This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2285/feNJN-4FQ3eXSdayKN6UgBQRQTk.roa
File:                     feNJN-4FQ3eXSdayKN6UgBQRQTk.roa (raw, json)
Hash identifier:          Eu3xUDwfTWWMm++3Lj9W9gCILiLrqAVUsWz3zHUwAN8=
Subject key identifier:   7D:E3:49:37:EE:05:43:77:97:49:D6:B2:28:DE:94:80:14:11:41:39
Certificate issuer:       /CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Certificate serial:       62
Authority key identifier: 7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/feNJN-4FQ3eXSdayKN6UgBQRQTk.roa
Signing time:             Thu 01 Jan 2026 01:31:17 +0000
ROA not before:           Thu 01 Jan 2026 01:31:17 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        202.253.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C01445105DBAF2750BA19245C7064AD40F7226D
        Validity
            Not Before: Jan  1 01:31:17 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7DE34937EE0543779749D6B228DE948014114139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:6a:ad:3b:21:cd:cf:03:1c:98:24:7b:ba:
                    2e:f7:af:ce:10:87:79:9e:13:b4:e9:5e:cd:37:96:
                    16:36:0a:4e:74:00:46:d6:71:bd:11:20:85:86:f8:
                    2d:03:e7:fb:14:e8:9e:90:fb:54:96:d1:88:58:8f:
                    9a:d8:db:99:6b:4b:2e:e4:29:ff:2a:a9:da:61:ac:
                    f5:24:80:3c:65:95:1a:a6:23:04:e6:e5:b3:26:22:
                    11:bf:a6:08:28:51:97:77:bf:a3:69:1e:ef:32:b5:
                    87:9d:16:e9:bb:d8:d4:47:fc:9e:0b:75:e6:65:27:
                    1f:0d:ca:b1:a5:24:a6:be:dd:71:07:8c:35:98:fe:
                    4d:50:3c:15:d3:f8:68:3a:4b:2a:53:c9:b4:e8:59:
                    ce:43:e8:e8:e0:15:e1:23:03:3a:d3:ed:06:83:36:
                    5e:fa:fc:88:1e:34:5d:a5:cf:6c:0c:bb:6f:6f:45:
                    c8:38:a1:07:34:85:23:58:ec:86:df:c2:95:81:e3:
                    2c:5d:46:58:a8:62:be:c9:ea:75:1a:6c:c0:f1:f4:
                    8a:d3:ab:3b:ca:fe:cf:c9:c5:25:16:4d:73:c7:c0:
                    07:fa:5c:7f:13:9a:a4:f3:3a:c0:6b:14:16:ec:67:
                    3d:df:8c:47:43:0e:12:a7:b5:82:d2:c9:2a:bc:25:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E3:49:37:EE:05:43:77:97:49:D6:B2:28:DE:94:80:14:11:41:39
            X509v3 Authority Key Identifier:
                keyid:7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/feNJN-4FQ3eXSdayKN6UgBQRQTk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.253.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:bf:e9:13:81:38:f7:27:96:85:b4:d9:7c:70:1c:6a:11:
         cc:1b:5f:d6:56:9e:88:df:04:40:af:cf:a2:d3:a6:a0:62:8c:
         af:a1:be:53:3d:63:a3:6c:b6:3a:f3:f7:71:6b:45:45:d9:64:
         aa:aa:8f:24:8e:78:4d:8b:46:cf:82:d6:36:d6:f0:23:fa:37:
         18:d3:f0:91:df:c5:49:06:f7:5c:02:41:b8:9b:09:cb:0d:c1:
         36:c5:08:4c:37:4f:e4:03:4a:7d:dc:a8:24:84:2a:30:5f:a0:
         df:07:f8:f9:1a:f7:e1:ad:74:68:0e:71:6b:e8:bf:3e:65:cb:
         99:71:1e:5e:62:9e:b7:c2:b9:76:13:df:29:9e:f9:76:92:45:
         3a:60:69:db:5d:d8:cd:89:cc:ee:68:17:ef:9d:fe:25:83:a3:
         f9:08:8c:60:0f:ab:dd:ec:65:8c:f1:69:5d:6e:14:28:04:7e:
         fb:97:72:26:03:3b:ef:e6:8a:52:45:0a:2d:76:e6:07:4a:e7:
         94:0a:61:73:da:f3:9e:7f:9d:fa:26:07:da:04:8e:df:34:65:
         4e:86:53:3b:21:d6:c2:1a:a4:f7:4e:7a:92:2d:7f:26:16:8c:
         61:86:26:c2:c7:5a:66:a5:af:6d:4e:7b:08:ac:be:4a:24:d1:
         ce:6c:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:33:38 2026 by rpki-client