This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/2Awlrgz-HKdycA8jjm3v09ypDeM.roa
File:                     2Awlrgz-HKdycA8jjm3v09ypDeM.roa (raw, json)
Hash identifier:          DipYOLwXgaIA6zAIAgE4e3oXjcApyI9llz67q/R2ftY=
Subject key identifier:   D8:0C:25:AE:0C:FE:1C:A7:72:70:0F:23:8E:6D:EF:D3:DC:A9:0D:E3
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       2A
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/2Awlrgz-HKdycA8jjm3v09ypDeM.roa
Signing time:             Thu 01 Jan 2026 01:29:12 +0000
ROA not before:           Thu 01 Jan 2026 01:29:12 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     59108
IP address blocks:        210.171.80.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Jan  1 01:29:12 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D80C25AE0CFE1CA772700F238E6DEFD3DCA90DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:75:ce:4b:cf:48:0c:44:c6:c1:52:24:e4:
                    4b:19:7f:f4:39:1e:e9:c1:95:98:1e:a7:35:cb:d7:
                    8c:d0:b5:bf:86:f8:54:06:eb:9f:f6:9c:c3:53:4f:
                    64:b5:37:6b:3b:ed:d7:5a:4a:45:0d:0f:fd:29:2a:
                    19:ac:ef:b2:fa:1e:a0:da:1c:cc:cc:0a:f7:1f:1a:
                    30:24:d8:77:62:2a:98:f4:c1:53:9b:52:22:66:c1:
                    71:ff:93:71:22:0b:d4:e6:7e:ef:4f:83:d5:f9:59:
                    29:0b:07:7a:8c:76:a7:0a:5e:f4:6d:86:fa:62:ec:
                    81:31:a6:97:ed:50:22:bf:6a:6f:5b:68:1c:29:2d:
                    6b:33:9e:9b:41:5a:ac:fa:a6:00:57:a6:1d:33:dd:
                    39:23:2e:a1:29:86:f5:8a:68:64:ee:59:02:56:c5:
                    6e:4d:4e:f6:86:fe:cc:d7:b1:2d:e1:2b:b6:ef:95:
                    d7:19:45:46:7f:62:82:ac:c6:99:12:f1:6d:5e:49:
                    d9:86:3d:d9:87:20:0e:76:93:41:70:80:40:95:47:
                    be:b7:bc:3b:e1:85:fd:2d:ca:1d:09:d7:5f:bd:c0:
                    bc:c9:fe:77:6b:a5:08:64:05:98:7b:6a:13:ef:ca:
                    2e:da:af:97:14:54:c0:30:67:f9:0b:99:af:d3:fa:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0C:25:AE:0C:FE:1C:A7:72:70:0F:23:8E:6D:EF:D3:DC:A9:0D:E3
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/2Awlrgz-HKdycA8jjm3v09ypDeM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:f2:76:08:50:84:c2:32:4d:28:26:8e:25:41:c0:c1:30:34:
         f5:64:ad:ae:32:1e:1c:9c:b9:ea:d9:65:92:f0:e3:70:33:18:
         33:4c:c0:f0:3d:fa:0a:72:73:f4:ef:4d:f7:9c:55:a4:a6:f2:
         e3:04:c7:0f:f7:46:36:7e:21:e0:a6:b0:d6:29:9b:12:b8:a1:
         d8:0b:63:4c:c8:cd:b8:cf:07:71:5e:e8:7a:53:76:c6:05:89:
         8f:33:70:b9:d9:33:35:3e:14:b9:64:72:c8:12:ca:bb:ca:9c:
         e8:f7:ce:87:87:fa:0d:87:95:fe:c6:cb:d5:d2:a2:9f:6f:da:
         73:bc:8c:95:5d:93:56:6c:4b:f8:3c:d5:a5:46:af:67:8a:4d:
         06:d0:46:11:2f:74:4a:51:38:2d:24:32:2f:4d:d8:ea:f1:12:
         54:82:1a:c8:62:3e:56:5c:a9:39:ee:59:be:fd:0e:45:7b:ca:
         a4:12:e5:05:e9:ab:54:d1:ec:d8:01:5d:d2:25:4b:e1:6f:b8:
         11:45:ad:eb:53:5a:39:88:43:3d:17:65:77:5c:47:ea:d4:36:
         c6:a8:64:42:c5:2d:a7:54:a8:52:0d:53:c9:86:9c:cc:55:86:
         4f:c9:4a:3f:0a:af:b9:7b:ff:dd:2b:74:8a:18:7d:37:3d:9a:
         39:3b:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:12:41 2026 by rpki-client