This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/nlpX9AWS9d5Q3cCkLcocervClAg.roa
File:                     nlpX9AWS9d5Q3cCkLcocervClAg.roa (raw, json)
Hash identifier:          /VbW3nVCTeSA2fuWVYCHvaPVfbivx3Av+41LG4wxvl8=
Subject key identifier:   9E:5A:57:F4:05:92:F5:DE:50:DD:C0:A4:2D:CA:1C:7A:BB:C2:94:08
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       5D
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/nlpX9AWS9d5Q3cCkLcocervClAg.roa
Signing time:             Thu 01 Jan 2026 01:33:18 +0000
ROA not before:           Thu 01 Jan 2026 01:33:18 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17698
IP address blocks:        218.40.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Jan  1 01:33:18 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=9E5A57F40592F5DE50DDC0A42DCA1C7ABBC29408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:19:0e:42:be:3e:0d:9e:3e:ea:a4:77:8b:
                    24:59:c1:95:5a:93:1c:29:62:3d:44:2c:0d:e4:72:
                    03:92:fa:48:93:5a:6d:00:e8:ec:32:59:94:f8:07:
                    de:2c:12:a9:ac:e5:2b:30:25:d0:71:59:2e:d7:3b:
                    c1:be:e6:45:60:74:52:f2:9d:e1:2c:48:3c:70:b2:
                    85:db:f9:52:c0:a1:2a:53:c4:99:37:ff:5e:f1:ec:
                    22:67:c5:35:dd:bf:6d:cb:b8:6a:18:00:33:7e:ed:
                    58:a7:cf:c9:5c:57:8f:29:22:cd:52:83:5e:fd:07:
                    4a:cd:b1:65:34:c7:6f:81:96:b5:07:a5:5e:c6:39:
                    43:5e:01:ce:66:14:81:d8:9c:1d:f0:41:0a:8c:cc:
                    59:14:7f:4a:7f:a1:d1:b9:b2:47:b1:09:d3:49:2b:
                    85:e9:d3:0c:77:b0:51:8e:98:60:a9:97:49:e1:cf:
                    f7:a2:56:3f:57:c4:24:fd:35:75:d1:ae:66:fd:cb:
                    c3:a1:e2:98:fb:54:c5:32:0f:f6:3d:2d:8d:d3:6b:
                    12:dd:87:72:48:56:95:73:d4:12:8f:25:9f:b0:54:
                    a0:6f:7a:db:90:77:ee:83:84:c9:0c:15:03:05:b2:
                    06:7c:c1:60:96:99:c1:50:ad:cf:96:28:f0:7f:08:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5A:57:F4:05:92:F5:DE:50:DD:C0:A4:2D:CA:1C:7A:BB:C2:94:08
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/nlpX9AWS9d5Q3cCkLcocervClAg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:6c:31:c7:b2:a5:60:e1:71:67:e0:02:0e:d9:3c:7b:c4:
         bd:ef:af:33:92:1b:c3:1a:78:36:cd:5f:91:db:10:e2:65:39:
         2b:64:d3:f3:99:05:94:ad:db:9b:0b:5a:45:b3:b2:03:37:de:
         70:a2:6e:52:54:4c:fc:f1:97:27:a8:16:95:92:75:15:15:b2:
         b0:38:06:56:02:8a:50:e6:7a:98:b2:c6:b0:fd:70:9d:b3:1f:
         ca:c6:ed:5d:5c:cc:40:c8:66:64:e0:ef:52:7d:06:1f:2b:52:
         ba:b6:be:6f:02:0b:bc:8e:e0:e8:ff:bc:eb:a9:f6:52:c0:ce:
         3b:6c:f5:61:b6:e9:39:7a:a7:d9:a8:e9:00:85:d5:68:88:7c:
         e1:2f:4b:90:8c:17:9c:23:7f:4c:6a:0c:43:18:06:bd:0b:2b:
         e3:4d:1d:e0:16:82:49:16:0a:c1:cd:8a:7d:95:7f:4b:51:cd:
         c4:8c:ce:98:6b:a4:97:ee:21:f9:d2:d9:1e:88:58:fa:74:06:
         ab:0e:ec:bc:29:ee:8c:ae:a6:72:e4:61:08:68:37:4f:ce:06:
         cc:46:2a:c5:91:26:87:93:93:56:7b:ba:18:78:ac:7e:25:f7:
         70:a1:80:20:3d:1d:a9:2b:95:f9:2e:10:45:87:e6:2d:f6:20:
         27:67:66:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 9 22:28:13 2026 by rpki-client