This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/KRNARDetCgOJ4_ReNXnLR2hFEo8.roa
File:                     KRNARDetCgOJ4_ReNXnLR2hFEo8.roa (raw, json)
Hash identifier:          OWcAUlJTQeYZUPjVULA8zJ67gTE2VramyGlr5FUSq/Y=
Subject key identifier:   29:13:40:44:37:AD:0A:03:89:E3:F4:5E:35:79:CB:47:68:45:12:8F
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       90
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/KRNARDetCgOJ4_ReNXnLR2hFEo8.roa
Signing time:             Sun 01 Feb 2026 01:28:32 +0000
ROA not before:           Sun 01 Feb 2026 01:28:32 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     16625
IP address blocks:        115.69.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 06:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Feb  1 01:28:32 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=2913404437AD0A0389E3F45E3579CB476845128F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:44:a2:90:4b:d7:57:32:d9:76:af:40:d3:
                    54:72:73:88:b5:e6:e5:b6:9f:1f:2d:b5:26:2d:cc:
                    6e:71:67:07:2c:7c:19:77:c7:3d:ac:93:a2:2b:3f:
                    65:f5:bd:53:4b:db:b2:d8:9a:b4:46:87:13:d6:6d:
                    33:fb:2e:49:15:43:81:38:97:74:95:6f:69:12:69:
                    72:8d:69:39:4c:24:8e:eb:ba:bb:ac:2a:ce:9f:b0:
                    4c:d4:a9:94:68:97:69:3d:73:c3:ab:67:cc:8b:b8:
                    ae:30:fc:6f:5b:10:2d:48:f0:4f:99:ba:90:71:57:
                    35:d0:c6:51:82:9a:d0:cf:79:1b:d3:40:59:65:3c:
                    50:78:26:3f:65:a6:9e:cf:5a:92:95:88:d2:3f:28:
                    cb:85:20:5a:b3:d7:af:b0:1b:dd:1c:4e:f4:e8:0f:
                    fa:20:6f:b2:f1:82:2f:eb:4f:a3:68:74:e5:da:a0:
                    7e:7f:a7:72:e2:88:64:51:5a:45:98:7a:8d:70:dd:
                    8a:92:46:16:ea:68:87:7b:73:e9:81:ab:e5:68:43:
                    2a:7a:c9:a7:04:47:57:cf:19:17:e2:52:33:de:66:
                    76:5b:ba:f0:41:8f:58:62:7e:03:23:b0:8d:78:01:
                    ca:67:b9:33:2c:f1:4d:06:2d:d1:6f:3e:af:18:75:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:13:40:44:37:AD:0A:03:89:E3:F4:5E:35:79:CB:47:68:45:12:8F
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/KRNARDetCgOJ4_ReNXnLR2hFEo8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:bb:e8:72:8b:3d:ca:8e:cd:8f:67:e4:12:84:ec:52:d8:62:
         16:1e:fa:3c:f0:75:26:88:14:76:68:b3:04:84:b4:0a:97:62:
         86:b4:e5:0d:73:c3:06:7f:33:b3:9d:f5:33:42:40:14:e6:99:
         1c:51:27:80:88:9b:63:47:ea:9c:38:38:14:36:84:23:80:78:
         f3:79:c5:d1:69:97:7e:74:f4:2c:a5:1f:89:50:cf:d0:d0:c7:
         5f:ad:3f:53:86:34:75:65:04:39:9f:ca:0d:16:b0:07:9f:23:
         36:f5:76:5f:ab:ba:67:a8:19:32:0f:33:38:5a:5d:8c:81:bd:
         00:fb:cc:aa:bb:88:f6:c5:9d:2b:72:d6:94:80:02:b6:46:8d:
         da:9b:c1:4e:40:00:52:60:69:39:59:13:06:e5:7d:c3:9b:0c:
         b2:1b:cb:43:cb:da:5b:37:21:66:e9:99:f4:2e:7f:20:d0:0f:
         96:db:e2:48:f3:7c:93:b0:89:a2:62:13:a9:3c:0e:82:ac:6d:
         7d:57:49:ce:b3:bc:fa:20:f4:54:b6:74:ad:bb:6e:22:8a:40:
         3c:10:9d:18:df:2c:11:f2:a6:16:e6:f3:1b:a1:64:e7:e7:f2:
         57:12:b7:06:a9:c6:20:df:d4:90:d1:3a:d4:68:f4:39:63:de:
         ef:74:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:37:16 2026 by rpki-client