This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/GnHVQAAGaxtJ4vDIhl4pN75Ixgg.roa
File:                     GnHVQAAGaxtJ4vDIhl4pN75Ixgg.roa (raw, json)
Hash identifier:          arLfzbZrCkFiIqK86E3hRDt8zKntgybAduaS6FgjP+8=
Subject key identifier:   1A:71:D5:40:00:06:6B:1B:49:E2:F0:C8:86:5E:29:37:BE:48:C6:08
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       4A
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/GnHVQAAGaxtJ4vDIhl4pN75Ixgg.roa
Signing time:             Thu 01 Jan 2026 01:37:51 +0000
ROA not before:           Thu 01 Jan 2026 01:37:51 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     131929
IP address blocks:        219.100.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 17:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Jan  1 01:37:51 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=1A71D54000066B1B49E2F0C8865E2937BE48C608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:99:63:81:7f:5d:70:4e:cc:a6:88:14:e7:
                    4c:17:b1:ff:d6:39:f9:ec:46:12:46:66:c9:ad:aa:
                    83:99:8a:e5:67:d7:33:67:b5:07:a9:2f:48:2a:07:
                    a7:4a:7a:dd:0f:a3:30:90:f7:27:ec:fe:62:27:da:
                    d6:d2:e3:3d:b1:d2:b2:7a:85:8e:8d:93:62:35:86:
                    66:fe:5a:f0:31:40:30:d8:84:f3:5c:b1:0d:40:2b:
                    a0:8b:b8:38:ce:28:9f:48:59:02:83:a0:63:f9:8f:
                    c7:0d:30:b8:95:0c:a5:08:08:8a:6b:2f:c3:6d:a1:
                    e2:e8:d6:78:c9:bb:91:8f:63:c8:36:8b:9e:ac:87:
                    79:bd:22:ca:30:0a:51:fd:b2:8b:c1:5b:c8:88:29:
                    4f:33:12:e7:a5:5b:e6:ee:6d:9b:72:63:1d:1f:f0:
                    16:d9:90:b1:ea:85:c9:5c:93:20:fb:e5:1a:3a:f4:
                    5f:14:31:3f:88:b3:62:dc:ab:77:a6:f7:95:6f:3a:
                    ea:f4:72:ba:90:ed:3f:cc:b5:0a:61:6b:d7:05:b2:
                    33:2d:53:68:0e:9c:ba:0b:52:9e:8d:c1:0f:1b:88:
                    54:08:03:f8:0a:64:f4:79:a1:d1:f8:bb:c7:34:df:
                    6e:4d:dc:ae:40:0e:a3:36:17:d8:26:62:2d:f3:72:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:71:D5:40:00:06:6B:1B:49:E2:F0:C8:86:5E:29:37:BE:48:C6:08
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/GnHVQAAGaxtJ4vDIhl4pN75Ixgg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:b2:42:3f:15:76:17:14:19:52:75:3a:d6:f6:26:5c:6e:
         76:8b:a8:44:26:a7:4d:09:14:a8:96:bc:a7:22:0a:3b:b4:bb:
         ea:4c:de:77:2e:ed:27:fa:47:23:96:89:89:a1:14:96:7d:47:
         e6:c9:3c:ea:0d:56:28:63:fc:6c:cd:25:9a:41:00:18:d0:cc:
         6f:3b:a7:c0:ea:4b:cd:b0:60:c5:76:80:77:2b:5b:ae:ed:be:
         a6:8c:ee:18:ce:1b:74:b1:7e:d5:72:65:08:05:1b:45:04:8a:
         f0:63:47:87:99:3f:f4:5f:ce:38:0d:b8:86:97:3f:93:23:6b:
         4e:4d:62:d5:f4:49:b8:d5:84:f8:58:69:01:a9:78:91:ec:e8:
         91:32:bf:79:28:8d:f5:93:4c:01:a2:98:53:67:63:8b:7c:16:
         05:6b:e9:6a:28:4a:2f:7f:46:9f:ba:b4:69:9b:d9:fb:bb:a4:
         dc:43:48:2e:66:23:e6:d2:1b:47:72:cc:3d:ae:4a:02:49:38:
         61:40:13:44:26:e2:af:14:40:3a:ae:cc:c8:ee:8b:0f:45:cc:
         ca:ed:e2:5a:8a:c0:60:6d:9b:44:99:6e:3b:c5:86:ff:24:7d:
         2c:55:e0:f4:7e:c9:80:0a:c1:fb:3f:48:68:36:e7:18:4c:87:
         e1:92:e1:a6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Mzgw
NjdDMjVCQ0E3RDEzODVCRDM2QzQ4Mjg1OEY4MzBCNUE2RTNBMB4XDTI2MDEwMTAx
Mzc1MVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMUE3MUQ1NDAwMDA2NkIx
QjQ5RTJGMEM4ODY1RTI5MzdCRTQ4QzYwODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMtUmWOBf11wTsymiBTnTBex/9Y5+exGEkZmya2qg5mK5WfXM2e1
B6kvSCoHp0p63Q+jMJD3J+z+Yifa1tLjPbHSsnqFjo2TYjWGZv5a8DFAMNiE81yx
DUAroIu4OM4on0hZAoOgY/mPxw0wuJUMpQgIimsvw22h4ujWeMm7kY9jyDaLnqyH
eb0iyjAKUf2yi8FbyIgpTzMS56Vb5u5tm3JjHR/wFtmQseqFyVyTIPvlGjr0XxQx
P4izYtyrd6b3lW866vRyupDtP8y1CmFr1wWyMy1TaA6cugtSno3BDxuIVAgD+Apk
9Hmh0fi7xzTfbk3crkAOozYX2CZiLfNyySECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQacdVAAAZrG0ni8MiGXik3vkjGCDAfBgNVHSMEGDAWgBSTgGfCW8p9E4W9NsSC
hY+DC1puOjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjIvazRCbndsdktmUk9GdlRiRWdvV1Bnd3RhYmpvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvazRCbndsdktmUk9GdlRiRWdvV1Bn
d3RhYmpvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYyL0duSFZRQUFHYXh0SjR2RElobDRwTjc1SXhnZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALbZPgwDQYJKoZIhvcNAQELBQADggEBAGUNskI/FXYXFBlSdTrW9iZc
bnaLqEQmp00JFKiWvKciCju0u+pM3ncu7Sf6RyOWiYmhFJZ9R+bJPOoNVihj/GzN
JZpBABjQzG87p8DqS82wYMV2gHcrW67tvqaM7hjOG3SxftVyZQgFG0UEivBjR4eZ
P/RfzjgNuIaXP5Mja05NYtX0SbjVhPhYaQGpeJHs6JEyv3kojfWTTAGimFNnY4t8
FgVr6WooSi9/Rp+6tGmb2fu7pNxDSC5mI+bSG0dyzD2uSgJJOGFAE0Qm4q8UQDqu
zMjuiw9FzMrt4lqKwGBtm0SZbjvFhv8kfSxV4PR+yYAKwfs/SGg25xhMh+GS4aY=
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:03:12 2026 by rpki-client