This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/h6ck89pBRZW2Azkh6d87hYU1R-g.roa
File:                     h6ck89pBRZW2Azkh6d87hYU1R-g.roa (raw, json)
Hash identifier:          GxMc65IEfvPrOUFgFtXCma4xxuD9sPQHRkYXllnu62o=
Subject key identifier:   87:A7:24:F3:DA:41:45:95:B6:03:39:21:E9:DF:3B:85:85:35:47:E8
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       41
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/h6ck89pBRZW2Azkh6d87hYU1R-g.roa
Signing time:             Sun 01 Feb 2026 01:33:35 +0000
ROA not before:           Sun 01 Feb 2026 01:33:35 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        157.8.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Feb 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Feb  1 01:33:35 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=87A724F3DA414595B6033921E9DF3B85853547E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:d4:7c:1f:00:7f:58:8a:49:c9:a3:2e:31:
                    81:05:5d:e3:6f:dc:69:06:21:b6:67:95:23:d4:fe:
                    01:0f:8a:0b:0b:7d:45:2f:9d:c9:93:31:9a:49:05:
                    e9:d2:71:4c:57:ae:ea:cc:3d:24:0d:be:7a:f0:15:
                    1b:fb:74:21:26:a4:62:c6:54:8f:8e:8d:6e:9e:36:
                    e5:a5:65:af:ad:b1:04:36:da:e0:c1:5a:ff:4d:05:
                    86:45:69:40:78:22:b8:2e:15:ff:93:90:c7:89:57:
                    a4:23:28:70:1c:32:44:f3:41:5a:32:6b:e8:39:b3:
                    59:bc:1f:41:9f:56:45:dd:26:0e:83:31:fe:fc:07:
                    cf:5c:bb:db:f3:03:0e:e2:de:46:ca:68:09:ee:b2:
                    78:a7:34:47:17:a7:55:d1:00:cb:74:4b:42:57:73:
                    f9:f9:0f:42:ae:ce:51:43:20:e6:75:4e:b1:ff:10:
                    72:9e:54:63:62:97:80:90:a9:04:1b:27:f7:8c:43:
                    88:8c:ff:8c:99:1c:21:b6:63:a0:9c:01:19:2d:4d:
                    7e:6a:e3:c5:80:6a:34:e3:e2:03:20:20:a5:be:88:
                    94:b2:81:fe:1b:2e:fb:72:a0:64:be:3e:79:c3:9c:
                    51:e8:7d:25:07:57:01:2b:03:c6:46:20:08:d4:6b:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A7:24:F3:DA:41:45:95:B6:03:39:21:E9:DF:3B:85:85:35:47:E8
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/h6ck89pBRZW2Azkh6d87hYU1R-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:23:48:aa:aa:a4:81:d2:8d:8e:b9:38:b3:fb:33:a0:2c:d6:
         ca:ca:e7:e1:8d:42:bc:0e:2f:0e:d1:6d:e6:2c:c1:c1:40:1a:
         21:59:26:20:a1:3d:12:db:18:73:1c:ed:22:26:5f:e5:75:8c:
         b5:38:24:74:39:11:17:e3:c2:6a:6a:da:0c:89:da:7d:14:1c:
         8f:8f:02:d9:3d:0b:8d:5e:ea:c9:2e:1c:cc:f9:f0:d0:16:5b:
         94:9e:f9:ad:db:78:a5:ae:a8:0c:2f:19:51:62:d1:07:ed:a5:
         43:f4:b8:9b:d9:44:37:fc:27:ab:c1:f2:38:03:2d:4e:08:32:
         70:d8:2e:9e:61:63:ea:9e:0b:c8:5f:c9:a8:95:3e:2a:cd:6f:
         ee:eb:5f:56:3b:51:a2:be:39:4f:b5:fd:ab:db:b5:5c:84:ff:
         37:fd:ab:9b:9b:3b:2a:1d:0a:1c:66:7b:91:aa:0b:f1:60:ec:
         77:21:de:51:ba:e8:1d:9a:e6:5a:19:ed:c8:03:df:32:0c:21:
         58:12:b4:1c:c7:c1:46:61:e6:b8:6c:73:1e:0d:e4:13:8a:08:
         f6:4c:a1:e8:c9:8e:60:dc:1e:de:14:cd:1f:58:44:be:3d:3c:
         85:f5:7a:35:b8:b5:d0:98:92:ea:06:7b:01:0c:41:89:73:63:
         2e:7c:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 16:46:00 2026 by rpki-client