This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/21vZYuv-S70YSs6ASXPOtyvPOxs.roa
File:                     21vZYuv-S70YSs6ASXPOtyvPOxs.roa (raw, json)
Hash identifier:          AzjBgRGdWzxYbC1jnR2uCh89VbX/c6yhnIaNzQNwtvI=
Subject key identifier:   DB:5B:D9:62:EB:FE:4B:BD:18:4A:CE:80:49:73:CE:B7:2B:CF:3B:1B
Certificate issuer:       /CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481
Certificate serial:       19
Authority key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/21vZYuv-S70YSs6ASXPOtyvPOxs.roa
Signing time:             Thu 01 Jan 2026 01:28:49 +0000
ROA not before:           Thu 01 Jan 2026 01:28:49 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17529
IP address blocks:        193.115.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481
        Validity
            Not Before: Jan  1 01:28:49 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=DB5BD962EBFE4BBD184ACE804973CEB72BCF3B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:ca:69:5a:c5:02:55:c9:16:55:f7:a1:9b:
                    0f:05:dc:c1:b9:5e:c9:48:ae:c3:d9:c5:94:35:9c:
                    ac:a4:8a:c9:e4:87:81:82:73:a0:29:22:53:0e:cc:
                    a0:27:26:e4:01:2f:c2:d9:ef:29:a1:2a:a2:6d:bb:
                    84:d1:88:42:f2:aa:27:aa:83:4f:9e:a4:0e:08:2b:
                    28:1b:43:32:5d:09:f4:6b:94:f3:a1:12:8b:7b:5d:
                    1f:a1:5a:79:88:73:d6:7e:c7:f3:f1:dc:2f:2e:59:
                    c0:ea:bb:d8:db:0f:98:97:a9:cb:e6:3b:fb:67:a8:
                    d5:65:a9:5d:bc:bc:8f:d6:03:ff:5d:c4:db:24:d9:
                    56:94:c4:0d:14:80:f3:a2:47:33:5c:ee:1d:38:36:
                    37:60:fd:c4:f8:c8:c4:86:4a:ef:83:be:b0:17:61:
                    64:e3:55:e0:97:28:48:63:b5:ae:6b:f8:82:f3:02:
                    85:58:d2:0d:0f:97:75:82:34:30:8f:ae:e8:5d:0d:
                    4f:b3:df:7f:90:8a:7b:b4:ab:4d:c2:1e:5c:cd:74:
                    a1:a7:d3:ae:e7:1b:12:c4:c7:31:20:b6:65:97:23:
                    3d:c6:b5:96:99:7c:12:ee:81:58:b5:1e:d9:32:8b:
                    60:88:87:3e:e8:43:54:3e:16:15:8e:b8:69:e3:52:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:D9:62:EB:FE:4B:BD:18:4A:CE:80:49:73:CE:B7:2B:CF:3B:1B
            X509v3 Authority Key Identifier:
                keyid:81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/21vZYuv-S70YSs6ASXPOtyvPOxs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.115.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:52:2c:85:de:4e:0c:c5:48:d6:72:59:c4:da:70:09:4d:d6:
         4b:19:55:8c:23:c7:1d:6a:c9:d0:c9:f8:5d:cb:6b:04:c2:5b:
         30:2f:0d:8d:70:8c:12:cd:c5:45:03:c9:a3:0b:75:4f:d0:78:
         8d:f0:81:53:95:6d:ab:67:ea:ab:c1:6f:50:cc:ad:cd:75:15:
         92:19:a1:79:7b:af:bc:ac:96:fe:72:48:b9:38:92:85:9c:14:
         03:cf:95:e7:b8:a2:b8:ad:c2:c3:3b:13:a9:89:cf:c0:e1:f7:
         c7:65:0e:7e:a3:8c:a8:49:72:e4:ee:b8:08:29:b7:62:39:00:
         a4:eb:91:82:98:fe:4c:36:f1:02:c8:88:8c:b9:f5:55:c5:58:
         13:1a:74:a2:7b:47:0b:5e:e7:6a:d7:c1:02:4d:55:2d:e2:fd:
         9e:40:c5:43:43:14:7f:9b:d5:5d:21:12:b3:b2:9c:f6:0f:30:
         bc:d1:13:07:74:00:59:10:ac:b8:55:bd:ab:fa:71:3a:de:44:
         cb:cb:25:a9:40:e8:42:ae:dd:0b:66:d9:d3:17:1c:44:15:4b:
         b7:72:f8:25:c6:5a:13:48:26:8d:72:ae:7f:81:38:fb:22:84:
         24:15:f8:ae:58:58:2f:9c:64:cc:8e:44:ac:79:06:38:7e:31:
         a2:bb:a7:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:06:46 2026 by rpki-client