This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/2E4aIAcqkQR8TMd71iuK8G2ez68.roa
File: 2E4aIAcqkQR8TMd71iuK8G2ez68.roa (raw, json)
Hash identifier: zCXSw/wpjrCtu7LegiPel6dhSN+ZSjiE8zR5csjWamE=
Subject key identifier: D8:4E:1A:20:07:2A:91:04:7C:4C:C7:7B:D6:2B:8A:F0:6D:9E:CF:AF
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: E9
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/2E4aIAcqkQR8TMd71iuK8G2ez68.roa
Signing time: Thu 01 Jan 2026 01:30:36 +0000
ROA not before: Thu 01 Jan 2026 01:30:36 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 18126
IP address blocks: 203.209.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 17:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Jan 1 01:30:36 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=D84E1A20072A91047C4CC77BD62B8AF06D9ECFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:c9:c0:16:7f:0d:e3:d9:32:4a:7f:33:89:
68:fe:a9:d3:fe:62:57:c6:65:b7:f6:ea:7e:5c:4e:
0d:44:05:19:3a:79:85:9e:4b:b9:3a:20:0c:25:64:
8a:f9:2d:ac:e4:ae:c9:92:ec:f0:15:fe:5f:4f:d1:
5f:12:16:77:6c:d7:ac:88:4a:05:7a:9d:85:b0:f9:
37:97:89:6d:81:35:c6:95:0a:36:7c:bb:bc:f6:c0:
e7:a6:27:e8:6f:3b:a7:f2:43:fe:fb:37:d1:ce:fd:
ae:f1:c1:36:a2:f2:14:41:5d:b0:ea:77:99:5e:95:
82:8d:8e:7e:01:17:a5:75:56:ed:46:3b:95:1c:45:
8b:9a:33:75:fd:0f:7b:27:a1:da:ab:11:aa:22:e6:
5b:a9:ac:de:6c:0c:46:22:64:ef:68:7e:f9:1c:ac:
7d:5d:3f:78:e0:e8:c2:aa:2d:59:d7:34:34:e2:79:
96:26:b6:70:f7:0a:be:91:ac:bc:5f:7d:37:4f:38:
70:05:b0:76:77:c5:10:1d:3e:06:bc:83:70:87:18:
71:5e:47:f8:9d:34:d0:0b:08:75:42:d9:88:73:91:
ab:e7:6e:76:d9:fa:34:82:29:bf:35:c9:42:b0:52:
c8:ea:d2:d8:b4:8b:0b:1c:c4:2d:59:dd:ab:6e:57:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4E:1A:20:07:2A:91:04:7C:4C:C7:7B:D6:2B:8A:F0:6D:9E:CF:AF
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/2E4aIAcqkQR8TMd71iuK8G2ez68.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.209.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:23:8f:25:3b:6c:0d:27:80:a6:37:2f:8e:cc:b8:6f:7a:ae:
a2:d7:0b:e7:20:b2:27:92:8e:7a:f3:8d:a4:b5:17:80:fc:c1:
c7:53:a2:1d:05:c6:b8:37:3d:0f:00:54:1a:16:ce:37:c4:d3:
9f:ab:91:f3:b3:09:48:cb:5b:0a:fb:19:54:6d:03:0a:10:f8:
fb:4d:80:5d:9c:72:3b:89:aa:d5:12:c8:2a:5c:70:67:e0:1c:
fe:53:c4:f1:d7:cb:85:c8:0c:74:b3:b0:a4:76:22:e7:4d:a0:
f6:0a:63:f6:f0:8e:e0:53:ef:8c:e8:11:c1:33:fa:2a:42:00:
f6:c4:ad:0e:03:05:4a:b8:5b:a8:f8:6f:45:c7:cd:fc:03:56:
f4:a9:58:19:12:58:a8:18:64:c4:c5:9c:85:c4:9e:b0:02:a0:
f5:f4:ff:0e:9e:d6:34:43:c5:55:6d:d8:4a:98:34:65:e7:a1:
14:0d:d7:03:cd:19:58:3b:8e:6a:50:ad:bb:22:62:0a:ce:8e:
32:af:83:39:cc:55:d1:04:5b:5e:ca:cb:8f:6d:25:e5:5d:4f:
31:41:27:8d:de:85:f7:da:04:ba:a0:73:ce:7a:58:91:a8:3a:
e0:0a:72:42:b6:1b:0e:d0:cf:f1:1c:df:c2:99:46:e9:a9:c3:
59:85:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:57 2026 by rpki-client