This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Flt3ZAFhl_dAV5yxwLQcfUdusZ4.roa
File:                     Flt3ZAFhl_dAV5yxwLQcfUdusZ4.roa (raw, json)
Hash identifier:          NJ0nFqvSaQIIavm1mQlNF9fjdJRT/zMbE2BnoMtWBA4=
Subject key identifier:   16:5B:77:64:01:61:97:F7:40:57:9C:B1:C0:B4:1C:7D:47:6E:B1:9E
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       5F
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Flt3ZAFhl_dAV5yxwLQcfUdusZ4.roa
Signing time:             Thu 01 Jan 2026 01:33:19 +0000
ROA not before:           Thu 01 Jan 2026 01:33:19 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17698
IP address blocks:        211.15.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Jan  1 01:33:19 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=165B7764016197F740579CB1C0B41C7D476EB19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:54:1c:2a:34:39:12:af:f3:ce:ed:97:fb:
                    f4:00:9a:17:e8:80:76:18:96:8b:2d:be:35:ad:75:
                    66:a4:ec:f3:ef:99:a6:0b:1c:71:ec:bd:09:79:11:
                    ec:6f:f6:6a:8e:8c:eb:e3:fa:e0:b0:f0:e6:22:55:
                    57:52:1e:0e:72:01:6a:76:bd:38:94:a9:92:9e:89:
                    e2:22:ea:cd:22:67:cc:65:70:23:4e:65:2d:f9:6b:
                    f8:32:85:c6:0c:21:b9:e5:bd:a5:e8:19:7d:0f:8f:
                    b7:5d:5f:42:36:44:6b:64:3c:2f:86:f3:13:41:03:
                    99:30:05:2f:81:2c:48:0b:55:ef:32:d6:ad:31:f0:
                    4d:25:c2:b9:d8:65:3f:ff:3b:24:d1:d2:be:19:77:
                    d4:c8:bb:e0:26:9b:2e:77:b5:bd:dc:3a:ed:8c:93:
                    ce:f3:31:b5:0f:63:a3:cd:39:0c:a1:30:49:e0:91:
                    be:82:2b:7c:f0:53:05:27:99:66:43:c4:ba:ff:7c:
                    da:31:9a:79:65:b5:f5:22:cb:3a:2c:5d:dd:94:7e:
                    db:ba:00:3b:31:dd:e1:15:ed:e6:b8:a9:7a:a5:9d:
                    e0:53:67:52:24:c3:a9:db:55:05:84:2c:6f:42:2e:
                    81:d3:65:55:d1:b4:50:d9:83:e6:20:e0:a2:fe:32:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5B:77:64:01:61:97:F7:40:57:9C:B1:C0:B4:1C:7D:47:6E:B1:9E
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Flt3ZAFhl_dAV5yxwLQcfUdusZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.15.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:93:8a:fe:1b:17:e4:5d:c9:b2:88:4a:35:d8:e9:14:93:78:
         e1:08:1c:7d:08:a7:16:e5:ac:f0:a6:a9:41:82:09:92:c1:f6:
         52:aa:ea:2e:b6:7a:f5:2b:cc:0f:8b:66:7b:d4:fb:51:3c:d3:
         3c:15:d2:7b:73:16:8f:c6:e0:c8:9e:1e:f8:2e:2c:62:fd:fd:
         60:6e:2f:63:dc:dd:49:72:50:8e:fa:90:3c:29:f9:98:dc:7c:
         18:5c:73:02:d3:19:0b:e4:33:eb:61:b2:f5:77:8c:53:5f:c7:
         b2:0d:ce:6c:ec:25:f7:fd:bc:19:a2:dc:4e:5d:86:81:3b:6b:
         66:59:93:eb:14:63:2d:bc:39:2a:94:2c:23:e9:bb:b2:04:39:
         31:1b:f5:c6:9a:7f:11:99:bc:e7:0b:bd:8d:b8:10:ee:1c:78:
         db:77:cd:1d:72:cd:1c:b8:f9:1d:64:e4:bb:b5:68:ee:8f:ad:
         72:15:b6:d0:e6:01:2c:aa:ad:67:aa:77:92:9d:73:c1:02:68:
         dc:d4:73:15:7f:4a:5e:b1:bc:af:51:ff:95:b1:8b:ad:7e:05:
         6b:d4:b6:4b:da:95:a1:2e:b0:0b:76:95:20:5c:a5:ce:c7:3b:
         51:c7:d6:bf:d7:fa:d2:82:ce:d6:f3:38:2d:6c:29:71:1f:ba:
         a0:75:f3:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 9 22:28:14 2026 by rpki-client