This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/pmkYG8eaYE3fBWlWR9Fi6HmRBdQ.roa
File:                     pmkYG8eaYE3fBWlWR9Fi6HmRBdQ.roa (raw, json)
Hash identifier:          DMZcgYI5xXBRi3fUghQtdrpnvqVlUNYdC6a5g1BdG+M=
Subject key identifier:   A6:69:18:1B:C7:9A:60:4D:DF:05:69:56:47:D1:62:E8:79:91:05:D4
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       84
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/pmkYG8eaYE3fBWlWR9Fi6HmRBdQ.roa
Signing time:             Thu 01 Jan 2026 01:29:34 +0000
ROA not before:           Thu 01 Jan 2026 01:29:34 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     55391
IP address blocks:        217.178.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Jan  1 01:29:34 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=A669181BC79A604DDF05695647D162E8799105D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:8e:07:d0:1d:ce:e3:e9:6c:c5:3b:c9:a7:
                    20:d4:a0:43:8b:be:e0:fe:ec:37:b8:72:e2:8f:de:
                    0c:18:3b:78:39:71:0b:b5:ff:1b:28:27:71:05:0b:
                    c5:a1:05:50:f9:8f:9d:52:6c:f0:f6:7f:ad:74:ef:
                    5f:f7:13:ca:1b:3d:6c:30:99:4d:28:cb:2d:c1:ca:
                    9e:ce:65:b5:cf:e1:1c:7f:b4:42:c6:5f:9c:4d:87:
                    2d:70:06:be:62:37:70:e6:fb:db:ce:fa:f0:e1:b6:
                    e9:0f:bc:74:23:67:df:8e:b8:9f:69:7a:27:a6:a7:
                    f8:a3:ed:7d:e2:0f:5c:50:94:5d:51:6a:76:e5:f0:
                    62:cd:4e:98:30:95:62:df:81:ec:9a:b7:7f:ad:5c:
                    7f:8c:77:d3:76:6e:89:46:53:a5:44:48:9e:35:52:
                    94:93:04:ae:5c:84:25:7d:1f:58:b5:2b:bb:7c:a2:
                    23:27:2f:38:9e:f0:96:5b:bb:81:41:1f:28:b1:09:
                    7d:69:84:ac:19:7e:7a:a9:85:df:5b:c1:4f:00:f4:
                    96:a8:cb:ca:79:ef:aa:8f:43:2a:2f:d3:97:69:9f:
                    7b:0b:bf:eb:33:8c:d9:c6:86:27:a4:df:c2:3e:b4:
                    59:b6:e9:12:3f:b7:66:ae:87:5f:19:95:1a:a0:f3:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:69:18:1B:C7:9A:60:4D:DF:05:69:56:47:D1:62:E8:79:91:05:D4
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/pmkYG8eaYE3fBWlWR9Fi6HmRBdQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:13:5c:22:00:b6:48:98:19:3a:db:72:c8:05:07:c8:c5:0e:
         48:0f:04:90:f0:03:88:d9:0d:1d:44:ed:ee:66:8a:36:6d:8a:
         ea:96:c8:36:db:98:b1:fb:d5:54:9a:ae:fb:ac:4a:d8:88:fd:
         15:03:eb:6c:65:3c:27:db:e5:70:1c:02:e2:4a:59:81:b7:ff:
         8e:5e:76:b0:fe:63:bf:a7:40:99:9b:9c:53:f6:12:42:fb:e4:
         d3:c7:69:53:00:ac:63:3b:2e:89:21:5d:d8:52:5c:77:bc:07:
         f0:bb:b5:10:04:35:9e:2d:cd:c4:94:14:b9:6b:c1:fd:bd:59:
         1f:f8:0b:aa:e8:db:4d:d8:bb:ee:2b:a5:58:a9:c8:4c:ca:68:
         c3:a6:0e:2a:50:53:4a:71:86:49:f1:05:c5:b4:05:f3:f3:04:
         c6:1e:a7:b5:84:4d:ae:ab:04:5d:d9:16:8e:9f:91:9c:a9:d5:
         41:86:57:8c:53:df:e5:e7:e3:90:12:17:e0:1b:7a:e5:a8:e7:
         bf:c8:fc:62:ff:e4:9a:ac:c8:a4:11:2b:c8:93:2e:66:f2:65:
         d5:f0:9e:b3:a6:24:50:07:aa:2a:6a:f7:6c:30:71:fe:16:e2:
         d2:77:41:e1:28:2e:2e:1f:a2:1f:ed:1b:0c:a2:4f:d9:cb:29:
         21:43:67:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:58 2026 by rpki-client