This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/X7U1wXddCWoSD_8FStOLSXZsiII.roa
File: X7U1wXddCWoSD_8FStOLSXZsiII.roa (raw, json)
Hash identifier: HGEeuB2YrPb3gOFJQdkHEB8auaM19fb+27381RtIr/8=
Subject key identifier: 5F:B5:35:C1:77:5D:09:6A:12:0F:FF:05:4A:D3:8B:49:76:6C:88:82
Certificate issuer: /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial: 3F
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/X7U1wXddCWoSD_8FStOLSXZsiII.roa
Signing time: Thu 01 Jan 2026 01:37:57 +0000
ROA not before: Thu 01 Jan 2026 01:37:57 +0000
ROA not after: Tue 15 Dec 2026 01:30:02 +0000
asID: 17683
IP address blocks: 2001:f98::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Validity
Not Before: Jan 1 01:37:57 2026 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=5FB535C1775D096A120FFF054AD38B49766C8882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:6a:d4:74:65:57:a3:9b:51:68:04:8d:c5:
6b:26:57:d4:b3:fc:68:07:8e:30:ca:13:83:38:e6:
73:5e:30:92:15:67:b6:0d:e1:69:65:41:74:75:e5:
87:32:8f:12:05:04:a7:bb:8b:19:d1:18:b2:de:4c:
c5:2a:4c:e5:1c:e6:f2:26:ee:4b:41:4f:09:ed:ff:
4e:70:c0:01:ea:b0:f7:1f:d3:79:c6:a4:03:e7:1c:
59:4e:78:3a:57:ec:6e:33:ae:c7:85:f2:5e:8d:03:
c4:60:62:8e:d1:12:a1:b4:76:43:9f:ea:60:9f:04:
28:36:64:41:2e:fb:f1:2b:57:75:49:63:ce:b9:19:
4c:4e:a4:6a:72:58:9b:8d:db:b7:2f:bb:d5:61:47:
5a:94:6c:84:63:de:ac:ac:2e:fe:4c:30:10:be:7b:
de:02:ae:d4:2e:15:cd:7d:ba:8e:6c:18:5c:11:cd:
4c:ff:d4:b2:c7:9c:f1:bb:dd:5e:9a:d5:1f:f7:40:
27:63:fd:ee:3e:c0:e5:90:87:4f:f8:5c:cd:92:96:
85:83:fb:69:ab:91:0e:de:9f:71:18:ab:59:b4:fb:
a4:dd:c4:eb:d8:a0:01:b8:e4:a9:8c:65:03:32:83:
c4:b0:05:dd:c4:5f:d4:af:a4:2c:71:7a:9b:0a:52:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B5:35:C1:77:5D:09:6A:12:0F:FF:05:4A:D3:8B:49:76:6C:88:82
X509v3 Authority Key Identifier:
keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/X7U1wXddCWoSD_8FStOLSXZsiII.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:f98::/32
Signature Algorithm: sha256WithRSAEncryption
bf:dd:ce:f1:a1:64:b4:e1:0c:95:36:9f:02:3d:3e:c4:94:5e:
4c:32:0a:f3:7f:59:86:b4:02:53:13:6e:25:da:e4:87:ec:0f:
46:2f:6d:47:de:5e:ad:2c:19:e3:4c:e5:76:29:ca:db:c9:28:
65:e9:bb:8d:e0:57:b6:b5:53:a9:8c:cc:9f:4f:57:d9:ec:8d:
4d:90:3c:af:d5:60:a6:10:b3:37:bb:a0:e3:32:f1:94:54:09:
6d:99:78:a6:55:db:8a:f8:dd:ca:d5:ff:42:be:cc:95:f1:a2:
f4:4e:d6:31:4b:80:04:30:14:e4:0f:28:03:56:13:ed:46:e8:
a0:d7:e9:40:97:c3:a1:26:c5:b1:82:e9:ba:a5:a0:2c:3f:89:
21:c0:d6:49:d0:0e:7f:69:36:34:45:4f:63:bd:a6:9e:b7:1f:
12:a1:6c:ff:b1:c5:29:6c:69:07:91:d5:50:0f:6a:c4:9f:1f:
ac:15:a3:09:4b:b2:c0:86:55:48:b3:e3:02:c6:60:c2:75:90:
8d:79:fb:ee:a4:05:a8:84:63:c8:29:ac:6f:c2:ee:8e:b8:6a:
95:39:1a:6c:29:51:03:18:8f:9b:23:fe:72:22:88:39:e9:cd:
54:6c:f5:9e:80:92:3c:b4:e8:12:5a:f9:9b:e6:9c:a0:71:35:
56:96:a6:85
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNUND
OTU5MjkxMDk3OTIzQTZGNDJEOEY2NTdCOTBCQTAzMkU1RjZGMB4XDTI2MDEwMTAx
Mzc1N1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNUZCNTM1QzE3NzVEMDk2
QTEyMEZGRjA1NEFEMzhCNDk3NjZDODg4MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANk9atR0ZVejm1FoBI3FayZX1LP8aAeOMMoTgzjmc14wkhVntg3h
aWVBdHXlhzKPEgUEp7uLGdEYst5MxSpM5Rzm8ibuS0FPCe3/TnDAAeqw9x/Tecak
A+ccWU54OlfsbjOux4XyXo0DxGBijtESobR2Q5/qYJ8EKDZkQS778StXdUljzrkZ
TE6kanJYm43bty+71WFHWpRshGPerKwu/kwwEL573gKu1C4VzX26jmwYXBHNTP/U
ssec8bvdXprVH/dAJ2P97j7A5ZCHT/hczZKWhYP7aauRDt6fcRirWbT7pN3E69ig
AbjkqYxlAzKDxLAF3cRf1K+kLHF6mwpSHJkCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRftTXBd10JahIP/wVK04tJdmyIgjAfBgNVHSMEGDAWgBTFzJWSkQl5I6b0LY9l
e5C6Ay5fbzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjAveGN5VmtwRUplU09tOUMyUFpYdVF1Z011WDI4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveGN5VmtwRUplU09tOUMyUFpYdVF1
Z011WDI4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDYwL1g3VTF3WGRkQ1dvU0RfOEZTdE9MU1hac2lJSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQ+YMA0GCSqGSIb3DQEBCwUAA4IBAQC/3c7xoWS04QyVNp8CPT7E
lF5MMgrzf1mGtAJTE24l2uSH7A9GL21H3l6tLBnjTOV2KcrbyShl6buN4Fe2tVOp
jMyfT1fZ7I1NkDyv1WCmELM3u6DjMvGUVAltmXimVduK+N3K1f9CvsyV8aL0TtYx
S4AEMBTkDygDVhPtRuig1+lAl8OhJsWxgum6paAsP4khwNZJ0A5/aTY0RU9jvaae
tx8SoWz/scUpbGkHkdVQD2rEnx+sFaMJS7LAhlVIs+MCxmDCdZCNefvupAWohGPI
Kaxvwu6OuGqVORpsKVEDGI+bI/5yIog56c1UbPWegJI8tOgSWvmb5pygcTVWlqaF
-----END CERTIFICATE-----
Generated at Sat Jan 10 17:39:26 2026 by rpki-client