This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2007/reVb0i-0MHZQvsKPNeUSxcXZMqk.roa
File:                     reVb0i-0MHZQvsKPNeUSxcXZMqk.roa (raw, json)
Hash identifier:          mqLsvWz905v9hLeZK0qWAZeUUPgkRttcquvQDozVRkI=
Subject key identifier:   AD:E5:5B:D2:2F:B4:30:76:50:BE:C2:8F:35:E5:12:C5:C5:D9:32:A9
Certificate issuer:       /CN=D0A4C934C5490DF6144A05EB1E6E605EB2AE13ED
Certificate serial:       02
Authority key identifier: D0:A4:C9:34:C5:49:0D:F6:14:4A:05:EB:1E:6E:60:5E:B2:AE:13:ED
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/reVb0i-0MHZQvsKPNeUSxcXZMqk.roa
Signing time:             Tue 20 Jan 2026 07:58:24 +0000
ROA not before:           Tue 20 Jan 2026 07:58:24 +0000
ROA not after:            Wed 20 Jan 2027 07:40:18 +0000
asID:                     38649
IP address blocks:        192.50.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 12:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A4C934C5490DF6144A05EB1E6E605EB2AE13ED
        Validity
            Not Before: Jan 20 07:58:24 2026 GMT
            Not After : Jan 20 07:40:18 2027 GMT
        Subject: CN=ADE55BD22FB4307650BEC28F35E512C5C5D932A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:3d:c6:e2:ee:7e:86:f9:ba:c3:92:c3:5d:
                    8c:fb:cc:d9:bb:8b:db:6c:17:9b:af:9e:e2:af:c5:
                    87:10:eb:7c:98:32:71:6b:ae:1e:6c:56:1a:10:4f:
                    fa:3d:60:1b:75:66:5e:2e:a5:f8:a8:91:5a:8d:2d:
                    2d:70:74:1c:2a:74:7f:5b:43:a7:97:7b:71:81:bd:
                    28:22:3c:9c:f2:c2:3d:77:3d:e3:e7:a1:c3:ca:e5:
                    57:e8:40:c8:63:05:ca:a4:b8:b7:62:26:d9:38:c5:
                    f0:18:28:65:d0:6f:38:90:48:ae:fc:a4:ab:81:42:
                    cc:9e:51:9d:87:cd:81:91:e2:85:b9:20:51:db:5b:
                    7f:56:fd:8b:59:0d:2f:89:0b:dc:84:87:1a:33:11:
                    2a:0d:ab:78:7a:35:52:84:e0:7a:65:2e:78:64:8b:
                    d1:9d:ee:89:a0:6b:ec:82:73:d1:ae:9a:d4:4c:1c:
                    95:d5:2e:a1:09:e4:3b:5a:b2:5e:95:0a:2c:6b:40:
                    f8:c0:f3:ac:5c:ba:5c:7f:44:bb:61:e6:27:53:01:
                    d2:d3:59:c6:c3:83:90:90:bb:32:78:94:11:c1:b6:
                    f2:43:47:81:a5:f3:01:20:5c:1b:6b:7f:8c:d9:b7:
                    32:98:4d:f3:6b:56:a0:69:4a:2f:29:75:b5:33:5d:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E5:5B:D2:2F:B4:30:76:50:BE:C2:8F:35:E5:12:C5:C5:D9:32:A9
            X509v3 Authority Key Identifier:
                keyid:D0:A4:C9:34:C5:49:0D:F6:14:4A:05:EB:1E:6E:60:5E:B2:AE:13:ED

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/reVb0i-0MHZQvsKPNeUSxcXZMqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:80:10:9f:95:55:01:6f:7a:f6:7c:68:4c:11:08:6b:bd:
         ab:6b:f5:0c:0d:e2:cc:fe:bf:e0:20:9b:95:18:55:33:c2:b6:
         f0:0a:6d:92:eb:d5:be:27:67:eb:3e:dc:e3:4a:19:aa:95:ce:
         53:e2:29:31:c5:5e:12:4b:c8:ff:4f:7d:11:13:f1:10:eb:00:
         54:c8:43:86:1c:61:a2:d3:58:8e:1a:0f:8f:bb:69:ad:6c:38:
         91:a3:c9:2e:98:6a:c5:90:63:ab:36:2d:b2:b5:d1:dc:70:b6:
         df:75:51:a4:89:09:f6:be:10:33:c2:69:19:41:06:03:1f:e7:
         b5:aa:0d:ae:0b:0e:b3:bf:98:a2:02:de:69:6f:27:c4:d8:92:
         c1:b9:f6:12:df:fe:55:f2:bf:b4:16:a1:ac:46:4c:6f:14:98:
         27:ee:5f:bc:ff:67:1b:ef:28:1b:a9:e4:c5:7b:19:1d:d7:9c:
         7d:e4:6d:76:aa:c1:14:c4:eb:9d:5d:ed:ee:0b:f6:35:a5:0d:
         46:7a:bf:42:0b:96:a6:da:ba:d6:7b:35:0d:fd:b8:94:62:40:
         da:5d:bb:33:23:e7:a0:60:67:15:d0:66:9c:fa:a2:32:60:24:
         d1:5b:1e:84:25:2d:5c:a7:b2:db:5b:84:ab:a1:95:c4:8c:a8:
         ba:55:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:16:16 2026 by rpki-client