This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/4znREq7D5k0w0RDwluECdN2JilU.roa
File:                     4znREq7D5k0w0RDwluECdN2JilU.roa (raw, json)
Hash identifier:          POXv4BHelk1HejXTLcxTf+ofcwBGam+59mgNmS3GXWg=
Subject key identifier:   E3:39:D1:12:AE:C3:E6:4D:30:D1:10:F0:96:E1:02:74:DD:89:8A:55
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       27
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/4znREq7D5k0w0RDwluECdN2JilU.roa
Signing time:             Thu 01 Jan 2026 01:28:47 +0000
ROA not before:           Thu 01 Jan 2026 01:28:47 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17529
IP address blocks:        61.213.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Jan  1 01:28:47 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=E339D112AEC3E64D30D110F096E10274DD898A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:af:d9:b9:f9:94:e2:95:c6:44:12:6c:eb:
                    14:ea:4a:df:ce:83:39:f3:ca:4f:f5:5f:e8:65:96:
                    91:99:d1:b1:28:db:cd:b5:37:03:45:f4:ba:84:6a:
                    f6:91:15:ff:3f:d9:ae:12:9e:50:39:54:1a:36:2f:
                    bd:62:f8:d0:5f:14:b4:6f:65:33:e0:68:97:4c:a8:
                    df:4b:c0:bb:e0:74:80:e6:85:9c:ea:5e:18:ce:0a:
                    62:ed:84:4e:2d:d5:0f:c6:9f:64:ee:f5:56:8b:d8:
                    fa:e4:ee:0e:aa:89:a0:0c:5e:99:93:4f:77:06:b4:
                    91:6a:31:51:78:c4:46:93:0a:4f:57:b1:c9:f1:eb:
                    dd:2a:eb:32:14:84:ad:c3:8e:43:ac:68:5a:30:fa:
                    36:85:44:a7:65:23:64:83:5b:4a:b5:2d:4a:c8:ef:
                    d7:c6:db:50:a1:bb:45:ac:c4:d7:91:8a:6a:c8:46:
                    9a:b2:56:c2:66:ff:fa:4d:8e:17:f4:c5:20:2a:98:
                    b8:fa:5c:bb:7f:c0:ac:37:8c:41:f6:73:45:fc:5d:
                    1d:a7:c1:3b:83:89:e0:50:4b:23:89:dc:c9:a3:15:
                    5e:9e:30:49:0b:0d:3c:2e:4d:6a:f8:e4:8e:5d:15:
                    49:f7:6c:de:0b:30:df:bd:fe:7f:5e:ea:c4:db:eb:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:39:D1:12:AE:C3:E6:4D:30:D1:10:F0:96:E1:02:74:DD:89:8A:55
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/4znREq7D5k0w0RDwluECdN2JilU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:22:fc:7e:8c:89:cd:2e:c3:ba:63:cb:6e:97:b7:83:76:
         ec:6a:0a:f3:ab:93:eb:c1:66:c7:e1:dd:9e:8d:77:4c:a3:91:
         62:e1:c2:89:7b:a3:c1:30:58:dd:85:8b:56:ff:4d:27:6d:a4:
         fa:a0:cb:08:78:18:88:96:9d:a7:16:46:de:46:78:6c:58:14:
         70:8c:71:89:90:11:f0:22:97:44:be:c4:66:e5:39:2d:fb:2f:
         b0:e6:99:a7:5f:3d:59:45:71:8b:02:60:da:32:0e:d8:83:fe:
         88:9d:91:6b:9d:63:74:09:93:ba:15:ff:df:9d:66:91:9c:13:
         7d:e0:d2:35:96:44:b2:36:07:92:f2:e5:c8:90:a7:46:d5:3a:
         4f:10:f9:95:77:c1:d6:54:f7:9e:6e:ec:c4:64:06:11:3a:f5:
         af:d9:7c:8a:28:96:74:a4:a9:77:a3:01:5b:0c:00:a9:05:57:
         30:12:d0:99:cc:1e:29:71:e5:e9:5f:86:f2:50:3a:30:4c:8d:
         5e:23:c3:75:81:3d:4f:c4:5a:e5:68:61:17:1a:60:78:7a:c4:
         51:7b:5d:cc:a5:56:47:98:00:0c:c8:96:1c:b0:eb:09:da:7c:
         69:8a:a7:e7:cb:c1:e7:84:b1:5a:88:9a:00:e7:7d:32:4e:13:
         c5:e2:70:d2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNDlC
MzVBQUNBMjBCNjMwRjRBRDUyQ0I1OThGOTUxMjUwRkYwN0ZEMB4XDTI2MDEwMTAx
Mjg0N1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRTMzOUQxMTJBRUMzRTY0
RDMwRDExMEYwOTZFMTAyNzRERDg5OEE1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALzIr9m5+ZTilcZEEmzrFOpK386DOfPKT/Vf6GWWkZnRsSjbzbU3
A0X0uoRq9pEV/z/ZrhKeUDlUGjYvvWL40F8UtG9lM+Bol0yo30vAu+B0gOaFnOpe
GM4KYu2ETi3VD8afZO71VovY+uTuDqqJoAxemZNPdwa0kWoxUXjERpMKT1exyfHr
3SrrMhSErcOOQ6xoWjD6NoVEp2UjZINbSrUtSsjv18bbUKG7RazE15GKashGmrJW
wmb/+k2OF/TFICqYuPpcu3/ArDeMQfZzRfxdHafBO4OJ4FBLI4ncyaMVXp4wSQsN
PC5Navjkjl0VSfds3gsw373+f17qxNvrnTMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTjOdESrsPmTTDREPCW4QJ03YmKVTAfBgNVHSMEGDAWgBQEmzWqyiC2MPStUstZ
j5USUP8H/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODEvQkpzMXFzb2d0akQwclZMTFdZLVZFbERfQl8wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQkpzMXFzb2d0akQwclZMTFdZLVZF
bERfQl8wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgxLzR6blJFcTdENWswdzBSRHdsdUVDZE4ySmlsVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAM91cgwDQYJKoZIhvcNAQELBQADggEBAAVLIvx+jInNLsO6Y8tul7eD
duxqCvOrk+vBZsfh3Z6Nd0yjkWLhwol7o8EwWN2Fi1b/TSdtpPqgywh4GIiWnacW
Rt5GeGxYFHCMcYmQEfAil0S+xGblOS37L7DmmadfPVlFcYsCYNoyDtiD/oidkWud
Y3QJk7oV/9+dZpGcE33g0jWWRLI2B5Ly5ciQp0bVOk8Q+ZV3wdZU955u7MRkBhE6
9a/ZfIoolnSkqXejAVsMAKkFVzAS0JnMHilx5elfhvJQOjBMjV4jw3WBPU/EWuVo
YRcaYHh6xFF7XcylVkeYAAzIlhyw6wnafGmKp+fLweeEsVqImgDnfTJOE8XicNI=
-----END CERTIFICATE-----
Generated at Sat Jan 10 00:18:42 2026 by rpki-client