This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ZR4Y4HPAR_fC3P3HOd0M217rHkw.roa
File:                     ZR4Y4HPAR_fC3P3HOd0M217rHkw.roa (raw, json)
Hash identifier:          JYop1SDDWdE/9K9+/rHqhBPy1A3w5cZpcmUsZZnvYuc=
Subject key identifier:   65:1E:18:E0:73:C0:47:F7:C2:DC:FD:C7:39:DD:0C:DB:5E:EB:1E:4C
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       86
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ZR4Y4HPAR_fC3P3HOd0M217rHkw.roa
Signing time:             Thu 01 Jan 2026 01:29:36 +0000
ROA not before:           Thu 01 Jan 2026 01:29:36 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     55391
IP address blocks:        217.178.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Jan  1 01:29:36 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=651E18E073C047F7C2DCFDC739DD0CDB5EEB1E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:bc:e0:79:2c:ec:7f:b5:08:c6:7d:77:86:
                    a6:7c:e9:25:6a:72:aa:6f:73:10:f7:02:bd:f3:cf:
                    ad:73:b6:18:1c:30:42:c2:9c:94:3e:ba:10:a1:82:
                    e2:c3:c4:2a:c6:03:6b:c2:e4:72:80:ea:42:94:cc:
                    6d:43:27:e6:54:24:f3:aa:d3:fe:34:3f:43:17:89:
                    e6:c3:a1:8e:e7:d3:83:56:6a:a9:e3:3a:d2:82:c7:
                    75:0a:c0:68:1c:2f:88:73:9a:4e:9f:67:6a:c5:a5:
                    54:cd:79:4a:63:37:be:b0:50:bb:05:3c:76:dc:78:
                    57:56:e3:65:44:51:50:92:b0:88:72:1e:97:f1:19:
                    c0:48:41:b7:ff:e6:1d:70:ad:ef:ee:22:b3:ee:e7:
                    05:94:d0:80:93:af:7e:fc:d1:3a:89:7a:1c:4f:dc:
                    ed:05:61:b5:3a:8a:1e:17:63:a6:3e:e1:92:cc:7b:
                    47:ea:30:8d:ad:ee:3e:a6:1a:6a:3c:78:d3:8d:f6:
                    c9:63:39:5a:11:64:be:9d:c6:cc:1f:27:1b:4f:64:
                    4c:28:ef:52:f1:43:bc:6a:a9:00:a5:08:3d:9e:b4:
                    64:30:6a:85:ac:fa:15:61:5a:aa:2a:a9:6e:2f:d3:
                    41:f3:04:86:02:d0:3e:75:50:f4:43:91:4f:d7:13:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1E:18:E0:73:C0:47:F7:C2:DC:FD:C7:39:DD:0C:DB:5E:EB:1E:4C
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ZR4Y4HPAR_fC3P3HOd0M217rHkw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:d2:2d:c7:63:ff:e8:50:bf:fd:bf:a1:15:6d:48:b1:c6:
         bc:f0:5d:7a:65:8b:39:5e:da:56:71:2f:e0:51:45:5d:ac:43:
         06:3c:c3:a0:a2:d1:99:2f:1e:cf:56:90:c3:c6:41:f8:86:f6:
         cf:2d:21:7f:b7:9c:4b:4c:96:91:90:72:e0:88:90:41:b0:7a:
         c5:c9:d2:90:d9:03:ca:bd:0d:25:9d:46:7c:63:f7:d4:01:04:
         86:44:bf:98:da:2e:85:17:c7:6d:eb:4e:94:d9:1c:2f:a4:7c:
         b3:74:ca:29:78:4e:b9:dc:05:ac:95:e5:3f:a3:c3:e2:d8:0d:
         e4:bf:8c:0f:ee:23:15:50:0a:2d:68:fa:32:6b:cb:d9:c1:19:
         37:e6:9f:66:15:7c:95:14:a6:70:33:de:87:be:60:0c:7b:7d:
         d3:a5:d2:cb:af:5d:70:5d:b1:17:81:fc:f4:f1:6e:bc:2c:e0:
         63:c0:31:bf:74:76:55:ec:6a:06:8a:34:36:4a:67:62:e2:02:
         4d:de:db:eb:df:d5:c2:0d:0e:d7:e8:c2:36:4d:ec:83:dd:9c:
         e4:50:f3:19:5d:04:3e:2b:12:ac:81:a6:c3:9a:07:fc:ca:72:
         3d:06:d5:2b:7a:6e:36:27:a1:6e:ec:e9:5c:a1:57:ee:a4:ee:
         6f:7a:8c:3d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTA1
NkQwNTAxRDQzMENFMEZDRjBEQjA2NzVCQUZDOTBCMDVEOUJGNTAeFw0yNjAxMDEw
MTI5MzZaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1MUUxOEUwNzNDMDQ3
RjdDMkRDRkRDNzM5REQwQ0RCNUVFQjFFNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC647zgeSzsf7UIxn13hqZ86SVqcqpvcxD3Ar3zz61zthgcMELC
nJQ+uhChguLDxCrGA2vC5HKA6kKUzG1DJ+ZUJPOq0/40P0MXiebDoY7n04NWaqnj
OtKCx3UKwGgcL4hzmk6fZ2rFpVTNeUpjN76wULsFPHbceFdW42VEUVCSsIhyHpfx
GcBIQbf/5h1wre/uIrPu5wWU0ICTr3780TqJehxP3O0FYbU6ih4XY6Y+4ZLMe0fq
MI2t7j6mGmo8eNON9sljOVoRZL6dxswfJxtPZEwo71LxQ7xqqQClCD2etGQwaoWs
+hVhWqoqqW4v00HzBIYC0D51UPRDkU/XEybxAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUZR4Y4HPAR/fC3P3HOd0M217rHkwwHwYDVR0jBBgwFoAU4FbQUB1DDOD88NsG
dbr8kLBdm/UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzExMjA3LzRGYlFVQjFERE9EODhOc0dkYnI4a0xCZG1fVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzRGYlFVQjFERE9EODhOc0dkYnI4
a0xCZG1fVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMTIwNy9aUjRZNEhQQVJfZkMzUDNIT2QwTTIxN3JIa3cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQG2bIAMA0GCSqGSIb3DQEBCwUAA4IBAQAcw9Itx2P/6FC//b+hFW1I
sca88F16ZYs5XtpWcS/gUUVdrEMGPMOgotGZLx7PVpDDxkH4hvbPLSF/t5xLTJaR
kHLgiJBBsHrFydKQ2QPKvQ0lnUZ8Y/fUAQSGRL+Y2i6FF8dt606U2RwvpHyzdMop
eE653AWsleU/o8Pi2A3kv4wP7iMVUAotaPoya8vZwRk35p9mFXyVFKZwM96HvmAM
e33TpdLLr11wXbEXgfz08W68LOBjwDG/dHZV7GoGijQ2Smdi4gJN3tvr39XCDQ7X
6MI2TeyD3ZzkUPMZXQQ+KxKsgabDmgf8ynI9BtUrem42J6Fu7OlcoVfupO5veow9
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:57 2026 by rpki-client