 by rpki-client