This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/lA4uKECeBWOZL5802dwjaGFhovU.roa
File:                     lA4uKECeBWOZL5802dwjaGFhovU.roa (raw, json)
Hash identifier:          KYZZXO56peX7DzwnolFrTg+b0PBL2saqbLvglH/5i5U=
Subject key identifier:   94:0E:2E:28:40:9E:05:63:99:2F:9F:34:D9:DC:23:68:61:61:A2:F5
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       27
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/lA4uKECeBWOZL5802dwjaGFhovU.roa
Signing time:             Thu 01 Jan 2026 01:29:11 +0000
ROA not before:           Thu 01 Jan 2026 01:29:11 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     59108
IP address blocks:        182.23.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Jan  1 01:29:11 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=940E2E28409E0563992F9F34D9DC23686161A2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:a7:6f:1a:f1:27:70:d6:07:73:aa:fb:f4:
                    1f:83:85:59:4a:18:41:23:d3:ff:49:00:a6:f8:64:
                    e3:25:51:1f:93:a9:2f:3f:e0:85:e2:d8:96:4c:84:
                    6e:b2:f9:d7:45:e6:ea:31:7e:8c:f7:3f:c0:10:52:
                    5c:df:2c:b9:6d:c1:66:24:8e:c8:7d:59:e2:0a:b1:
                    ba:76:37:9d:70:d5:b3:5a:fa:38:f5:37:ca:bd:75:
                    8d:0c:97:a3:cf:46:88:72:41:fc:67:89:9f:e3:f6:
                    84:f1:28:bb:c6:89:28:a2:77:75:56:82:9d:09:fd:
                    78:26:2c:21:ed:5b:83:fd:cf:a5:ce:92:f7:7b:e9:
                    0c:6d:49:ac:47:64:c2:de:86:43:76:78:c5:13:79:
                    bf:1b:c5:90:f2:b9:98:19:2e:06:5d:46:74:d7:09:
                    11:e6:f1:17:b7:19:0d:3e:cf:30:b6:85:f4:f9:da:
                    46:86:f9:c4:fd:9b:40:d5:1e:e3:05:94:f7:8c:d7:
                    d3:af:aa:08:fe:4c:1e:25:de:90:db:de:8f:b7:29:
                    1f:6d:88:10:cc:5b:2c:8a:1f:ad:72:39:bd:02:c3:
                    c5:a9:65:11:fe:60:6c:8e:6b:90:c6:a6:de:b0:a6:
                    02:21:eb:eb:a0:86:60:ae:3e:c5:ca:da:31:38:05:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0E:2E:28:40:9E:05:63:99:2F:9F:34:D9:DC:23:68:61:61:A2:F5
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/lA4uKECeBWOZL5802dwjaGFhovU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:2a:5c:8e:8d:c1:f2:79:52:1c:76:6d:3d:f6:6f:eb:c1:
         1e:6d:2c:46:34:91:a9:fd:24:44:b6:63:8c:bf:b2:a3:6d:fa:
         db:11:54:df:7c:bd:65:6b:b8:4c:1b:d4:ce:f4:b6:e6:b2:55:
         e4:1d:6a:7a:f6:9d:e3:9f:28:86:86:3b:98:a3:7f:aa:c2:b9:
         8d:91:68:1b:6e:15:10:c5:97:c2:56:fe:89:6d:c1:29:6c:b5:
         21:05:b0:c8:52:7d:c4:ca:0d:8e:e6:67:aa:9c:43:25:7a:78:
         6e:a0:fb:21:f4:b9:78:9f:44:1d:46:a7:89:fc:51:69:9d:07:
         60:8c:c7:38:dc:0f:19:d7:64:10:b9:a2:cc:84:13:bd:da:0e:
         7e:3d:45:38:3a:b1:e0:50:9e:b4:83:97:ad:94:67:36:46:d4:
         12:18:c1:61:2b:52:af:bb:e5:44:34:00:d3:f8:7a:0a:01:4e:
         f8:23:d7:33:1e:f7:2b:7b:f7:d6:59:ed:61:d4:fa:82:a6:bb:
         6f:f4:28:55:71:63:b9:93:68:04:23:d4:b3:f3:34:6a:84:d4:
         0e:a4:b7:8b:3e:cd:59:8d:ad:f1:0e:65:e7:80:47:10:09:35:
         4b:a8:33:24:34:48:8a:e2:c9:38:65:0d:e6:d1:05:86:29:54:
         99:78:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:12:42 2026 by rpki-client