This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/w-0dt6LJZLs74tN3VRfZWxZ0E5M.roa
File:                     w-0dt6LJZLs74tN3VRfZWxZ0E5M.roa (raw, json)
Hash identifier:          uOKsNkDG0Ih9AU+jzh0qmasyGN4qRKYE0O9HmXtVDH4=
Subject key identifier:   C3:ED:1D:B7:A2:C9:64:BB:3B:E2:D3:77:55:17:D9:5B:16:74:13:93
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       E5
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/w-0dt6LJZLs74tN3VRfZWxZ0E5M.roa
Signing time:             Thu 01 Jan 2026 01:30:34 +0000
ROA not before:           Thu 01 Jan 2026 01:30:34 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        202.124.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Jan  1 01:30:34 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=C3ED1DB7A2C964BB3BE2D3775517D95B16741393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:42:6e:82:34:3a:75:bc:ae:73:34:42:74:
                    a3:6f:05:de:cf:a8:7a:e6:4c:76:37:a9:0d:c2:3f:
                    e2:c4:c7:e4:77:3b:9a:70:48:1d:23:3f:bb:ef:6a:
                    34:9a:a1:fb:31:a0:04:4f:d5:55:75:ee:0e:ab:42:
                    9d:46:da:6d:86:5b:ca:33:d5:7b:f4:94:b3:32:1d:
                    c4:80:35:48:4f:06:40:1c:55:aa:0e:55:e9:b9:2a:
                    86:85:24:53:36:82:26:de:db:65:eb:2a:e4:44:49:
                    3c:32:9f:ee:28:25:57:37:08:75:41:12:1e:47:b6:
                    fe:ce:e9:52:e4:23:d0:78:d7:98:b0:c8:3c:8a:d6:
                    92:8d:33:49:4c:27:5d:78:cf:cf:b6:fb:73:a3:f4:
                    ce:98:1d:9c:ab:e7:d7:bf:54:a0:88:a7:90:83:5e:
                    38:96:7b:d3:dd:61:3b:ed:4a:69:23:5a:2e:f3:3e:
                    84:84:d1:c0:88:0a:39:c7:9b:ec:b6:37:45:87:13:
                    d3:ef:6c:1e:c6:f8:f3:7f:fe:3f:1d:6d:af:ef:0f:
                    6a:ca:98:b7:65:2e:d5:8e:01:cd:dd:1a:fb:d9:31:
                    61:f2:1c:34:c1:2b:b0:5f:68:2e:a2:10:e1:3c:68:
                    44:95:5b:df:98:c3:7c:6f:49:0f:04:ae:de:58:a3:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:1D:B7:A2:C9:64:BB:3B:E2:D3:77:55:17:D9:5B:16:74:13:93
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/w-0dt6LJZLs74tN3VRfZWxZ0E5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:35:79:04:a2:3a:47:16:7e:da:85:ac:05:f6:94:10:d3:6d:
         0a:7f:9d:13:38:67:55:b9:ca:ce:34:3b:4c:da:01:51:68:68:
         1f:fd:fa:e0:82:35:f7:e8:c0:e1:d2:f1:46:77:63:9a:f9:db:
         ad:78:21:74:dc:4c:c7:c9:5b:14:5e:a9:c1:6a:53:a8:f7:28:
         8d:ac:66:07:e5:06:69:f2:d0:99:a3:99:78:8a:10:71:29:86:
         3e:74:3b:e6:09:1c:a4:37:2e:2d:3c:a1:a6:9b:54:3d:3f:17:
         c6:f0:47:e5:3b:c8:17:50:af:fd:72:b6:2a:e9:ea:71:c9:b7:
         87:e6:3a:6f:bc:0f:fd:bf:01:5f:6d:f3:cb:97:cf:be:9e:c7:
         83:6a:fd:c4:4d:07:28:6a:6c:d6:6f:50:a3:37:3e:78:cd:01:
         a9:56:f9:21:b6:32:2d:27:ab:80:a0:3d:1a:3e:49:73:7d:60:
         d4:3e:1b:c2:28:05:68:2b:db:f2:5e:5f:8c:f6:50:56:f4:30:
         ea:97:69:35:f0:e7:c5:e7:17:05:3c:a6:02:b8:2e:79:ca:d7:
         f6:c2:3e:09:b2:b2:9e:3e:f3:07:82:f7:44:1d:07:61:cd:d7:
         82:a2:64:38:5c:cb:3a:1d:d7:71:1f:57:fd:75:b6:29:46:22:
         82:b4:02:ae
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz
MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAxMDEw
MTMwMzRaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMzRUQxREI3QTJDOTY0
QkIzQkUyRDM3NzU1MTdEOTVCMTY3NDEzOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCZkJugjQ6dbyuczRCdKNvBd7PqHrmTHY3qQ3CP+LEx+R3O5pw
SB0jP7vvajSaofsxoARP1VV17g6rQp1G2m2GW8oz1Xv0lLMyHcSANUhPBkAcVaoO
Vem5KoaFJFM2gibe22XrKuRESTwyn+4oJVc3CHVBEh5Htv7O6VLkI9B415iwyDyK
1pKNM0lMJ114z8+2+3Oj9M6YHZyr59e/VKCIp5CDXjiWe9PdYTvtSmkjWi7zPoSE
0cCICjnHm+y2N0WHE9PvbB7G+PN//j8dba/vD2rKmLdlLtWOAc3dGvvZMWHyHDTB
K7BfaC6iEOE8aESVW9+Yw3xvSQ8Ert5Yo3eVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUw+0dt6LJZLs74tN3VRfZWxZ0E5MwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA
yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP
RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTczL3ctMGR0NkxKWkxzNzR0TjNWUmZaV3haMEU1TS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKfNAwDQYJKoZIhvcNAQELBQADggEBAEo1eQSiOkcWftqFrAX2lBDTbQp/
nRM4Z1W5ys40O0zaAVFoaB/9+uCCNffowOHS8UZ3Y5r52614IXTcTMfJWxReqcFq
U6j3KI2sZgflBmny0JmjmXiKEHEphj50O+YJHKQ3Li08oaabVD0/F8bwR+U7yBdQ
r/1ytirp6nHJt4fmOm+8D/2/AV9t88uXz76ex4Nq/cRNByhqbNZvUKM3PnjNAalW
+SG2Mi0nq4CgPRo+SXN9YNQ+G8IoBWgr2/JeX4z2UFb0MOqXaTXw58XnFwU8pgK4
LnnK1/bCPgmysp4+8weC90QdB2HN14KiZDhcyzod13EfV/11tilGIoK0Aq4=
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:55 2026 by rpki-client