This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/qfknMj3RijI1sUXaJWzboMC-qIE.roa
File:                     qfknMj3RijI1sUXaJWzboMC-qIE.roa (raw, json)
Hash identifier:          yVEPIxeHlSOPePGOfvtC/THaWuoqrh2BsJ1gnr0OdeI=
Subject key identifier:   A9:F9:27:32:3D:D1:8A:32:35:B1:45:DA:25:6C:DB:A0:C0:BE:A8:81
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       DB
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/qfknMj3RijI1sUXaJWzboMC-qIE.roa
Signing time:             Thu 01 Jan 2026 01:30:52 +0000
ROA not before:           Thu 01 Jan 2026 01:30:52 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        202.62.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Jan  1 01:30:52 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=A9F927323DD18A3235B145DA256CDBA0C0BEA881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:5a:f3:82:54:88:24:ac:1c:61:b8:55:3b:
                    ba:e9:c9:64:26:b3:b7:45:4f:40:82:10:5f:c8:20:
                    a9:1d:ce:17:0c:75:24:63:35:31:41:7d:ee:ad:7d:
                    7a:25:ac:26:4e:9f:30:25:c1:16:7d:3f:3c:ee:f2:
                    be:12:c8:82:30:68:c0:0c:91:51:0b:dd:c0:79:10:
                    b3:62:3e:6f:ff:1b:8c:ab:01:d8:f5:3d:4b:9a:4b:
                    02:b6:c1:17:e8:3d:51:73:34:5b:2e:a1:43:7c:cc:
                    f1:4c:0e:c8:df:47:52:b0:9f:1e:92:d3:74:24:a2:
                    d0:9d:45:b6:ae:68:bd:05:e9:a1:54:4e:9f:00:eb:
                    84:07:f4:33:7c:80:c4:76:65:d4:23:ad:9b:a7:bb:
                    80:70:21:23:c5:3f:d3:2e:89:3e:64:75:3f:0a:4e:
                    de:6f:6a:5f:73:2b:8b:4d:c1:d9:eb:cb:2d:71:19:
                    b8:37:6b:50:87:1e:39:3a:df:d2:8f:89:9a:cb:7f:
                    96:cd:60:10:0a:0c:da:01:b7:35:5d:35:79:d6:65:
                    bf:b2:ff:bf:07:f1:72:31:39:6b:ee:f2:be:25:94:
                    24:9e:21:31:80:11:5b:c4:de:2f:af:dc:3d:5b:05:
                    ca:89:94:5a:78:41:67:47:c0:e9:eb:9f:db:7b:c4:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F9:27:32:3D:D1:8A:32:35:B1:45:DA:25:6C:DB:A0:C0:BE:A8:81
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/qfknMj3RijI1sUXaJWzboMC-qIE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:19:b9:d3:25:06:3b:ae:b0:11:09:31:27:db:bb:07:24:57:
         b7:1b:6e:4b:d5:c2:56:5c:89:bb:0d:3f:67:37:9a:99:c6:e5:
         00:60:23:7d:2f:4c:69:e6:c5:87:78:30:35:dd:00:86:e5:7d:
         ee:6b:0c:79:b4:1a:96:fe:89:b9:e6:af:b0:45:ac:c2:a9:49:
         a5:36:77:16:ed:97:3a:d1:10:ef:fa:8e:fa:c2:64:aa:b5:bb:
         83:0d:22:2d:eb:6c:a2:1a:04:04:b1:3e:74:09:72:da:3a:09:
         de:2a:63:c9:34:df:06:fa:ec:c1:af:89:01:fa:61:8d:0e:09:
         89:8d:69:3e:87:a4:8a:2c:c1:05:57:69:80:77:1f:5e:02:42:
         30:b8:c8:df:f8:37:00:5b:52:b7:aa:ce:69:88:ee:df:0d:9b:
         02:06:93:94:7f:d2:11:04:be:25:c3:8b:ef:0c:2b:b1:8c:58:
         ef:1f:69:4c:c5:7e:77:6b:d5:8b:90:97:40:ce:ee:ff:f1:d9:
         38:0e:48:6e:48:e0:ab:6c:54:51:34:49:df:7c:a9:14:f5:3c:
         83:bb:75:7a:35:d6:aa:cc:65:59:33:82:83:3d:a5:26:56:f2:
         89:7f:cd:d5:ed:51:05:50:77:28:9f:74:33:23:fb:d0:d0:7c:
         bd:55:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:26:43 2026 by rpki-client