This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zWTo80xxwY182WHvrnNeoRZfQ-Q.roa
File:                     zWTo80xxwY182WHvrnNeoRZfQ-Q.roa (raw, json)
Hash identifier:          rFtSehDOpnZ/8qHAI5oztdmm3mDS74krgPBrz2fFtWQ=
Subject key identifier:   CD:64:E8:F3:4C:71:C1:8D:7C:D9:61:EF:AE:73:5E:A1:16:5F:43:E4
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       5C
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zWTo80xxwY182WHvrnNeoRZfQ-Q.roa
Signing time:             Thu 01 Jan 2026 01:33:17 +0000
ROA not before:           Thu 01 Jan 2026 01:33:17 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17698
IP address blocks:        202.168.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Jan  1 01:33:17 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=CD64E8F34C71C18D7CD961EFAE735EA1165F43E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b6:ee:fb:15:5f:45:bf:b9:b8:94:f3:47:00:
                    92:57:a8:01:52:16:3a:40:19:3b:70:db:93:2d:17:
                    8e:85:fc:9c:6e:e1:a9:bd:8b:da:81:0f:c1:f1:20:
                    3d:e1:28:0d:ba:aa:57:05:27:1b:17:98:de:ba:a8:
                    6c:51:b2:18:d2:a8:06:6f:45:d4:70:38:b3:0d:fc:
                    b3:34:aa:19:8c:31:a8:c9:1f:37:e3:49:d6:f4:10:
                    1b:2b:25:ab:1d:e1:18:98:88:fa:39:d8:ba:b3:e7:
                    70:fc:4a:10:5d:f9:65:b3:2b:dc:a6:c1:11:18:19:
                    8a:48:0e:63:65:01:3e:ed:b2:75:35:7a:7c:93:93:
                    a7:64:65:2d:ab:a2:87:ac:4c:3d:55:7d:1f:f3:e8:
                    9e:49:f0:2a:36:0b:7a:fb:6f:f0:8a:fb:94:e4:40:
                    e0:96:a6:94:98:fa:c0:c2:eb:7e:da:56:f4:d2:4a:
                    de:63:7e:88:0c:8b:a5:95:e2:84:6f:f3:21:77:9f:
                    b0:49:05:c4:8d:52:40:be:c0:77:67:e3:09:eb:0e:
                    1d:70:88:92:d9:b9:e1:65:23:dc:f1:be:61:89:86:
                    5d:c0:85:fe:25:47:1e:50:dc:cd:2d:d6:df:99:b7:
                    c0:4e:dd:39:cf:80:ee:ff:5d:04:46:a5:8b:ec:d8:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:64:E8:F3:4C:71:C1:8D:7C:D9:61:EF:AE:73:5E:A1:16:5F:43:E4
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zWTo80xxwY182WHvrnNeoRZfQ-Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:44:a4:da:1a:3e:73:e3:59:2d:8c:04:3a:fa:9c:85:8c:
         c7:3c:99:28:87:35:5e:a5:0c:66:a6:54:3e:10:0f:a7:93:32:
         8d:28:16:4e:17:0b:47:87:c6:c3:6f:94:99:55:b0:fa:97:21:
         d0:8c:d3:01:b5:15:8d:d5:7a:6d:e1:95:4e:e0:55:51:ef:c3:
         57:31:9f:08:3f:91:4c:8f:bf:a9:5c:7c:64:e9:c3:83:96:fe:
         56:9b:51:40:91:9b:78:29:9c:42:dd:03:01:14:3b:09:3e:b8:
         9b:e8:d6:bf:74:24:c3:26:36:e2:62:db:d1:5b:34:03:05:41:
         8a:84:b9:6a:2f:c2:7a:51:f6:4e:aa:e5:db:f3:78:73:5a:85:
         3c:73:3d:12:cd:6b:30:4c:1d:99:86:80:00:fb:78:c5:90:05:
         fa:7f:70:71:59:be:eb:4a:36:ce:c7:6c:b6:41:db:89:02:97:
         b3:f4:70:93:ee:9d:27:61:b5:3a:55:cc:37:15:1d:0d:30:7f:
         78:df:7a:a9:9a:c5:82:c2:ce:1c:af:8a:eb:d8:4a:7f:a2:f2:
         ed:e4:e2:53:79:fb:c1:fb:4d:e9:29:03:d2:cb:75:80:c4:ab:
         5e:fe:60:12:10:31:bd:ae:98:e0:b8:2f:ea:fa:5e:bf:08:11:
         49:89:80:a4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG
OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDEwMTAx
MzMxN1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0Q2NEU4RjM0QzcxQzE4
RDdDRDk2MUVGQUU3MzVFQTExNjVGNDNFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOu27vsVX0W/ubiU80cAkleoAVIWOkAZO3Dbky0XjoX8nG7hqb2L
2oEPwfEgPeEoDbqqVwUnGxeY3rqobFGyGNKoBm9F1HA4sw38szSqGYwxqMkfN+NJ
1vQQGyslqx3hGJiI+jnYurPncPxKEF35ZbMr3KbBERgZikgOY2UBPu2ydTV6fJOT
p2RlLauih6xMPVV9H/PonknwKjYLevtv8Ir7lORA4JamlJj6wMLrftpW9NJK3mN+
iAyLpZXihG/zIXefsEkFxI1SQL7Ad2fjCesOHXCIktm54WUj3PG+YYmGXcCF/iVH
HlDczS3W35m3wE7dOc+A7v9dBEali+zYk2MCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTNZOjzTHHBjXzZYe+uc16hFl9D5DAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo
xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf
MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwODIyL3pXVG84MHh4d1kxODJXSHZybk5lb1JaZlEtUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAPKqNgwDQYJKoZIhvcNAQELBQADggEBAI35RKTaGj5z41ktjAQ6+pyF
jMc8mSiHNV6lDGamVD4QD6eTMo0oFk4XC0eHxsNvlJlVsPqXIdCM0wG1FY3Vem3h
lU7gVVHvw1cxnwg/kUyPv6lcfGTpw4OW/labUUCRm3gpnELdAwEUOwk+uJvo1r90
JMMmNuJi29FbNAMFQYqEuWovwnpR9k6q5dvzeHNahTxzPRLNazBMHZmGgAD7eMWQ
Bfp/cHFZvutKNs7HbLZB24kCl7P0cJPunSdhtTpVzDcVHQ0wf3jfeqmaxYLCzhyv
iuvYSn+i8u3k4lN5+8H7TekpA9LLdYDEq17+YBIQMb2umOC4L+r6Xr8IEUmJgKQ=
-----END CERTIFICATE-----
Generated at Fri Jan 9 22:28:18 2026 by rpki-client