This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/QMcySASfBKmW7CDfsujwOlD51Ig.roa
File:                     QMcySASfBKmW7CDfsujwOlD51Ig.roa (raw, json)
Hash identifier:          zuMM7J8Q0BgZov9jKc0iONPfpBf/RYE2K2TUnemSZG0=
Subject key identifier:   40:C7:32:48:04:9F:04:A9:96:EC:20:DF:B2:E8:F0:3A:50:F9:D4:88
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       67
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/QMcySASfBKmW7CDfsujwOlD51Ig.roa
Signing time:             Thu 01 Jan 2026 01:31:21 +0000
ROA not before:           Thu 01 Jan 2026 01:31:21 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     63774
IP address blocks:        202.226.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: Jan  1 01:31:21 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=40C73248049F04A996EC20DFB2E8F03A50F9D488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:ee:9f:35:57:7c:bc:13:f3:e5:05:e9:56:
                    fd:75:c1:cb:e4:aa:88:7c:e4:d1:cc:77:a3:67:ac:
                    77:7a:0d:21:0f:99:be:92:b0:20:c1:af:70:9e:0f:
                    7b:44:08:14:e1:77:90:43:4a:c1:b4:2a:c3:cb:33:
                    e7:46:9b:a8:99:e7:59:da:38:7b:45:b1:92:be:5d:
                    46:bc:a0:ea:f1:c9:86:7d:a8:6f:d1:72:c1:94:3b:
                    db:b4:60:02:fa:3e:eb:6c:fb:ef:b6:79:e7:d8:7d:
                    1c:d5:de:4c:b4:8b:f9:57:96:2b:c7:5a:2b:eb:49:
                    da:3e:92:89:62:3c:58:8e:43:9f:e2:94:61:3c:91:
                    e6:02:e7:25:98:36:19:54:f6:cb:00:a1:69:ce:2a:
                    48:de:04:e3:3d:6e:45:cf:f9:16:1e:de:f2:9e:69:
                    0e:2a:65:75:6d:86:f1:c4:f2:3f:af:aa:5e:ef:92:
                    2c:34:b3:98:90:b1:df:67:65:15:db:af:53:1e:26:
                    f2:83:29:03:fe:b1:fc:94:2f:37:db:9e:84:d3:2c:
                    ca:a3:66:b3:56:71:1b:47:3a:be:5e:4d:06:34:eb:
                    fe:ec:8a:a6:49:1e:e9:7f:1b:f6:e3:45:87:08:01:
                    85:15:5a:da:12:65:47:9f:37:ec:25:46:5a:66:1c:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C7:32:48:04:9F:04:A9:96:EC:20:DF:B2:E8:F0:3A:50:F9:D4:88
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/QMcySASfBKmW7CDfsujwOlD51Ig.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:ae:31:73:0e:a8:41:31:a7:24:e1:03:21:04:1e:5e:55:
         9e:34:12:dc:4a:ac:51:40:dc:5e:8b:a4:d2:5f:43:50:67:ca:
         d6:5f:dd:13:0f:5d:86:cd:19:33:f3:1b:46:3b:d6:90:69:0b:
         86:a2:c7:87:00:33:18:34:86:a1:07:ce:b8:c5:bc:78:32:68:
         7b:02:02:e9:f3:96:5b:a0:3d:ac:e4:39:93:ad:1b:91:01:04:
         28:94:19:9d:c3:3d:30:c7:c3:36:be:5b:d3:1d:92:c7:56:40:
         90:0d:17:a6:e4:2d:c3:b3:37:b0:07:36:49:1b:49:4d:fa:05:
         ae:a3:9a:9d:22:15:ce:7e:52:12:07:a6:64:1d:62:ed:4e:d8:
         fa:67:a1:a1:86:38:6d:eb:cf:7f:f2:f4:ac:a5:22:43:33:13:
         a0:d6:11:97:e1:8d:b9:c3:0e:23:dd:bb:18:8e:20:54:60:95:
         d7:21:f9:ff:c8:49:40:1c:79:3f:97:7b:91:9a:c1:2c:fa:7e:
         55:42:9e:01:1b:b5:e6:07:d1:27:9d:40:2f:48:12:04:93:c4:
         fd:1a:5d:0a:0d:ad:6d:8e:85:52:ef:d7:5a:93:01:de:d2:a6:
         3a:79:89:31:54:76:04:12:31:76:50:42:33:a7:c1:4c:ce:dd:
         92:5e:7c:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:33:38 2026 by rpki-client