This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/HeiCUB1nckjR5z9V6YiVin6-H0s.roa
File:                     HeiCUB1nckjR5z9V6YiVin6-H0s.roa (raw, json)
Hash identifier:          30Lb1S3LBSglTk2iW+j/f+kVUFHXO9uVwIxv568O328=
Subject key identifier:   1D:E8:82:50:1D:67:72:48:D1:E7:3F:55:E9:88:95:8A:7E:BE:1F:4B
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       26
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/HeiCUB1nckjR5z9V6YiVin6-H0s.roa
Signing time:             Thu 01 Jan 2026 01:29:10 +0000
ROA not before:           Thu 01 Jan 2026 01:29:10 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     59108
IP address blocks:        153.124.208.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Jan  1 01:29:10 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=1DE882501D677248D1E73F55E988958A7EBE1F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:73:1a:fd:de:e5:da:99:45:0d:a3:99:52:49:
                    6b:fc:ab:ab:e3:17:e7:8c:37:03:ff:58:22:40:02:
                    14:91:28:a3:12:92:98:c7:c7:1e:07:44:43:fb:61:
                    8f:87:bb:63:c2:f9:e8:5a:12:07:a0:0e:64:a3:33:
                    fb:07:ff:10:a5:47:34:db:09:b4:96:a7:49:ad:f2:
                    c9:ef:b0:2e:e6:6a:c5:1e:e1:f4:1c:4e:df:9a:a0:
                    f1:1d:13:f9:3a:e0:2a:93:15:50:47:31:d6:ca:fe:
                    8d:67:e8:bc:6a:d5:0e:28:2c:89:d1:1e:61:da:fa:
                    60:22:53:3f:36:6c:0e:fe:1e:25:bb:e4:b8:59:69:
                    81:84:7e:9e:e6:ca:56:6b:04:70:4c:e2:49:48:cb:
                    a6:c9:5d:ee:5d:ba:27:32:91:21:10:fb:f9:e0:de:
                    d0:79:de:a1:3b:56:88:e2:03:2e:48:88:ea:91:8d:
                    0a:5f:5c:e4:04:b3:3c:3c:eb:fc:69:7a:68:1a:66:
                    54:02:51:c3:6b:d6:30:d5:81:34:fb:5c:08:43:e9:
                    ee:e1:63:5c:60:0a:ea:13:36:16:61:76:83:d4:2f:
                    d7:f3:ad:a8:21:8d:29:ef:7e:67:8f:2b:74:e0:47:
                    a3:93:ec:ea:5e:5d:9d:6f:a1:eb:cb:24:b2:54:64:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E8:82:50:1D:67:72:48:D1:E7:3F:55:E9:88:95:8A:7E:BE:1F:4B
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/HeiCUB1nckjR5z9V6YiVin6-H0s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.124.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:c8:4c:9e:92:98:77:ce:a1:f9:2b:1e:81:2d:b7:04:a3:
         bd:ae:0d:59:8b:b7:e7:93:4e:d4:4a:17:4a:42:68:48:62:bf:
         07:f9:4e:fe:4e:1c:9d:7e:a1:54:68:11:8c:a7:2e:4b:b8:35:
         a1:0d:7d:de:e5:a6:11:a1:a3:f4:c9:00:c9:bf:b3:9a:9a:c3:
         60:a0:85:dd:d3:bc:8a:96:c3:48:10:9b:58:4c:0f:61:fa:e5:
         22:9e:51:62:49:73:9a:75:13:25:7c:30:5d:3f:b5:55:8d:2f:
         46:24:f0:57:20:38:21:60:9c:44:d6:da:b6:04:4c:db:d4:9e:
         da:7e:13:27:6a:63:cc:14:23:00:96:bd:0a:b5:bd:b3:d3:e3:
         65:77:62:a7:b0:0c:4e:77:c7:9b:ca:42:98:a0:fd:d3:85:3f:
         76:01:31:bd:ae:c0:2e:32:67:08:06:3b:bf:f0:1c:8b:15:77:
         59:24:88:23:c7:42:55:3c:03:c8:01:7e:f4:b7:b4:42:03:03:
         2d:76:5e:0f:d7:a2:27:ea:d4:75:bb:3d:b3:d3:a1:e3:a0:43:
         76:cb:5a:10:9c:a5:db:87:cb:4e:43:83:65:aa:ad:27:38:18:
         0e:23:0f:c7:a0:6d:e2:9a:53:22:56:ed:f0:d5:7f:17:f4:e3:
         6d:9e:09:f1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC
MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI2MDEwMTAx
MjkxMFoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMURFODgyNTAxRDY3NzI0
OEQxRTczRjU1RTk4ODk1OEE3RUJFMUY0QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOxzGv3e5dqZRQ2jmVJJa/yrq+MX54w3A/9YIkACFJEooxKSmMfH
HgdEQ/thj4e7Y8L56FoSB6AOZKMz+wf/EKVHNNsJtJanSa3yye+wLuZqxR7h9BxO
35qg8R0T+TrgKpMVUEcx1sr+jWfovGrVDigsidEeYdr6YCJTPzZsDv4eJbvkuFlp
gYR+nubKVmsEcEziSUjLpsld7l26JzKRIRD7+eDe0HneoTtWiOIDLkiI6pGNCl9c
5ASzPDzr/Gl6aBpmVAJRw2vWMNWBNPtcCEPp7uFjXGAK6hM2FmF2g9Qv1/OtqCGN
Ke9+Z48rdOBHo5Ps6l5dnW+h68skslRkmn8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQd6IJQHWdySNHnP1XpiJWKfr4fSzAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac
2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1
YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNzEvSGVpQ1VCMW5ja2pSNXo5VjZZaVZpbjYtSDBzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBJl80DANBgkqhkiG9w0BAQsFAAOCAQEArCjITJ6SmHfOofkrHoEttwSjva4N
WYu355NO1EoXSkJoSGK/B/lO/k4cnX6hVGgRjKcuS7g1oQ193uWmEaGj9MkAyb+z
mprDYKCF3dO8ipbDSBCbWEwPYfrlIp5RYklzmnUTJXwwXT+1VY0vRiTwVyA4IWCc
RNbatgRM29Se2n4TJ2pjzBQjAJa9CrW9s9PjZXdip7AMTnfHm8pCmKD904U/dgEx
va7ALjJnCAY7v/AcixV3WSSII8dCVTwDyAF+9Le0QgMDLXZeD9eiJ+rUdbs9s9Oh
46BDdstaEJyl24fLTkODZaqtJzgYDiMPx6Bt4ppTIlbt8NV/F/TjbZ4J8Q==
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:08 2026 by rpki-client