This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/2JFr-O0XOhZloAnxDK2QWpK47m8.roa
File:                     2JFr-O0XOhZloAnxDK2QWpK47m8.roa (raw, json)
Hash identifier:          3uDW4GufqWX81s9lm9XZgnVilItXdnG5VbFH3xTusGs=
Subject key identifier:   D8:91:6B:F8:ED:17:3A:16:65:A0:09:F1:0C:AD:90:5A:92:B8:EE:6F
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       2D
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/2JFr-O0XOhZloAnxDK2QWpK47m8.roa
Signing time:             Thu 01 Jan 2026 01:29:13 +0000
ROA not before:           Thu 01 Jan 2026 01:29:13 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     59108
IP address blocks:        211.14.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Jan  1 01:29:13 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D8916BF8ED173A1665A009F10CAD905A92B8EE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:27:f4:e4:ef:ce:de:13:3f:64:c3:69:d5:
                    2f:26:c2:e7:85:ba:26:89:fe:01:30:80:4d:30:f0:
                    fb:85:83:d4:91:f5:60:67:9d:62:65:c4:80:dc:ef:
                    35:49:9c:21:41:e1:84:c2:05:9d:cf:3b:56:f2:0e:
                    d5:7f:c5:87:7b:ff:fe:a2:af:2d:da:01:2a:e8:97:
                    92:25:30:ed:28:1e:f4:ff:e2:90:4e:22:08:2b:5e:
                    97:f5:2b:c0:f1:0a:08:d8:4c:8d:98:ff:fa:89:92:
                    e4:12:2d:9a:56:0a:ee:90:bc:a2:47:71:b2:19:aa:
                    49:1a:da:4f:27:bf:6c:54:97:5f:78:bc:95:ca:12:
                    be:b9:cd:c1:fa:f7:e9:34:d1:9f:e8:43:58:34:05:
                    31:a8:72:97:8a:9c:f4:6d:38:14:ae:54:dc:dc:42:
                    b3:31:fb:83:b7:fd:98:a9:f4:47:6a:68:44:4b:0d:
                    fe:a2:e3:35:5b:e9:97:fa:7c:24:9f:7b:68:e0:99:
                    85:11:80:6e:99:fb:2d:bd:eb:4a:7c:b9:9e:54:7c:
                    bd:db:82:a2:21:ef:22:e2:f8:b8:b4:72:a6:03:f5:
                    30:5a:f2:68:99:e6:10:1f:0a:9c:25:d9:70:f6:cc:
                    48:4a:03:a5:6d:56:3d:d7:38:23:0c:27:ef:f5:68:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:91:6B:F8:ED:17:3A:16:65:A0:09:F1:0C:AD:90:5A:92:B8:EE:6F
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/2JFr-O0XOhZloAnxDK2QWpK47m8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:03:8a:36:e6:f8:a6:76:fa:d2:07:61:78:0e:aa:b1:8d:
         95:0e:97:fa:49:a0:6f:b3:3c:f3:74:5d:e6:29:96:59:11:88:
         e2:ef:b5:19:00:c5:d5:98:b0:e3:0b:67:84:81:35:d7:ec:44:
         c2:01:65:41:74:66:e9:57:2d:0e:8c:7a:3a:05:37:17:b0:55:
         45:a4:91:71:6d:59:9d:ae:16:29:af:b5:17:57:fb:2c:27:d5:
         d4:0c:f0:61:a7:06:49:5d:8c:51:84:13:d5:4d:b4:42:85:20:
         90:cb:49:a2:1e:c5:19:81:b9:ca:b7:e0:b6:7e:94:40:9d:d0:
         ff:40:5a:2b:75:81:74:ba:07:f5:66:24:c6:91:c0:6e:48:b0:
         af:04:54:b0:1d:c4:a4:0f:37:d8:f1:82:e2:50:32:91:aa:3d:
         2f:00:6c:c4:af:e9:b5:a1:7b:0b:20:87:bc:cf:78:9d:4e:a8:
         26:b2:97:ee:02:68:37:e1:8a:f8:12:80:16:bd:c2:a0:f9:24:
         3c:00:c6:1a:71:b1:72:6b:11:57:a2:0b:43:0f:70:2c:42:84:
         30:cc:3b:0d:b3:09:c5:46:be:b5:b3:39:20:b7:52:f2:30:27:
         2a:28:51:48:f6:ad:83:38:a4:f1:26:79:06:7d:8f:95:ea:e3:
         48:4c:81:9b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC
MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI2MDEwMTAx
MjkxM1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRDg5MTZCRjhFRDE3M0Ex
NjY1QTAwOUYxMENBRDkwNUE5MkI4RUU2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOAoJ/Tk787eEz9kw2nVLybC54W6Jon+ATCATTDw+4WD1JH1YGed
YmXEgNzvNUmcIUHhhMIFnc87VvIO1X/Fh3v//qKvLdoBKuiXkiUw7Sge9P/ikE4i
CCtel/UrwPEKCNhMjZj/+omS5BItmlYK7pC8okdxshmqSRraTye/bFSXX3i8lcoS
vrnNwfr36TTRn+hDWDQFMahyl4qc9G04FK5U3NxCszH7g7f9mKn0R2poREsN/qLj
NVvpl/p8JJ97aOCZhRGAbpn7Lb3rSny5nlR8vduCoiHvIuL4uLRypgP1MFryaJnm
EB8KnCXZcPbMSEoDpW1WPdc4Iwwn7/VoDW0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTYkWv47Rc6FmWgCfEMrZBakrjubzAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac
2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1
YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNzEvMkpGci1PMFhPaFpsb0FueERLMlFXcEs0N204LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBdMO4DANBgkqhkiG9w0BAQsFAAOCAQEAlk4Dijbm+KZ2+tIHYXgOqrGNlQ6X
+kmgb7M883Rd5imWWRGI4u+1GQDF1Ziw4wtnhIE11+xEwgFlQXRm6VctDox6OgU3
F7BVRaSRcW1Zna4WKa+1F1f7LCfV1AzwYacGSV2MUYQT1U20QoUgkMtJoh7FGYG5
yrfgtn6UQJ3Q/0BaK3WBdLoH9WYkxpHAbkiwrwRUsB3EpA832PGC4lAykao9LwBs
xK/ptaF7CyCHvM94nU6oJrKX7gJoN+GK+BKAFr3CoPkkPADGGnGxcmsRV6ILQw9w
LEKEMMw7DbMJxUa+tbM5ILdS8jAnKihRSPatgzik8SZ5Bn2PlerjSEyBmw==
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:12:42 2026 by rpki-client