This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1398/C5sWMwcddBW0wNiv8e9lGDCIWBw.roa
File:                     C5sWMwcddBW0wNiv8e9lGDCIWBw.roa (raw, json)
Hash identifier:          UjjLC23fYlCV5/Ymg8eoQUZGnP04I56xjehSH2k+Dvg=
Subject key identifier:   0B:9B:16:33:07:1D:74:15:B4:C0:D8:AF:F1:EF:65:18:30:88:58:1C
Certificate issuer:       /CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Certificate serial:       63
Authority key identifier: 20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/C5sWMwcddBW0wNiv8e9lGDCIWBw.roa
Signing time:             Thu 01 Jan 2026 01:29:59 +0000
ROA not before:           Thu 01 Jan 2026 01:29:59 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     58785
IP address blocks:        157.118.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 12:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
        Validity
            Not Before: Jan  1 01:29:59 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=0B9B1633071D7415B4C0D8AFF1EF65183088581C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:38:3c:71:1d:f3:59:68:4c:ba:58:b4:2f:26:
                    87:3b:75:04:81:b7:27:2e:0a:09:4a:1a:8d:1d:99:
                    2f:46:62:d4:bd:58:6c:8f:1a:83:cd:39:cd:30:c4:
                    11:e5:04:8d:46:83:7e:f5:73:e0:68:e6:5f:14:48:
                    88:61:cb:3c:dc:5c:4e:d2:6d:7a:f1:7b:21:17:4c:
                    9a:76:2e:2b:c2:6b:11:02:07:8e:4c:2c:cd:30:66:
                    91:4a:4f:81:7e:e5:f8:0c:c8:04:47:cd:b8:59:83:
                    a6:88:f1:fd:eb:8c:a6:26:8d:36:40:df:d2:79:4e:
                    37:73:21:b8:fd:66:ba:87:f3:09:21:32:b4:2e:c6:
                    32:9f:8b:32:b0:80:35:44:de:1e:4f:54:11:11:ea:
                    21:6e:83:a4:44:e0:aa:5b:46:40:27:82:48:30:8c:
                    d6:a2:2e:e7:62:dc:1d:78:3a:1f:5e:98:59:ba:aa:
                    d5:01:8b:49:a4:45:bf:b2:51:97:a8:ee:b3:6a:bd:
                    3d:5c:d0:15:78:8a:3b:49:19:1d:2c:a7:97:af:04:
                    8a:18:e6:46:69:ef:96:24:fb:89:01:76:1c:da:0f:
                    9b:47:d7:d9:24:07:ca:88:82:0a:87:f6:a8:a5:5f:
                    fd:8a:d8:96:df:5b:d9:16:be:3d:44:70:a3:47:6e:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:16:33:07:1D:74:15:B4:C0:D8:AF:F1:EF:65:18:30:88:58:1C
            X509v3 Authority Key Identifier:
                keyid:20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/C5sWMwcddBW0wNiv8e9lGDCIWBw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:66:1a:8e:3b:cf:11:30:ce:99:d4:c5:85:13:65:55:3e:05:
         4f:76:31:0f:ee:66:59:2a:be:79:1d:69:38:b0:59:4a:0d:ee:
         6e:53:83:7a:16:ca:7a:a5:70:4e:3e:84:3e:a1:06:13:2f:21:
         82:f1:74:d9:88:ac:9c:d5:fc:1a:17:70:af:6a:f8:39:0e:70:
         12:a1:58:94:21:3e:05:1c:4c:dc:71:3e:01:2a:fc:dc:92:e5:
         17:d0:72:0b:05:13:97:bc:cc:70:0a:eb:7e:50:c9:2e:1a:9c:
         b2:ba:89:11:42:ea:20:f4:4d:a5:e5:ca:71:6a:93:00:d2:8f:
         34:ce:78:60:fb:36:d1:5a:97:0b:97:f9:b2:be:30:bf:62:73:
         05:b4:85:b8:27:43:04:ff:29:af:4e:e4:ba:b7:26:74:e0:26:
         1c:48:c2:78:53:13:90:aa:2f:46:83:0e:69:70:f9:cc:f7:df:
         99:3f:f0:fd:3e:1a:ee:13:ad:bf:3e:a9:d8:c4:c6:49:ca:c7:
         49:08:92:a8:43:ee:1c:ff:58:cf:22:cb:de:de:9e:87:8d:5b:
         03:69:31:5b:15:98:c8:29:0b:04:9c:29:7e:69:fb:1c:03:e8:
         d2:d3:96:22:36:e5:0a:57:64:7f:1c:d1:de:31:42:cc:81:13:
         ac:f5:06:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:21:32 2026 by rpki-client