This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30412/CtgX_NzVdLr-hFq4oahW4ObXvD0.roa
File: CtgX_NzVdLr-hFq4oahW4ObXvD0.roa (raw, json)
Hash identifier: F4KdnOCv+y2DHyMy1llZ3D6YHtL1g3hYzOGlk3T8nik=
Subject key identifier: 0A:D8:17:FC:DC:D5:74:BA:FE:84:5A:B8:A1:A8:56:E0:E6:D7:BC:3D
Certificate issuer: /CN=35AAA59851E392DF892E5CB7ABE6225165AEC897
Certificate serial: 2E
Authority key identifier: 35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/CtgX_NzVdLr-hFq4oahW4ObXvD0.roa
Signing time: Sat 01 Nov 2025 01:34:56 +0000
ROA not before: Sat 01 Nov 2025 01:34:56 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2915
IP address blocks: 2400:c320::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35AAA59851E392DF892E5CB7ABE6225165AEC897
Validity
Not Before: Nov 1 01:34:56 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=0AD817FCDCD574BAFE845AB8A1A856E0E6D7BC3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:1c:ad:0e:46:75:be:54:d0:60:35:7c:93:
3c:82:b0:fc:92:98:3a:ce:d9:80:92:f8:1b:ba:b2:
ba:12:84:7c:11:ff:01:d0:e2:52:c4:3f:d6:e1:f2:
95:9a:4f:cb:51:8c:09:3c:19:91:1d:91:ef:d1:ba:
35:69:01:27:f5:f2:e2:b1:ba:d8:e2:63:52:4f:64:
6f:23:c3:99:94:de:75:c2:6a:6c:ac:67:f4:18:12:
41:f5:44:90:b6:d1:fa:52:a1:4a:28:a4:29:04:b4:
1c:89:5e:03:45:4f:3b:cb:ea:b6:35:24:2a:10:29:
55:05:16:30:e4:d5:b1:85:57:b7:f2:3c:52:2f:e4:
43:a2:45:8f:ae:64:8a:8f:c3:ff:b5:72:df:a3:70:
cc:05:91:99:15:94:72:17:71:26:8d:2a:f8:71:42:
2b:08:7f:f9:8e:00:d2:b9:d2:96:87:46:d0:eb:de:
f5:bc:24:ba:0c:65:ea:0c:8c:a1:07:a8:9a:b0:74:
68:8b:0f:9f:3b:09:4b:3d:c1:b9:88:66:03:17:51:
0e:e9:bd:2e:76:e6:d1:d7:81:1f:db:25:ad:89:ff:
b0:43:e1:bd:96:6f:a6:15:8a:56:22:78:02:68:db:
a9:fe:7d:20:36:7f:f4:34:47:17:10:1e:00:8f:78:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:17:FC:DC:D5:74:BA:FE:84:5A:B8:A1:A8:56:E0:E6:D7:BC:3D
X509v3 Authority Key Identifier:
keyid:35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/CtgX_NzVdLr-hFq4oahW4ObXvD0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:c320::/32
Signature Algorithm: sha256WithRSAEncryption
2e:ee:38:52:9a:e1:70:6a:3d:5b:fb:ad:c0:f7:65:07:32:63:
94:09:d1:61:51:cf:2b:fa:58:3e:8f:fd:7d:ca:f1:d1:a6:61:
88:ea:36:b4:d4:97:31:67:87:37:b9:d9:ba:46:05:ae:a3:79:
98:43:21:e6:23:cf:21:79:35:f2:ac:e8:c1:9e:73:36:78:62:
4f:d5:97:a9:9a:0a:35:46:4a:49:2a:b7:b4:17:98:47:7c:87:
ec:95:88:4f:47:89:78:c7:91:ec:1c:9f:5f:19:f7:c2:9f:85:
5c:64:c9:7d:6d:f2:d9:db:69:54:1d:25:ff:d2:08:89:c8:c7:
cb:30:d8:61:d0:63:3d:06:a8:62:66:e0:f5:46:d1:d5:ca:ec:
44:7e:fb:7c:74:83:a8:61:36:fa:a0:a4:82:6f:4e:08:50:0d:
7c:f2:88:7f:42:78:9c:90:12:88:9c:24:2d:0b:f0:45:b9:7f:
32:49:20:19:2a:55:ed:18:ee:52:e8:d3:c0:c1:fb:46:69:42:
eb:e4:45:08:50:19:e4:fd:db:be:8c:91:c2:99:c0:bf:65:30:
42:14:c5:66:9f:6c:bb:32:8a:45:b2:d5:f0:d6:a8:d9:12:cc:
06:31:0b:8f:9d:93:34:87:cf:fb:6c:ec:ca:1c:7c:c2:33:38:
72:58:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:23:39 2025 by rpki-client