This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/S8r-dElRzF_tZqqbZpF9s3CDFzA.roa
File: S8r-dElRzF_tZqqbZpF9s3CDFzA.roa (raw, json)
Hash identifier: bd2gYEfhGb9cxBv5bmkkF70xQ5OT60pfZIQpn3eqDZQ=
Subject key identifier: 4B:CA:FE:74:49:51:CC:5F:ED:66:AA:9B:66:91:7D:B3:70:83:17:30
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: C5
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/S8r-dElRzF_tZqqbZpF9s3CDFzA.roa
Signing time: Sat 01 Nov 2025 01:32:38 +0000
ROA not before: Sat 01 Nov 2025 01:32:38 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 15:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 1 01:32:38 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=4BCAFE744951CC5FED66AA9B66917DB370831730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:74:32:7f:5c:e8:b8:61:60:a4:ed:c5:60:
94:6a:c3:74:f6:01:95:0d:4f:02:20:12:ad:34:32:
c0:9d:39:97:4a:df:bb:45:ab:4b:ee:e8:03:4c:e8:
e4:d0:91:c6:b8:01:b4:e8:62:3e:68:fe:68:88:d3:
df:53:f5:33:b1:c7:74:d4:31:f8:f1:2e:c7:7b:8f:
ed:c4:d1:ae:0e:12:67:b3:fc:73:a3:24:aa:aa:1f:
9b:a2:8f:b8:a6:f6:6c:ad:77:cd:42:2f:02:e3:4c:
cf:5a:7b:76:05:80:d2:5b:bd:4d:f8:23:2b:c1:56:
b7:d3:a8:0f:44:7e:f9:9b:32:19:96:56:23:0c:a6:
47:0e:c3:89:23:8e:2a:9c:24:5a:eb:20:0c:95:be:
29:01:6b:0c:a6:c6:5d:bf:ca:77:e4:70:cc:c2:ec:
10:de:6c:c0:51:b3:dd:70:32:7d:68:83:64:76:48:
d8:84:36:17:2c:10:22:60:99:26:ee:51:0c:ce:71:
20:7d:e1:3c:95:fa:23:aa:b0:fe:ef:7d:8f:a8:8f:
73:7f:f0:19:86:16:b2:28:53:82:28:2e:f6:0a:2b:
ff:2f:1f:bd:a7:42:0e:f0:8b:23:b1:b4:e4:67:21:
44:55:26:2c:03:85:15:9f:4d:0c:65:d1:ef:5f:34:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:FE:74:49:51:CC:5F:ED:66:AA:9B:66:91:7D:B3:70:83:17:30
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/S8r-dElRzF_tZqqbZpF9s3CDFzA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:82:9d:c1:0c:be:94:8d:c9:95:1b:2f:57:17:45:85:7c:77:
e1:57:2d:5b:2e:05:d7:f5:ab:a9:9c:04:64:78:dd:db:18:0c:
c5:6a:f5:ea:e3:64:46:60:b7:e7:48:95:65:71:6b:c3:af:b5:
87:63:43:b5:11:d3:82:62:f8:76:e9:ef:05:0e:2f:03:b7:43:
07:b2:25:16:99:af:11:c4:e0:75:66:c5:13:89:5d:9d:34:b8:
1c:42:fc:03:33:88:90:51:2e:c6:4e:09:0c:53:d4:bd:24:cd:
ea:f5:e1:0c:1e:3b:7e:57:68:c9:e2:06:d5:69:f5:7e:72:34:
29:19:32:dd:64:b1:1c:58:13:69:a4:1b:b9:f6:c3:8c:e6:31:
19:c0:4b:6d:41:cc:fa:5a:47:77:47:4c:14:29:68:da:9f:96:
40:d6:80:f7:56:df:5a:d6:19:f7:57:cc:40:93:a1:aa:e4:41:
04:03:48:14:93:90:a6:eb:c7:44:7b:8f:3c:3d:e0:8f:54:e1:
66:2d:b0:c0:c6:7f:9e:29:f4:31:b5:ba:eb:a9:a8:d8:50:78:
a0:94:b0:e0:36:db:ed:f9:e7:df:b4:aa:f2:fe:c6:9f:f7:28:
b4:da:3c:c2:a7:49:07:4c:cc:a7:ff:c4:f9:8c:2f:98:a4:19:
a9:9b:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:44:17 2025 by rpki-client