This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20282/NDGfuEmDvaCi_GhO61N8J2K1Xng.roa File: NDGfuEmDvaCi_GhO61N8J2K1Xng.roa (raw, json) Hash identifier: dsvd77mJ+RQNbqFsTYqI0Pl1NiaCRuf12fOpfk16lNY= Subject key identifier: 34:31:9F:B8:49:83:BD:A0:A2:FC:68:4E:EB:53:7C:27:62:B5:5E:78 Certificate issuer: /CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648 Certificate serial: 02 Authority key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/NDGfuEmDvaCi_GhO61N8J2K1Xng.roa Signing time: Thu 13 Nov 2025 10:45:06 +0000 ROA not before: Thu 13 Nov 2025 10:45:06 +0000 ROA not after: Fri 13 Nov 2026 09:28:17 +0000 asID: 152875 IP address blocks: 138.252.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 15:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648 Validity Not Before: Nov 13 10:45:06 2025 GMT Not After : Nov 13 09:28:17 2026 GMT Subject: CN=34319FB84983BDA0A2FC684EEB537C2762B55E78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:97:37:d0:51:f6:f9:7c:a2:7f:64:7c:2a: 21:eb:9a:f4:2d:ab:2f:1c:30:17:b0:bd:fa:f0:b8: 9a:5c:b5:28:ad:5c:52:24:a2:bf:bf:42:89:41:df: 86:15:d5:1c:84:8f:f6:da:02:c9:7d:97:66:d1:8f: 29:fc:c3:84:18:7b:df:6a:15:75:20:8b:28:d0:49: 9a:da:f3:00:f4:0f:4a:fc:7e:a0:e2:9c:f1:dc:97: 2c:44:3a:09:5f:00:9f:92:30:5a:cc:f9:f8:3b:05: 14:3b:fb:37:cf:31:fd:47:e8:80:ce:dc:43:0d:13: 07:e7:c8:d6:9c:fc:c9:ea:9e:c7:d0:90:dc:55:d6: ed:3a:88:de:1d:e5:d1:af:ab:3a:2c:9a:0b:9c:8b: f8:4b:d8:f9:12:6c:eb:48:a9:43:a9:33:ad:d7:8a: f4:dd:b6:9d:11:af:3b:c1:28:35:92:7c:bb:5b:dc: a6:59:a3:c6:73:89:d7:d9:87:84:48:b8:21:96:9a: 93:d1:cd:e6:1b:52:bc:26:b7:87:6e:ad:fe:9b:52: fd:59:6d:19:b1:98:72:4a:07:9d:1f:d7:fe:f1:1a: 29:4f:11:bc:cd:26:bf:5a:c6:81:a4:29:22:36:19: 10:fc:67:76:46:13:8e:eb:21:cf:1e:1d:67:33:bf: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:31:9F:B8:49:83:BD:A0:A2:FC:68:4E:EB:53:7C:27:62:B5:5E:78 X509v3 Authority Key Identifier: keyid:3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/NDGfuEmDvaCi_GhO61N8J2K1Xng.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.48.0/23 Signature Algorithm: sha256WithRSAEncryption c9:78:fc:95:96:94:6d:3e:e1:5e:ac:46:b5:b4:00:ca:4f:13: 82:00:2f:a9:bd:82:70:ad:52:58:e2:52:8a:32:48:64:15:2f: 6b:9e:1c:74:79:85:90:f3:49:c0:6f:6b:2c:17:89:40:6e:22: 59:05:27:39:08:33:5d:c6:7a:63:33:03:f9:b0:c6:14:50:d0: 30:6f:65:51:0a:70:e1:84:e5:c7:27:42:0b:2a:95:c0:9b:b7: 88:14:d0:cb:db:a5:67:de:e6:8f:85:5d:a7:e3:c7:a8:ee:42: 24:4a:44:62:71:9f:04:94:51:e2:7e:ab:8b:3d:34:d5:b0:00: c8:c9:69:36:ff:05:5a:12:f3:bd:5d:1b:3d:bd:b9:3c:fc:66: e8:ab:a6:3f:22:d9:d8:24:9e:f4:85:b4:12:81:15:a1:a1:3b: 37:db:70:9c:95:89:f3:ed:dc:b1:af:f6:9f:83:11:f9:37:be: a6:3f:e4:05:32:2d:6e:8f:a2:45:c1:89:0f:c2:1c:7f:98:bf: db:be:48:3d:85:30:4e:bd:b1:55:4c:fa:fb:d7:16:5b:d4:a8: cf:08:5c:03:35:bf:e2:8a:33:8a:75:c7:76:49:08:5b:be:59: bc:fc:aa:7b:ef:96:e3:f7:ca:8b:4f:b1:1c:5f:90:02:51:77: bc:98:03:c3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQTYy QzQ3QjYzOTExNEY2ODJDOUU1QTI4NTZCQzBGOUMzM0VDNjQ4MB4XDTI1MTExMzEw NDUwNloXDTI2MTExMzA5MjgxN1owMzExMC8GA1UEAxMoMzQzMTlGQjg0OTgzQkRB MEEyRkM2ODRFRUI1MzdDMjc2MkI1NUU3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANE5lzfQUfb5fKJ/ZHwqIeua9C2rLxwwF7C9+vC4mly1KK1cUiSi v79CiUHfhhXVHISP9toCyX2XZtGPKfzDhBh732oVdSCLKNBJmtrzAPQPSvx+oOKc 8dyXLEQ6CV8An5IwWsz5+DsFFDv7N88x/UfogM7cQw0TB+fI1pz8yeqex9CQ3FXW 7TqI3h3l0a+rOiyaC5yL+EvY+RJs60ipQ6kzrdeK9N22nRGvO8EoNZJ8u1vcplmj xnOJ19mHhEi4IZaak9HN5htSvCa3h26t/ptS/VltGbGYckoHnR/X/vEaKU8RvM0m v1rGgaQpIjYZEPxndkYTjushzx4dZzO/J9MCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQ0MZ+4SYO9oKL8aE7rU3wnYrVeeDAfBgNVHSMEGDAWgBQ6YsR7Y5EU9oLJ5aKF a8D5wz7GSDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyODIvT21MRWUyT1JGUGFDeWVXaWhXdkEtY00teGtnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT21MRWUyT1JGUGFDeWVXaWhXdkEt Y00teGtnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjgyL05ER2Z1RW1EdmFDaV9HaE82MU44SjJLMVhuZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/DAwDQYJKoZIhvcNAQELBQADggEBAMl4/JWWlG0+4V6sRrW0AMpP E4IAL6m9gnCtUljiUooySGQVL2ueHHR5hZDzScBvaywXiUBuIlkFJzkIM13GemMz A/mwxhRQ0DBvZVEKcOGE5ccnQgsqlcCbt4gU0MvbpWfe5o+FXafjx6juQiRKRGJx nwSUUeJ+q4s9NNWwAMjJaTb/BVoS871dGz29uTz8Zuirpj8i2dgknvSFtBKBFaGh OzfbcJyVifPt3LGv9p+DEfk3vqY/5AUyLW6PokXBiQ/CHH+Yv9u+SD2FME69sVVM +vvXFlvUqM8IXAM1v+KKM4p1x3ZJCFu+Wbz8qnvvluP3yotPsRxfkAJRd7yYA8M= -----END CERTIFICATE-----Generated at Sat Nov 22 21:32:43 2025 by rpki-client