This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HvhrG5I-CcsH10EdewHmgM-K7s4.roa
File:                     HvhrG5I-CcsH10EdewHmgM-K7s4.roa (raw, json)
Hash identifier:          3ZB4UQZQ2p8c9rJwyCR4QQdniHH+uSjMb5J8F96PJ/c=
Subject key identifier:   1E:F8:6B:1B:92:3E:09:CB:07:D7:41:1D:7B:01:E6:80:CF:8A:EE:CE
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       D4
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HvhrG5I-CcsH10EdewHmgM-K7s4.roa
Signing time:             Thu 01 Jan 2026 01:30:48 +0000
ROA not before:           Thu 01 Jan 2026 01:30:48 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        202.142.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Jan  1 01:30:48 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=1EF86B1B923E09CB07D7411D7B01E680CF8AEECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:17:34:42:11:18:a2:04:bb:ae:6a:d6:69:
                    bd:81:e6:3a:ed:d1:11:28:1b:b7:fa:31:20:9f:78:
                    54:1d:76:ac:10:c3:9a:80:48:3d:86:d1:b9:82:8b:
                    b2:4e:b1:73:a4:54:17:bc:b6:78:1d:f3:16:23:76:
                    06:e3:9e:34:c1:71:0a:6b:c6:bc:82:89:37:c4:0f:
                    81:e3:99:90:00:c8:18:3a:24:07:0c:06:62:44:fd:
                    2a:a0:ea:28:c0:81:39:7b:10:b6:81:79:a5:63:55:
                    e2:72:93:8d:7a:57:8a:18:06:95:b3:a7:2a:3e:2a:
                    07:48:7e:9d:a0:ff:39:fe:28:3a:4f:b4:c0:77:74:
                    8e:86:27:4c:22:fe:f7:8d:00:cd:c8:11:3f:44:eb:
                    ac:7e:2e:b5:75:48:ce:78:39:19:1b:9b:92:d3:50:
                    20:07:b7:ee:a3:dd:6d:1a:bf:01:3b:86:ec:5e:79:
                    50:d3:07:9e:cc:3e:22:bb:dd:f6:f4:f0:a1:3a:0c:
                    c7:5e:cf:8a:2e:14:f3:85:09:83:a5:dc:64:1b:d3:
                    cc:fd:f2:29:39:72:fd:d0:a9:02:e8:48:5a:53:6e:
                    4d:6a:3b:51:e4:f2:60:92:e8:fe:24:f1:17:fa:43:
                    f3:7e:62:f1:1e:58:f5:51:9f:e1:c4:6d:20:ee:9a:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F8:6B:1B:92:3E:09:CB:07:D7:41:1D:7B:01:E6:80:CF:8A:EE:CE
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HvhrG5I-CcsH10EdewHmgM-K7s4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.142.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:79:ba:ab:26:be:d2:c2:00:ef:a6:9f:43:bd:81:38:20:cd:
         fa:10:ea:8e:f4:72:f9:5d:13:11:48:4b:d6:94:b3:0d:85:83:
         67:3b:f7:b6:c6:2b:8b:7c:da:1f:6c:a6:85:1f:d9:75:d9:3d:
         a6:ab:1c:a5:09:49:52:2f:65:3f:53:2f:f6:e5:e5:5c:25:33:
         d1:fe:1f:aa:c3:c4:ca:3e:73:eb:eb:49:55:98:b1:cc:f9:c6:
         22:fb:36:59:e2:d7:c9:82:6b:0d:93:60:c7:89:ec:54:1c:79:
         89:3c:f5:b6:af:c6:54:28:de:e4:ee:3f:6e:94:64:d0:af:2e:
         ec:3d:29:f4:68:03:35:75:26:f1:d5:3e:fa:ce:30:5b:cd:44:
         a8:f5:87:74:6c:c1:7d:d9:ee:78:15:35:c2:9f:68:09:f0:ee:
         37:2a:dd:b8:47:1f:dd:da:4b:28:ea:29:54:1e:a8:9f:bb:19:
         f8:43:d1:c4:72:7b:01:3a:c4:cd:01:2d:a7:cc:ae:05:ed:3f:
         ff:39:4d:1c:61:c3:4f:ae:58:29:93:1a:18:d9:99:6e:66:2e:
         14:49:05:e6:61:e0:a0:66:eb:0d:d1:9a:f5:6c:76:1a:17:9c:
         fd:20:e0:22:f0:ff:d6:60:73:f5:25:ad:9d:52:bc:fe:34:06:
         47:c4:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:27:00 2026 by rpki-client