This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/gplTkwTrYeNXPKL7ZUrMT4ThcTw.roa
File:                     gplTkwTrYeNXPKL7ZUrMT4ThcTw.roa (raw, json)
Hash identifier:          cV1chGyXibXDXb1io3DvdPnkxrJfnwZ4UnMmkUIx56I=
Subject key identifier:   82:99:53:93:04:EB:61:E3:57:3C:A2:FB:65:4A:CC:4F:84:E1:71:3C
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       E8
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/gplTkwTrYeNXPKL7ZUrMT4ThcTw.roa
Signing time:             Thu 01 Jan 2026 01:30:36 +0000
ROA not before:           Thu 01 Jan 2026 01:30:36 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        112.137.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Jan  1 01:30:36 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=8299539304EB61E3573CA2FB654ACC4F84E1713C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:63:0d:3c:84:1b:a1:eb:c2:5d:f2:43:2d:
                    54:88:6d:fe:1d:8e:fa:44:cf:a3:7b:a9:c4:8f:80:
                    93:de:0c:06:10:8d:ca:04:9b:22:fc:56:ce:12:51:
                    4f:1f:f4:0a:ff:1c:26:0a:db:72:28:a7:e4:aa:84:
                    90:a1:d8:ef:f1:4e:2e:c2:1e:ca:cc:41:f3:3b:14:
                    67:30:49:6c:28:8e:df:87:a9:6d:f1:d0:12:50:df:
                    ef:54:bf:f9:5a:ed:7b:7d:67:f1:0e:90:c9:5e:e3:
                    0b:99:ed:d8:18:cb:b3:57:ed:38:d8:58:60:80:40:
                    ac:a2:15:14:8c:a6:c1:1e:ce:3c:12:1d:ed:d6:fb:
                    ce:a4:5e:08:58:e9:6c:2d:b7:7a:8c:83:bc:3e:4e:
                    a8:d3:ab:25:7e:fc:3b:9c:11:af:18:f4:d7:75:12:
                    04:5b:99:63:19:a6:65:78:3d:e7:35:96:4f:54:a3:
                    40:35:76:8e:b4:10:1b:a7:11:35:8e:3a:5a:a1:0f:
                    66:12:d1:84:2c:d1:2a:bb:76:a2:e4:ff:5a:80:d8:
                    05:11:f1:b3:d7:38:69:a8:bf:cc:f9:fd:8c:fa:6c:
                    bd:75:17:66:96:ba:1e:f9:bd:3b:76:89:9f:26:29:
                    2c:bc:7d:e7:74:9c:fd:ff:7a:c4:72:8f:97:dd:e2:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:99:53:93:04:EB:61:E3:57:3C:A2:FB:65:4A:CC:4F:84:E1:71:3C
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/gplTkwTrYeNXPKL7ZUrMT4ThcTw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:7e:e9:bd:87:b6:61:b1:49:f9:40:69:3a:16:79:89:95:
         92:b2:ec:2b:4c:91:a9:45:2e:da:3b:7a:03:a9:6b:15:8a:61:
         23:83:e6:bb:e7:83:67:43:b4:cc:a7:df:d9:20:3d:0e:ff:a8:
         0c:cf:2b:41:8e:fb:e3:f5:bf:5c:a6:bd:00:41:36:a8:b2:42:
         d8:1e:0f:b7:26:2d:fe:7c:dd:e5:7d:01:74:60:43:f4:f5:35:
         d5:7b:4d:42:20:08:31:e5:55:41:8e:f1:d9:bd:cd:5b:33:8d:
         19:ac:15:7c:c4:bd:52:09:c5:11:e8:81:48:1b:5c:8d:99:b3:
         ac:59:69:85:bd:d6:66:73:9c:97:ad:8a:a7:00:57:a4:e4:a9:
         7d:fe:ec:df:35:42:44:17:c9:7f:cc:0a:a1:99:ef:0a:13:4d:
         ea:3a:f2:08:35:0c:66:1d:04:11:7f:5c:60:68:a9:29:1c:e5:
         19:8b:16:f1:a8:5a:2c:73:a9:1a:e1:7d:cc:15:e8:d4:4b:40:
         c3:b8:e7:52:33:3d:23:98:25:65:a1:52:d5:8e:16:eb:08:a7:
         69:52:6d:1d:7c:41:2d:c9:ae:fd:2f:2d:8c:93:bb:25:a2:ac:
         00:92:70:51:84:19:82:a9:9c:96:a5:67:89:09:cc:63:2d:5e:
         79:3e:6e:6f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz
MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAxMDEw
MTMwMzZaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyOTk1MzkzMDRFQjYx
RTM1NzNDQTJGQjY1NEFDQzRGODRFMTcxM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoBmMNPIQboevCXfJDLVSIbf4djvpEz6N7qcSPgJPeDAYQjcoE
myL8Vs4SUU8f9Ar/HCYK23Iop+SqhJCh2O/xTi7CHsrMQfM7FGcwSWwojt+HqW3x
0BJQ3+9Uv/la7Xt9Z/EOkMle4wuZ7dgYy7NX7TjYWGCAQKyiFRSMpsEezjwSHe3W
+86kXghY6Wwtt3qMg7w+TqjTqyV+/DucEa8Y9Nd1EgRbmWMZpmV4Pec1lk9Uo0A1
do60EBunETWOOlqhD2YS0YQs0Sq7dqLk/1qA2AUR8bPXOGmov8z5/Yz6bL11F2aW
uh75vTt2iZ8mKSy8fed0nP3/esRyj5fd4mILAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgplTkwTrYeNXPKL7ZUrMT4ThcTwwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA
yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP
RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTczL2dwbFRrd1RyWWVOWFBLTDdaVXJNVDRUaGNUdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANwiTgwDQYJKoZIhvcNAQELBQADggEBAITCfum9h7ZhsUn5QGk6FnmJlZKy
7CtMkalFLto7egOpaxWKYSOD5rvng2dDtMyn39kgPQ7/qAzPK0GO++P1v1ymvQBB
NqiyQtgeD7cmLf583eV9AXRgQ/T1NdV7TUIgCDHlVUGO8dm9zVszjRmsFXzEvVIJ
xRHogUgbXI2Zs6xZaYW91mZznJetiqcAV6TkqX3+7N81QkQXyX/MCqGZ7woTTeo6
8gg1DGYdBBF/XGBoqSkc5RmLFvGoWixzqRrhfcwV6NRLQMO451IzPSOYJWWhUtWO
FusIp2lSbR18QS3Jrv0vLYyTuyWirACScFGEGYKpnJalZ4kJzGMtXnk+bm8=
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:56 2026 by rpki-client