This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/gdZv4drrv_qKWuAEnCJNU_eQC8I.roa
File:                     gdZv4drrv_qKWuAEnCJNU_eQC8I.roa (raw, json)
Hash identifier:          eh+k5WpKHBz2unz+/6s33I+ccEqv0KPmzLe+ydWDO6A=
Subject key identifier:   81:D6:6F:E1:DA:EB:BF:FA:8A:5A:E0:04:9C:22:4D:53:F7:90:0B:C2
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       D5
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/gdZv4drrv_qKWuAEnCJNU_eQC8I.roa
Signing time:             Thu 01 Jan 2026 01:30:49 +0000
ROA not before:           Thu 01 Jan 2026 01:30:49 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        123.1.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Jan  1 01:30:49 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=81D66FE1DAEBBFFA8A5AE0049C224D53F7900BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:4b:3a:c8:8e:52:1c:f3:ed:94:ff:61:d3:
                    5a:e3:0e:f6:6e:d9:f8:a7:19:76:4b:87:51:49:04:
                    e3:7e:2f:1e:84:81:16:10:3d:df:24:95:03:ae:55:
                    ca:e5:9a:0f:03:f3:67:ba:98:3c:3d:d0:cb:1a:12:
                    04:5a:6d:af:d3:65:9c:30:fa:d8:86:d0:7e:b6:af:
                    1f:82:eb:75:03:a4:65:75:4d:7a:9b:8b:4c:48:af:
                    2c:73:0b:81:7d:da:9f:9f:23:81:b6:24:fd:ca:f0:
                    67:71:c0:2d:13:0f:91:27:c5:22:62:8a:4d:aa:af:
                    11:f0:3f:5b:69:63:51:31:46:70:ba:54:e3:ac:8a:
                    e1:91:8c:93:c2:c6:87:86:9e:81:6f:92:89:4b:a1:
                    e8:a1:6b:1a:a5:f4:97:21:14:5b:5f:67:1e:0f:c8:
                    cb:99:82:3b:1c:96:05:c5:ee:f0:96:f6:3b:9c:4c:
                    ba:51:87:0e:aa:66:06:21:45:c0:55:2e:8c:e4:1b:
                    ad:b9:02:02:3a:43:e5:79:c1:e5:03:4c:9b:0d:de:
                    4f:30:7f:8d:1c:15:f2:80:f1:88:b7:19:fd:0e:44:
                    40:bc:ea:36:86:0c:8c:b6:53:4b:18:10:ba:c1:e7:
                    b8:d4:da:25:e6:8a:da:ce:f7:f3:b1:61:ec:ea:1c:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:6F:E1:DA:EB:BF:FA:8A:5A:E0:04:9C:22:4D:53:F7:90:0B:C2
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/gdZv4drrv_qKWuAEnCJNU_eQC8I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.1.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:00:22:9c:d6:57:5e:ea:e8:27:32:8f:f6:73:10:c8:4b:
         76:63:fc:98:09:8b:70:26:46:6b:d3:c1:7d:cb:69:e4:00:36:
         63:a2:21:02:18:de:11:8f:ae:98:11:b1:76:c6:5e:93:40:f2:
         35:03:18:24:a9:a1:a7:59:07:45:0c:81:00:48:a4:87:a8:bd:
         bf:8b:40:9f:32:94:bb:2e:c5:d2:d7:92:17:09:9f:08:68:64:
         36:95:86:aa:49:c7:72:5e:4f:81:8e:d8:ea:d7:ee:8b:e1:82:
         45:07:92:5e:6c:af:f3:da:a0:23:4e:c7:de:9e:db:52:13:32:
         5e:80:e8:26:16:7c:ff:ba:ff:39:b7:48:92:ed:69:a7:4b:c0:
         30:34:a5:a0:fc:de:89:7e:d6:7d:a4:1a:73:fc:40:86:b3:d6:
         96:72:12:44:9a:10:8a:85:6f:ce:e2:e7:73:5d:4f:88:e9:5b:
         43:c3:ba:7e:77:c5:e4:54:10:0c:ad:10:cb:fd:c8:c8:ae:f4:
         fe:7c:d6:b8:fd:36:f2:48:a8:eb:c5:d2:c9:69:31:49:f3:9a:
         93:7d:f8:f8:32:eb:c6:dc:19:1b:7c:a1:3a:e4:60:1c:d7:b9:
         0c:75:31:24:c1:c3:9a:d5:02:3e:11:7d:da:bd:df:08:6c:87:
         f9:f9:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:26:43 2026 by rpki-client