This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/hnhclWd9eYNt6wfWSHtJI9FfTeY.roa
File:                     hnhclWd9eYNt6wfWSHtJI9FfTeY.roa (raw, json)
Hash identifier:          f1vaP+Q6Z+OrvDdGkh5BHbNA8RJs66RIcvNNXPzK5Qg=
Subject key identifier:   86:78:5C:95:67:7D:79:83:6D:EB:07:D6:48:7B:49:23:D1:5F:4D:E6
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       5B
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/hnhclWd9eYNt6wfWSHtJI9FfTeY.roa
Signing time:             Thu 01 Jan 2026 01:33:16 +0000
ROA not before:           Thu 01 Jan 2026 01:33:16 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17698
IP address blocks:        119.10.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Jan  1 01:33:16 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=86785C95677D79836DEB07D6487B4923D15F4DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f8:a5:56:b3:c5:ad:16:f6:6a:89:a6:ae:2e:
                    19:0a:f7:aa:e9:af:a0:78:66:4d:94:07:9a:5d:94:
                    3f:7b:f5:b6:a4:2f:00:aa:75:0b:ed:0e:85:df:79:
                    24:b5:c6:24:91:63:08:02:9d:b3:dd:f6:47:4f:0c:
                    81:8a:76:9d:c6:89:3d:f8:68:4e:d5:25:3b:f0:06:
                    26:c6:fb:62:2f:24:b4:c5:86:f5:19:2a:b1:69:b9:
                    2c:7a:12:46:04:77:8c:4f:99:0d:8e:5a:87:ab:1e:
                    01:b1:4e:ac:bd:cb:25:eb:a6:d4:6d:d4:43:df:60:
                    cc:80:e1:b8:82:88:53:ce:bb:fb:b2:81:8a:8b:9d:
                    18:84:f1:90:87:82:26:13:b0:25:fb:ab:28:fe:3b:
                    2f:1a:86:a3:52:22:1c:d1:f6:7b:dc:30:5a:34:91:
                    84:d7:9b:25:07:80:a9:06:c8:38:43:9a:72:dd:5e:
                    ff:f1:f7:a4:dc:14:0b:a7:8e:df:87:0f:f4:b5:03:
                    4e:98:a7:f9:a2:7e:15:2c:e8:88:ae:6e:07:ed:0e:
                    3e:ac:e9:c2:69:30:83:c7:4c:7f:cd:81:e8:ff:4d:
                    ac:02:7f:cf:76:d2:e8:c9:f2:7f:9f:9f:91:64:18:
                    a5:e5:42:1c:64:e5:7f:ca:a1:22:71:58:e0:47:35:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:5C:95:67:7D:79:83:6D:EB:07:D6:48:7B:49:23:D1:5F:4D:E6
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/hnhclWd9eYNt6wfWSHtJI9FfTeY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:4e:54:f3:38:80:a7:c5:ce:fb:b1:6c:8b:22:ac:51:7f:
         ad:9a:ee:cf:f0:37:ac:c4:b0:02:87:40:16:3f:02:97:a2:1b:
         ed:dc:d4:69:f0:0e:f5:93:a5:ff:92:6d:59:3b:a3:2e:17:06:
         ef:c7:fc:c2:f6:9f:52:4f:93:3f:ba:cb:6e:75:a9:92:a8:c3:
         50:56:c1:06:0b:d6:6f:1c:80:b0:08:8e:53:04:ae:5a:24:11:
         81:d9:ed:27:2a:01:0e:c2:3d:68:e4:89:99:c9:dc:ed:b3:c3:
         82:ff:3c:20:38:e2:eb:ac:ac:a8:89:62:d5:d9:6f:df:62:d4:
         9a:fd:da:62:4c:d1:7b:04:fa:40:84:69:7a:eb:a1:28:d7:34:
         bd:91:a7:17:81:e5:5a:0c:f5:1e:58:b2:48:b7:2e:3e:5d:bb:
         57:ae:5d:7e:6e:a6:6e:eb:f7:7c:5f:b5:74:29:ad:b1:26:48:
         75:26:b2:bb:a0:1c:71:0a:0d:e2:e9:a8:04:af:69:39:63:cc:
         ae:5a:01:3e:ff:7f:d0:83:1d:25:e5:05:89:ee:ac:a7:66:5c:
         a9:81:3d:91:47:27:38:ef:44:fa:9b:61:25:d2:8d:dd:fe:f7:
         33:12:7b:9b:c8:10:9a:bc:60:eb:36:16:1c:83:21:1c:87:fc:
         ab:67:17:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 9 22:28:18 2026 by rpki-client