This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20245/WnNGMTeQkNi2Gad9yRqilDnvIF8.roa
File:                     WnNGMTeQkNi2Gad9yRqilDnvIF8.roa (raw, json)
Hash identifier:          93rnoUglw0CnRZhA9eZ8q7yhlMJ8K4EBMTc7km52xJI=
Subject key identifier:   5A:73:46:31:37:90:90:D8:B6:19:A7:7D:C9:1A:A2:94:39:EF:20:5F
Certificate issuer:       /CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
Certificate serial:       2B
Authority key identifier: EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/WnNGMTeQkNi2Gad9yRqilDnvIF8.roa
Signing time:             Thu 01 Jan 2026 01:36:50 +0000
ROA not before:           Thu 01 Jan 2026 01:36:50 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     151375
IP address blocks:        61.245.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D
        Validity
            Not Before: Jan  1 01:36:50 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=5A734631379090D8B619A77DC91AA29439EF205F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:60:fc:b1:c6:b7:52:3b:e3:35:3f:16:5c:
                    e1:49:4a:39:2b:bb:94:27:ad:08:2b:46:52:e5:ec:
                    86:08:f4:95:01:51:3d:8a:d0:54:b4:a9:c3:cf:fb:
                    12:0e:4a:36:33:47:aa:b0:e3:70:66:46:c1:77:b1:
                    be:a0:fb:ab:d9:f2:48:3b:03:53:b9:70:04:9e:05:
                    36:64:63:1b:43:19:b3:19:18:aa:84:df:8d:c4:c4:
                    ca:aa:25:0b:93:5c:82:1b:05:0b:9b:e7:fd:bb:96:
                    b2:59:18:cc:e8:46:24:71:b0:34:1b:65:cd:31:2c:
                    39:98:e2:98:c6:83:ed:50:1d:75:fd:29:12:2b:c2:
                    e9:87:3a:1d:f8:92:ea:9f:ec:76:3f:30:8f:3a:a0:
                    4e:0d:5c:22:69:40:5b:95:70:e5:20:6c:e4:cb:5a:
                    d7:40:fe:9f:6e:93:01:cd:4b:14:42:30:97:e9:33:
                    98:6f:79:00:71:5c:a1:d4:41:6a:94:34:b8:bb:e1:
                    43:5a:4b:1f:07:45:2d:ce:1b:e3:fa:df:ab:de:50:
                    f1:4a:08:bc:3a:88:43:67:3e:43:27:d6:a6:c3:c4:
                    4c:16:46:68:d6:d1:25:b1:1e:5e:c7:88:aa:de:37:
                    57:c0:2f:0b:42:7a:61:58:1c:ae:15:cc:fd:75:d2:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:46:31:37:90:90:D8:B6:19:A7:7D:C9:1A:A2:94:39:EF:20:5F
            X509v3 Authority Key Identifier:
                keyid:EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/WnNGMTeQkNi2Gad9yRqilDnvIF8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:9d:01:e9:e3:a6:a7:bb:dd:7a:28:43:6e:aa:94:a6:bf:
         a9:91:24:61:b8:43:47:67:a0:ac:9c:95:b7:01:01:4f:6e:1e:
         d2:2e:f8:a7:75:bf:2a:bd:22:cd:44:b9:d2:b0:56:ce:b3:85:
         94:92:87:5d:0a:78:5f:0e:55:e9:a0:37:8f:ac:a3:95:fd:bc:
         e8:97:c9:82:d8:6d:d4:3e:1a:3c:0e:81:20:8a:64:82:5d:24:
         72:63:22:5b:cc:8a:fc:71:e0:f4:b0:e4:47:61:f7:0b:53:de:
         5d:aa:71:6d:d6:b0:40:da:76:11:c8:b2:78:2a:f2:de:e5:d9:
         fc:7d:6a:37:fb:f1:53:e4:ca:4c:92:8f:a6:b0:9e:bc:61:8f:
         09:c0:99:db:e0:71:4a:d5:32:f7:04:8b:2d:0b:09:70:3c:b0:
         68:bc:2a:96:98:3d:14:0e:e2:51:03:96:cc:da:3b:fb:54:1a:
         cc:2a:f0:0a:76:3f:f1:c6:da:11:7d:fd:39:6e:57:98:98:27:
         b3:60:c3:0a:73:ce:58:d2:11:78:86:1d:4f:1a:70:36:cf:95:
         bf:16:53:0b:18:9c:de:54:7b:87:ec:d7:2b:7f:f5:a9:0e:29:
         d2:8a:6a:43:96:8a:d9:d0:fc:b7:b0:5c:ea:5a:63:d3:09:83:
         11:df:ec:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:10:40 2026 by rpki-client