This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/xs_iWJNKgZC3qZLk7uiawCCkoTc.roa
File: xs_iWJNKgZC3qZLk7uiawCCkoTc.roa (raw, json)
Hash identifier: tRyTGLIBbn0yXn5QkE1cMS4AzVgUF2pFH4xQT1lWiZY=
Subject key identifier: C6:CF:E2:58:93:4A:81:90:B7:A9:92:E4:EE:E8:9A:C0:20:A4:A1:37
Certificate issuer: /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial: 17
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/xs_iWJNKgZC3qZLk7uiawCCkoTc.roa
Signing time: Thu 06 Nov 2025 01:40:19 +0000
ROA not before: Thu 06 Nov 2025 01:40:19 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 17936
IP address blocks: 125.2.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Validity
Not Before: Nov 6 01:40:19 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=C6CFE258934A8190B7A992E4EEE89AC020A4A137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:8b:2f:1a:29:cd:4b:ee:1b:0e:51:a4:64:
38:fb:01:2e:79:01:0c:50:e7:29:de:dc:5e:e8:8f:
44:23:30:ee:8c:9f:b8:e9:12:8f:3a:be:33:5b:ed:
2a:d8:09:ff:7f:5f:5e:00:35:c8:0d:8d:2e:95:08:
6f:14:d3:f6:fc:4b:f7:36:09:6b:70:75:74:4c:6a:
b1:6d:3e:99:8f:4a:20:77:b9:4f:5a:b4:2e:21:f5:
65:11:d5:7d:6a:8d:52:f6:70:f9:ab:e3:31:fc:b1:
3a:f5:b0:2d:de:ea:bd:be:5e:3b:d7:89:00:19:b2:
b9:37:5a:17:c7:44:84:3d:20:42:50:86:91:85:53:
58:32:d0:6d:dc:e6:ef:47:92:b5:2b:06:be:fc:d2:
7b:67:23:78:c0:a6:ef:57:96:00:0e:31:34:7e:5e:
67:80:cc:7e:9a:76:c9:7c:ef:d0:dd:3d:ad:64:2b:
53:67:75:e4:14:9e:96:f5:66:cd:6a:41:57:02:10:
0b:93:9e:34:75:f7:e1:e6:ad:c5:ef:4d:71:7d:4e:
24:f6:ed:66:00:a5:c0:98:5e:f8:fc:b6:f3:96:ff:
77:7e:e3:81:df:55:5f:b9:4f:88:f1:ab:3d:8f:15:
e0:9e:80:b5:c4:9c:b9:80:ec:b8:ca:b0:8b:7f:1f:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CF:E2:58:93:4A:81:90:B7:A9:92:E4:EE:E8:9A:C0:20:A4:A1:37
X509v3 Authority Key Identifier:
keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/xs_iWJNKgZC3qZLk7uiawCCkoTc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.2.208.0/20
Signature Algorithm: sha256WithRSAEncryption
79:e8:87:64:54:3d:b5:33:0f:7f:2d:c0:46:97:fa:8e:09:d7:
0f:c3:e0:01:d3:40:c8:d9:3a:95:0e:65:aa:97:2b:6e:ef:26:
39:41:ff:0d:7f:4f:39:b4:0c:f7:a1:1e:18:b6:27:d5:bc:0b:
73:03:7e:2b:be:fa:ee:67:ed:46:d8:8c:48:ed:b6:c0:41:a8:
f7:2c:51:44:84:bd:4d:e7:13:c3:11:9c:95:f6:2a:8b:e6:b4:
f9:93:6d:cf:e6:5f:8f:a5:cc:ed:9f:ab:58:59:8e:b1:91:56:
37:5a:35:3d:f6:79:f3:e5:48:89:56:b3:fd:9e:c5:9f:3e:fe:
6c:3c:8f:7e:31:3f:ca:36:2f:32:85:ee:fd:5f:db:40:a0:46:
21:98:63:f6:75:b4:33:ef:5f:e7:89:35:dd:5f:ec:6c:f4:36:
46:54:99:da:60:70:96:a7:a1:46:02:c8:05:e9:fa:df:ea:fe:
66:5e:33:12:89:eb:12:a0:7c:d0:3f:80:c9:87:ce:e0:13:1b:
1d:f1:bb:b8:5e:45:21:0c:fc:93:cd:bd:5e:4f:3e:a5:b9:3e:
fb:db:0c:79:c7:53:c1:f6:12:09:c9:4e:b0:61:d5:26:5f:4e:
93:e4:db:77:9e:2f:4b:76:c2:1c:43:8b:85:77:bb:c3:8a:e6:
1c:c8:01:3d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRTRF
MzIyMjdFMTMxMjJGRTgwMzQwQkYzQUVEM0Q3OTNEMjZCNDU3MB4XDTI1MTEwNjAx
NDAxOVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQzZDRkUyNTg5MzRBODE5
MEI3QTk5MkU0RUVFODlBQzAyMEE0QTEzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMGQiy8aKc1L7hsOUaRkOPsBLnkBDFDnKd7cXuiPRCMw7oyfuOkS
jzq+M1vtKtgJ/39fXgA1yA2NLpUIbxTT9vxL9zYJa3B1dExqsW0+mY9KIHe5T1q0
LiH1ZRHVfWqNUvZw+avjMfyxOvWwLd7qvb5eO9eJABmyuTdaF8dEhD0gQlCGkYVT
WDLQbdzm70eStSsGvvzSe2cjeMCm71eWAA4xNH5eZ4DMfpp2yXzv0N09rWQrU2d1
5BSelvVmzWpBVwIQC5OeNHX34eatxe9NcX1OJPbtZgClwJhe+Py285b/d37jgd9V
X7lPiPGrPY8V4J6AtcScuYDsuMqwi38f/vECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTGz+JYk0qBkLepkuTu6JrAIKShNzAfBgNVHSMEGDAWgBQOTjIifhMSL+gDQL86
7T15PSa0VzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjUwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQwbXRGYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQw
bXRGYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NTAveHNfaVdKTktnWkMzcVpMazd1aWF3Q0Nrb1RjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBH0C0DANBgkqhkiG9w0BAQsFAAOCAQEAeeiHZFQ9tTMPfy3ARpf6jgnXD8Pg
AdNAyNk6lQ5lqpcrbu8mOUH/DX9PObQM96EeGLYn1bwLcwN+K7767mftRtiMSO22
wEGo9yxRRIS9TecTwxGclfYqi+a0+ZNtz+Zfj6XM7Z+rWFmOsZFWN1o1PfZ58+VI
iVaz/Z7Fnz7+bDyPfjE/yjYvMoXu/V/bQKBGIZhj9nW0M+9f54k13V/sbPQ2RlSZ
2mBwlqehRgLIBen63+r+Zl4zEonrEqB80D+AyYfO4BMbHfG7uF5FIQz8k829Xk8+
pbk++9sMecdTwfYSCclOsGHVJl9Ok+Tbd54vS3bCHEOLhXe7w4rmHMgBPQ==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:24:02 2025 by rpki-client