This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/l70ZhLxaPTgksEIBI-fcHjMV-Ps.roa
File:                     l70ZhLxaPTgksEIBI-fcHjMV-Ps.roa (raw, json)
Hash identifier:          3oeZuipPM4jsNG/h2dn2CHZznXCy+CMGLjg06YtQMuA=
Subject key identifier:   97:BD:19:84:BC:5A:3D:38:24:B0:42:01:23:E7:DC:1E:33:15:F8:FB
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       EB
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/l70ZhLxaPTgksEIBI-fcHjMV-Ps.roa
Signing time:             Thu 01 Jan 2026 01:30:37 +0000
ROA not before:           Thu 01 Jan 2026 01:30:37 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        103.2.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Jan  1 01:30:37 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=97BD1984BC5A3D3824B0420123E7DC1E3315F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:5c:57:32:d4:99:84:4d:68:7c:17:b2:03:
                    b3:50:d6:08:3e:c8:cf:80:e3:c5:59:ae:1c:81:35:
                    e7:6e:04:7d:10:fc:86:7e:35:9b:8f:b0:31:e2:41:
                    dc:89:7f:d2:7f:73:2d:d0:c5:e7:32:b7:79:58:e6:
                    1b:f9:a4:d0:be:19:59:10:50:e4:0b:e5:53:bf:6a:
                    fb:9e:d8:40:21:47:ac:5c:88:65:a6:71:0d:fa:0d:
                    3d:b5:3f:ed:47:66:63:5d:1f:75:d9:d9:9d:d7:6d:
                    3a:32:8f:5b:63:ad:d4:62:55:9a:9d:df:c8:e7:f1:
                    8e:8d:51:40:7d:90:92:6d:54:d3:a3:4d:2e:f6:56:
                    c5:aa:e3:09:3a:05:f1:6d:9a:7b:de:35:1a:8f:91:
                    3a:53:0a:1c:a3:82:57:1b:31:0a:e2:b9:87:ec:a6:
                    5e:d9:38:62:35:74:7b:61:76:09:c1:78:84:03:c3:
                    45:71:66:35:a3:19:49:a7:36:5b:17:78:18:53:de:
                    19:84:98:61:26:a6:7e:88:90:10:9b:35:7a:4f:46:
                    f3:7f:84:c0:32:df:3d:85:c1:d1:b5:8a:f2:4a:54:
                    dc:8e:c2:06:5b:ea:bd:ee:57:01:14:a0:44:2a:43:
                    11:56:4a:b0:57:7d:b2:bf:11:bc:9b:b7:42:7e:59:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:19:84:BC:5A:3D:38:24:B0:42:01:23:E7:DC:1E:33:15:F8:FB
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/l70ZhLxaPTgksEIBI-fcHjMV-Ps.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:60:4b:63:ef:d9:80:49:30:2c:25:8d:54:55:b6:8c:54:e1:
         f3:16:00:31:e4:e1:e8:48:f9:8c:c9:8a:8f:b5:c9:73:6f:0e:
         2d:de:90:c2:2c:2e:76:09:92:9d:45:c7:ab:b8:b8:eb:c2:2b:
         c7:8d:9e:7f:83:5a:01:f6:cd:5f:71:72:f7:b2:25:ec:6d:1c:
         03:ee:a2:dd:5f:7f:99:77:ab:6d:eb:37:36:9e:db:7c:81:03:
         2b:1b:14:14:b6:ba:48:5e:51:05:f3:90:0b:94:40:36:fb:ca:
         12:6d:6f:3c:81:27:3c:9e:d5:d9:3e:62:8f:35:59:04:a2:10:
         e7:4a:d3:71:77:95:2b:7c:b3:4a:a3:61:33:7c:29:b5:c5:00:
         19:3d:55:98:8b:cf:9e:00:be:6c:60:3f:59:9e:8b:3e:66:5e:
         92:ea:30:d2:45:fa:11:da:ec:53:16:af:ae:ce:27:48:df:fd:
         bd:d5:3a:a7:0a:c5:a4:35:97:30:df:81:91:b9:cb:39:ea:81:
         fa:4d:c0:25:34:22:12:b5:57:fa:c0:35:6b:97:e2:27:5a:31:
         ce:dd:42:1d:ab:32:1a:69:d2:e4:3f:08:cb:55:fe:81:74:43:
         fa:81:03:71:c9:24:f1:ed:cf:f5:5a:16:38:a4:58:54:cf:22:
         f4:16:67:d3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz
MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAxMDEw
MTMwMzdaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk3QkQxOTg0QkM1QTNE
MzgyNEIwNDIwMTIzRTdEQzFFMzMxNUY4RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU2lxXMtSZhE1ofBeyA7NQ1gg+yM+A48VZrhyBNeduBH0Q/IZ+
NZuPsDHiQdyJf9J/cy3Qxecyt3lY5hv5pNC+GVkQUOQL5VO/avue2EAhR6xciGWm
cQ36DT21P+1HZmNdH3XZ2Z3XbToyj1tjrdRiVZqd38jn8Y6NUUB9kJJtVNOjTS72
VsWq4wk6BfFtmnveNRqPkTpTChyjglcbMQriuYfspl7ZOGI1dHthdgnBeIQDw0Vx
ZjWjGUmnNlsXeBhT3hmEmGEmpn6IkBCbNXpPRvN/hMAy3z2FwdG1ivJKVNyOwgZb
6r3uVwEUoEQqQxFWSrBXfbK/Ebybt0J+WdpTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUl70ZhLxaPTgksEIBI+fcHjMV+PswHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA
yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP
RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTczL2w3MFpoTHhhUFRna3NFSUJJLWZjSGpNVi1Qcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnAhQwDQYJKoZIhvcNAQELBQADggEBALRgS2Pv2YBJMCwljVRVtoxU4fMW
ADHk4ehI+YzJio+1yXNvDi3ekMIsLnYJkp1Fx6u4uOvCK8eNnn+DWgH2zV9xcvey
JextHAPuot1ff5l3q23rNzae23yBAysbFBS2ukheUQXzkAuUQDb7yhJtbzyBJzye
1dk+Yo81WQSiEOdK03F3lSt8s0qjYTN8KbXFABk9VZiLz54AvmxgP1meiz5mXpLq
MNJF+hHa7FMWr67OJ0jf/b3VOqcKxaQ1lzDfgZG5yznqgfpNwCU0IhK1V/rANWuX
4idaMc7dQh2rMhpp0uQ/CMtV/oF0Q/qBA3HJJPHtz/VaFjikWFTPIvQWZ9M=
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:51:26 2026 by rpki-client