This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/FGXb5UFgQasbuvPoFc9j7I8-8bM.roa
File:                     FGXb5UFgQasbuvPoFc9j7I8-8bM.roa (raw, json)
Hash identifier:          iGuR8IUh7lTCVH3uiBGDursiYk0YzXcBV7mIRXD/17U=
Subject key identifier:   14:65:DB:E5:41:60:41:AB:1B:BA:F3:E8:15:CF:63:EC:8F:3E:F1:B3
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       E7
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/FGXb5UFgQasbuvPoFc9j7I8-8bM.roa
Signing time:             Thu 01 Jan 2026 01:30:36 +0000
ROA not before:           Thu 01 Jan 2026 01:30:36 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        203.129.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Jan  1 01:30:36 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=1465DBE5416041AB1BBAF3E815CF63EC8F3EF1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:8d:a3:35:7f:9d:8f:12:0a:d1:7a:0b:73:
                    6c:d7:52:d6:11:7f:8a:c9:9d:19:35:8b:56:34:9b:
                    4e:84:76:6d:b1:ce:4f:99:9d:95:66:97:bd:fa:4e:
                    e0:51:40:ba:7f:04:d9:4f:93:fd:44:6e:c0:b7:b8:
                    99:70:de:ac:66:d1:1e:ab:88:ab:23:9c:57:b3:4e:
                    2d:62:a3:29:cb:bf:42:b0:f9:e3:93:b7:20:0a:3c:
                    48:fb:66:9a:f4:2a:bb:17:a9:34:7f:cc:dc:24:cf:
                    ee:97:aa:b6:e1:db:e3:34:00:13:07:78:7b:45:53:
                    a8:4d:81:40:37:06:cb:dd:fd:27:e4:8f:58:fc:fe:
                    4c:83:02:3e:ae:98:1c:ae:d1:e6:d5:83:21:b0:57:
                    a3:8d:4f:ad:47:e5:de:b2:f4:47:83:ea:6f:49:0b:
                    57:5e:4a:0c:30:d5:20:37:f5:3f:89:1c:dc:9f:f3:
                    7e:7f:d4:75:83:cc:d3:ec:de:12:b8:22:c3:e0:53:
                    28:ed:90:0e:8b:b1:69:2d:81:96:d2:46:ca:22:82:
                    91:68:b2:81:a3:0f:68:e8:46:36:2b:69:c4:5a:50:
                    3c:46:1d:b4:de:b2:b5:09:d3:d8:3a:b0:fe:14:44:
                    a5:9c:f5:43:c6:01:17:1d:02:d5:aa:7b:2f:9d:e1:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:65:DB:E5:41:60:41:AB:1B:BA:F3:E8:15:CF:63:EC:8F:3E:F1:B3
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/FGXb5UFgQasbuvPoFc9j7I8-8bM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:55:2a:60:97:63:e4:7d:fa:24:96:08:0d:d1:73:bb:ef:98:
         c9:ff:6b:0e:7c:28:4e:53:d1:0d:b3:48:13:03:00:d1:8c:55:
         32:f4:40:17:ce:4e:52:c5:6d:c5:f2:e1:ae:ce:48:48:7e:61:
         79:6d:64:07:0a:be:cd:69:f2:4c:1b:fe:c3:3e:14:37:1a:2a:
         79:29:c7:4c:54:95:15:c5:88:55:cd:11:df:cd:50:37:3c:6a:
         79:b0:af:0e:df:4a:f6:a3:ed:5d:5c:d6:7d:af:40:70:79:fb:
         fa:03:89:b7:5f:d5:fa:c1:5d:18:27:0c:78:58:dd:3e:c1:94:
         73:9c:a9:0d:6e:4b:67:90:63:05:2c:d1:10:4f:34:6a:5a:cc:
         48:2f:c7:0c:c0:d6:5b:be:7d:c6:b9:0c:dd:f3:6d:ab:45:1d:
         15:08:d3:cc:6a:ab:67:6e:9a:a4:d0:0a:71:f7:20:28:ac:53:
         42:c7:fd:db:ea:eb:95:6b:55:d1:d2:1e:86:d4:4c:79:07:ad:
         30:c1:64:64:47:b8:cf:d7:86:5c:ac:32:8c:55:8d:f8:90:bb:
         61:01:2d:1f:25:d6:28:6f:3f:40:54:fa:7b:1e:06:5e:05:01:
         0d:85:85:e6:68:66:44:0f:9b:6b:9d:f5:ff:9d:6a:27:05:c0:
         49:b5:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:56 2026 by rpki-client