This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/bkOOpOf-0J43uoS5Bt61ZZZaVQ0.roa
File: bkOOpOf-0J43uoS5Bt61ZZZaVQ0.roa (raw, json)
Hash identifier: QSTnT7bg8h+2o70qB6i/72TCA+rJZgUEL39mJxK+ZyE=
Subject key identifier: 6E:43:8E:A4:E7:FE:D0:9E:37:BA:84:B9:06:DE:B5:65:96:5A:55:0D
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: EC
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/bkOOpOf-0J43uoS5Bt61ZZZaVQ0.roa
Signing time: Thu 01 Jan 2026 01:30:39 +0000
ROA not before: Thu 01 Jan 2026 01:30:39 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 18126
IP address blocks: 202.150.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 17:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Jan 1 01:30:39 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=6E438EA4E7FED09E37BA84B906DEB565965A550D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:5f:ad:72:2a:7b:87:db:6c:65:b4:62:52:
2a:6f:6d:cf:55:f2:3c:be:98:94:e1:19:f6:a9:9b:
dc:2f:fa:6d:3a:fd:e1:df:45:f1:b7:7b:21:66:cd:
af:0f:06:9d:04:00:81:44:a0:fa:e0:66:fa:88:7b:
c5:b6:f7:02:ee:bc:b1:42:d5:94:0d:dd:2c:bc:ef:
d6:f1:6f:74:3d:7e:43:2b:23:12:b6:61:c9:f8:12:
45:00:85:6e:97:5e:a6:8f:2e:38:d6:7a:dc:0a:4b:
68:41:89:ee:1d:47:27:5c:4d:87:d9:97:2f:3b:4a:
7c:6f:58:b1:75:3e:fa:00:74:b7:54:9a:d1:9f:b6:
e4:87:64:82:25:1d:b2:86:a2:3c:ca:f0:a0:55:87:
bd:e0:06:fa:5a:d4:bf:3f:23:3d:fe:05:22:7c:68:
fa:94:61:3f:23:ea:22:0b:1d:ba:37:73:13:69:fa:
97:b5:96:97:cb:ee:02:2a:b0:db:53:b5:37:58:4d:
24:0e:92:dd:28:0a:e3:7b:2e:1a:39:85:89:b6:11:
ef:40:8f:7f:26:45:75:73:4b:c3:f6:de:18:4c:02:
b6:5a:b9:59:a5:be:bd:b6:d3:3f:42:1d:9f:75:ee:
5b:a8:92:48:f9:5c:d5:d5:dd:71:b0:6f:66:f3:9f:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:8E:A4:E7:FE:D0:9E:37:BA:84:B9:06:DE:B5:65:96:5A:55:0D
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/bkOOpOf-0J43uoS5Bt61ZZZaVQ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.150.48.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:25:59:99:42:e3:f0:42:b1:dd:bf:ed:94:4e:38:4e:07:e0:
2f:99:b7:ac:05:b0:02:26:34:ad:15:6f:9f:39:c9:b9:88:91:
ac:0b:f5:b3:a4:9b:df:a2:65:d4:83:e2:a2:8a:ff:f4:7a:29:
04:e8:66:9c:da:f9:de:70:2e:bf:30:e8:36:30:26:0a:84:c9:
f4:85:f6:c6:dc:b9:41:f5:d6:a6:a6:8b:20:a0:00:27:d9:2b:
dd:93:1f:03:d0:36:ad:f3:c6:39:e2:e1:03:63:ef:2b:1d:5f:
92:09:48:e3:c7:cc:e6:23:2f:f2:74:a2:ed:12:ca:88:67:68:
10:1c:2c:f9:78:42:b4:8c:3a:3b:45:58:6c:fe:94:62:7e:cc:
c0:e1:03:54:9c:c5:4e:94:0f:0b:1d:41:63:dc:5a:04:b6:dc:
3d:9a:dc:69:f8:bf:13:9a:92:7c:39:02:38:50:a0:73:f3:46:
69:84:59:c0:99:3a:25:ee:9c:93:78:fd:5f:f9:51:43:f1:ff:
b1:b8:66:69:2e:9a:c3:f6:bd:5a:f9:1d:7d:66:f4:ba:c1:e4:
b0:05:25:78:18:e2:69:aa:a7:64:05:d4:f0:a9:1b:8b:f9:fe:
7f:cf:ce:46:88:23:8e:17:4d:ab:48:30:ed:76:41:8b:cc:84:
62:f2:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:55 2026 by rpki-client