This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/wR8qk9oyHxaLtTWx767Glr3cIXM.roa File: wR8qk9oyHxaLtTWx767Glr3cIXM.roa (raw, json) Hash identifier: Jp61+3w0RAPqRj9jx5JOI51gCVsB50sFVP5zqjPIn00= Subject key identifier: C1:1F:2A:93:DA:32:1F:16:8B:B5:35:B1:EF:AE:C6:96:BD:DC:21:73 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: B2 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wR8qk9oyHxaLtTWx767Glr3cIXM.roa Signing time: Wed 01 Oct 2025 01:38:39 +0000 ROA not before: Wed 01 Oct 2025 01:38:39 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 2527 IP address blocks: 159.28.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 15:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Oct 1 01:38:39 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=C11F2A93DA321F168BB535B1EFAEC696BDDC2173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:84:36:2c:03:75:b7:52:ff:73:8c:8e:d8:ca: 11:d6:ce:ba:c9:58:db:ce:aa:61:72:68:e8:b2:71: 37:a7:83:87:3e:04:b7:4f:6e:27:9b:7e:76:e2:34: b9:1e:dd:6d:5f:31:5f:65:b1:22:74:fd:0a:91:7c: 5e:48:29:06:e1:7a:b8:3c:ee:d5:19:3b:ca:54:cd: b9:b2:66:83:a9:f9:8c:ec:d6:75:86:34:82:fd:9a: 03:9e:ea:2d:3c:c4:3f:c1:bc:6c:ed:43:5a:37:44: 23:67:17:73:96:36:81:3b:20:1a:04:b2:d8:a8:74: 53:9a:f1:f8:45:93:ea:f7:4f:b6:49:1b:8c:3a:45: d4:ec:fe:26:50:3a:40:47:60:a2:1e:13:0e:44:43: 47:84:fb:31:4c:e0:47:3f:a8:a6:39:f3:c4:b9:15: 34:65:fd:6f:c3:87:57:e7:9b:2c:30:e9:c6:dc:39: 98:46:54:97:bf:9d:b7:85:f9:7e:ca:6f:5e:cc:dc: 7b:13:32:c4:1d:4a:d0:e1:ef:ba:01:13:f7:9b:83: b1:94:2c:30:46:a3:2b:91:45:ec:3d:1b:3f:30:a3: 53:f2:3a:bd:26:3f:76:ea:c4:21:f7:d1:b9:ae:d8: d2:6b:bc:b0:94:5d:97:06:02:ab:93:0c:db:40:bc: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1F:2A:93:DA:32:1F:16:8B:B5:35:B1:EF:AE:C6:96:BD:DC:21:73 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wR8qk9oyHxaLtTWx767Glr3cIXM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 159.28.128.0/17 Signature Algorithm: sha256WithRSAEncryption 3b:db:ef:74:e3:17:62:4c:86:0b:0d:6c:12:fe:ff:91:ea:ed: 9d:d2:2a:6b:b1:9f:11:12:68:df:18:df:42:17:b1:24:0a:41: f4:44:60:1c:da:a2:c9:94:47:98:c2:0f:34:9c:f8:39:5e:09: 2e:ef:3a:28:0d:5f:e7:a5:c5:f5:b8:e2:1b:90:ca:28:0d:52: 8e:74:40:eb:72:de:c3:48:3b:35:38:e4:19:bb:19:08:67:03: 71:2f:eb:60:73:5b:eb:b5:a9:cf:45:91:c4:f6:f2:bb:e4:9e: c0:77:d0:b6:46:0c:4f:8b:0d:0d:4a:f6:57:fa:08:3c:7a:e4: 97:09:1d:af:d6:22:f7:6a:ed:86:23:74:57:7c:be:85:3b:dc: 94:c7:7c:e2:92:98:88:e0:25:f7:e1:f5:8e:42:f0:6c:73:64: a4:31:57:76:70:99:af:99:89:66:c8:3d:b0:9a:88:72:fa:52: 1a:3a:50:4f:1f:5b:fd:cc:92:7a:51:61:cb:2b:7e:f2:33:3a: ee:3c:f6:3d:00:2f:1a:40:5f:85:8d:5b:a3:47:d8:8b:ec:d3: 7d:83:ce:a1:73:d4:9b:e2:0c:ec:f0:93:20:5d:5b:ed:d5:71: c1:9b:5e:23:5e:c0:75:a4:2a:cf:07:bb:27:67:47:d8:33:17: 3b:0f:e4:31 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICALIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTEwMDEw MTM4MzlaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMxMUYyQTkzREEzMjFG MTY4QkI1MzVCMUVGQUVDNjk2QkREQzIxNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYhDYsA3W3Uv9zjI7YyhHWzrrJWNvOqmFyaOiycTeng4c+BLdP biebfnbiNLke3W1fMV9lsSJ0/QqRfF5IKQbherg87tUZO8pUzbmyZoOp+Yzs1nWG NIL9mgOe6i08xD/BvGztQ1o3RCNnF3OWNoE7IBoEstiodFOa8fhFk+r3T7ZJG4w6 RdTs/iZQOkBHYKIeEw5EQ0eE+zFM4Ec/qKY588S5FTRl/W/Dh1fnmyww6cbcOZhG VJe/nbeF+X7Kb17M3HsTMsQdStDh77oBE/ebg7GULDBGoyuRRew9Gz8wo1PyOr0m P3bqxCH30bmu2NJrvLCUXZcGAquTDNtAvP7NAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUwR8qk9oyHxaLtTWx767Glr3cIXMwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My93UjhxazlveUh4YUx0VFd4NzY3R2xyM2NJWE0ucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQHnxyAMA0GCSqGSIb3DQEBCwUAA4IBAQA72+904xdiTIYLDWwS/v+R6u2d0ipr sZ8REmjfGN9CF7EkCkH0RGAc2qLJlEeYwg80nPg5Xgku7zooDV/npcX1uOIbkMoo DVKOdEDrct7DSDs1OOQZuxkIZwNxL+tgc1vrtanPRZHE9vK75J7Ad9C2RgxPiw0N SvZX+gg8euSXCR2v1iL3au2GI3RXfL6FO9yUx3zikpiI4CX34fWOQvBsc2SkMVd2 cJmvmYlmyD2wmohy+lIaOlBPH1v9zJJ6UWHLK37yMzruPPY9AC8aQF+FjVujR9iL 7NN9g86hc9Sb4gzs8JMgXVvt1XHBm14jXsB1pCrPB7snZ0fYMxc7D+Qx -----END CERTIFICATE-----Generated at Sat Nov 22 21:36:48 2025 by rpki-client