This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/jpY6RIqGYOvxtjVVFZ1w23Lrsm4.roa
File:                     jpY6RIqGYOvxtjVVFZ1w23Lrsm4.roa (raw, json)
Hash identifier:          OztdDEucCKIpIVOB8NNpBx3UHO16q+WlsR1URPv16U4=
Subject key identifier:   8E:96:3A:44:8A:86:60:EB:F1:B6:35:55:15:9D:70:DB:72:EB:B2:6E
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       ED
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/jpY6RIqGYOvxtjVVFZ1w23Lrsm4.roa
Signing time:             Thu 01 Jan 2026 01:30:39 +0000
ROA not before:           Thu 01 Jan 2026 01:30:39 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        14.192.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Jan  1 01:30:39 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=8E963A448A8660EBF1B63555159D70DB72EBB26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:4d:ab:4e:3c:0a:28:20:34:b1:af:a6:f3:
                    78:33:51:b7:d4:03:c5:f4:d4:34:25:59:13:cd:6b:
                    16:ad:0a:3e:cb:b1:65:aa:99:2e:11:ec:32:61:38:
                    38:1f:e8:48:db:e4:da:78:75:47:e1:c0:75:74:cd:
                    bd:5a:62:03:53:cc:82:27:bf:49:86:b8:57:4e:69:
                    49:37:ce:fa:13:b0:f3:c4:c2:e3:fb:61:40:fa:26:
                    3b:45:14:c3:5b:c8:b4:8f:2e:8d:59:68:02:c3:62:
                    d4:15:87:06:35:40:4f:53:88:f0:8a:ad:83:e0:dd:
                    d4:a1:9f:05:a6:70:08:d6:83:47:87:fe:e9:37:3c:
                    6b:46:f8:f7:b5:d7:11:40:07:78:3b:a1:79:77:e7:
                    e3:63:43:75:39:8e:5c:d3:8a:4d:77:90:d6:4e:3e:
                    89:32:9f:16:b6:3c:bb:b5:d8:a4:dd:c7:c3:27:42:
                    fd:f1:54:a9:8f:f3:ec:04:90:22:c8:37:1e:cd:27:
                    54:cd:c9:6e:c8:7a:a8:c5:d3:45:0a:8e:d7:17:0a:
                    66:61:b7:2e:d4:16:c7:e8:88:70:b4:22:ee:b6:35:
                    8d:51:7c:b0:97:f6:be:51:30:f8:03:8d:00:02:8d:
                    69:f6:f3:53:3f:a5:fd:e6:36:6a:9e:6d:09:a9:2b:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:3A:44:8A:86:60:EB:F1:B6:35:55:15:9D:70:DB:72:EB:B2:6E
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/jpY6RIqGYOvxtjVVFZ1w23Lrsm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:54:23:51:6a:98:ab:00:c1:79:1d:5c:be:22:61:2e:ce:
         54:01:14:cb:61:a8:d5:9c:e2:b6:a4:cf:fc:f3:3d:e9:72:a0:
         e9:ff:6e:6f:a2:a0:b1:ae:93:18:17:7b:4e:7e:70:b0:72:09:
         ae:eb:59:83:b7:07:60:09:0e:60:19:f7:54:bb:55:be:12:3c:
         86:58:b5:18:66:75:13:68:e4:68:cd:e0:4a:10:a3:39:27:97:
         57:e8:07:32:44:45:55:a5:ef:6b:5f:f9:ef:7a:a7:5b:f4:47:
         6b:3e:16:31:dd:66:73:6a:a9:96:13:ed:e1:52:81:ad:ad:7f:
         b8:9c:ca:7b:69:f7:3f:9b:eb:11:48:45:09:fe:cb:c0:7e:16:
         e5:53:7d:e6:c1:3d:b9:9e:e3:71:08:9c:c5:a3:1b:d6:0b:37:
         08:c8:08:7a:2c:be:03:7d:f0:75:84:9e:aa:fb:0f:7b:72:60:
         09:61:87:eb:61:62:f0:fb:f8:98:e5:97:3c:b1:a3:c2:1e:77:
         4d:b3:64:b0:75:d6:15:20:dc:71:48:bd:f7:4e:c9:b4:a1:d0:
         0f:da:05:80:dc:77:9e:8f:ee:bd:9e:eb:15:e4:d6:db:b0:fa:
         90:f5:08:c3:0a:67:b6:6e:f8:9b:0d:22:5f:38:8d:96:a9:e3:
         46:ff:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:58 2026 by rpki-client