This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/knr2cb2wOIHXNnhOuzN5BFbzONY.roa
File:                     knr2cb2wOIHXNnhOuzN5BFbzONY.roa (raw, json)
Hash identifier:          s66OkWuKr/2yOU9okRGOxqIqDKT5T47hBWgMtrAoOOQ=
Subject key identifier:   92:7A:F6:71:BD:B0:38:81:D7:36:78:4E:BB:33:79:04:56:F3:38:D6
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       25
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/knr2cb2wOIHXNnhOuzN5BFbzONY.roa
Signing time:             Thu 01 Jan 2026 01:28:46 +0000
ROA not before:           Thu 01 Jan 2026 01:28:46 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17529
IP address blocks:        61.211.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Jan  1 01:28:46 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=927AF671BDB03881D736784EBB33790456F338D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:12:b0:fb:c2:be:fc:2d:80:e1:41:04:42:
                    ce:b5:6d:b0:42:24:53:b1:b5:e9:da:46:23:07:ff:
                    5b:cc:d1:8a:6d:44:5d:39:42:0d:51:e2:b3:53:53:
                    16:3c:11:45:c3:da:54:5f:09:e0:95:83:a8:7d:d4:
                    4d:e4:a1:c2:61:39:6a:48:53:71:d6:bd:d4:22:e3:
                    94:55:04:d8:a0:ee:9a:7a:66:2c:29:27:3a:a2:22:
                    7a:4d:61:a0:81:d5:32:2f:11:a1:e4:10:2b:e5:48:
                    fb:74:1b:a2:3c:c3:1d:f4:0b:bb:fb:f8:18:7a:e0:
                    9c:f2:5d:69:9b:fc:87:44:9f:21:38:bc:7a:dc:7b:
                    f0:10:e5:b1:fd:92:b4:2f:d5:f0:6c:84:eb:f4:c3:
                    ae:fe:cd:8e:7f:ec:ab:0f:9f:28:0e:6c:92:da:c7:
                    46:73:9a:b2:b4:4b:98:8d:8a:db:08:c7:e0:18:e8:
                    4b:28:70:a2:91:2b:14:84:14:0e:26:42:52:88:15:
                    58:6f:74:d7:7d:b2:75:93:1d:4c:ed:61:37:80:68:
                    80:b6:09:25:ca:cb:99:31:b9:83:c6:a6:1b:11:e6:
                    e5:42:ff:92:d3:7b:4e:5f:cd:a2:be:f9:c9:d6:96:
                    b2:e0:28:d8:a5:ce:bd:e7:2d:71:43:ab:30:05:bc:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7A:F6:71:BD:B0:38:81:D7:36:78:4E:BB:33:79:04:56:F3:38:D6
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/knr2cb2wOIHXNnhOuzN5BFbzONY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:65:d1:39:54:63:27:ca:2a:eb:63:3e:f9:a2:d5:8d:02:
         4f:5a:f5:ea:29:a1:dd:96:8e:6b:3f:96:61:16:3a:84:dd:1a:
         05:4c:5e:33:5a:d9:7f:6f:9d:8d:c8:8f:6b:dd:67:cd:c7:f0:
         fc:bb:88:da:30:65:50:8a:11:c6:2b:14:57:0a:a4:aa:9c:4a:
         0c:36:37:43:fd:bf:57:bb:b7:72:17:9d:d8:46:3d:ea:d9:9d:
         56:ff:e2:58:b6:96:d4:f4:bc:89:3e:09:d2:39:f6:d6:27:3e:
         82:96:b3:69:7c:c9:45:6a:16:43:80:4b:f2:e6:5e:c1:eb:c3:
         5f:96:78:0d:15:ab:12:55:97:3e:c7:56:64:22:ba:a5:ed:86:
         de:43:73:db:75:dc:39:64:3e:83:1f:03:d4:0a:22:e8:87:ae:
         09:1f:cc:59:69:29:92:47:85:e1:3c:78:b7:7f:b1:e6:9e:8a:
         23:45:a0:1d:85:b0:62:eb:ce:6a:85:df:7d:61:31:ae:cd:5d:
         ed:a7:7f:f2:85:a7:fa:3d:a9:e9:6f:54:fa:b7:b2:0d:65:17:
         9d:5f:f9:64:5c:da:ed:18:9d:77:1a:c5:ef:17:87:28:5a:bb:
         23:63:57:c3:39:ca:8e:41:3e:fa:7f:71:82:39:fe:ba:4d:8b:
         64:a4:98:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 10 00:18:41 2026 by rpki-client