This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O2laLk9xmgMMk9tar5WlPyTyuRA.roa
File:                     O2laLk9xmgMMk9tar5WlPyTyuRA.roa (raw, json)
Hash identifier:          GdABjnBnx9cj6ynTwDkoOA9QT/5VwIhAD1YA92syZAU=
Subject key identifier:   3B:69:5A:2E:4F:71:9A:03:0C:93:DB:5A:AF:95:A5:3F:24:F2:B9:10
Certificate issuer:       /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial:       80
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O2laLk9xmgMMk9tar5WlPyTyuRA.roa
Signing time:             Thu 01 Jan 2026 01:29:43 +0000
ROA not before:           Thu 01 Jan 2026 01:29:43 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7521
IP address blocks:        2001:3a0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
        Validity
            Not Before: Jan  1 01:29:43 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3B695A2E4F719A030C93DB5AAF95A53F24F2B910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:e4:69:d4:f4:54:d0:39:dc:f7:4a:0a:55:
                    22:da:83:a9:4d:aa:8b:34:34:84:29:6a:42:10:ea:
                    a2:10:6e:e4:9e:3d:ac:b5:bc:f8:fd:e5:47:9d:85:
                    fe:59:ca:96:ac:b2:b0:5a:3f:c5:b9:f9:67:76:ad:
                    73:0d:51:db:45:5b:1d:86:2a:6f:2f:52:35:4a:e2:
                    62:e6:97:89:22:e6:e8:1f:f9:4c:4d:b4:f1:bb:42:
                    24:a8:5e:57:9b:71:8d:43:6f:4d:b0:c6:90:9c:81:
                    f5:97:a0:cd:ca:e9:80:7b:21:b0:df:8c:cc:e4:8b:
                    4c:2c:23:b2:73:cd:22:0d:11:2d:28:c1:72:4c:5f:
                    85:f4:ca:5f:0d:97:2c:76:84:f6:83:14:43:69:a2:
                    f0:17:52:27:dd:62:b9:71:11:2f:7c:f3:1b:d3:c4:
                    09:49:ae:96:10:c7:b8:33:28:79:7c:f4:14:4d:b2:
                    25:a4:47:3c:97:ad:44:f5:37:3f:5d:68:26:12:a5:
                    55:ca:14:75:bf:12:93:16:fe:00:2b:3b:da:7f:4e:
                    db:28:78:76:3f:ef:18:7d:73:5e:07:89:9d:cc:b2:
                    1e:1e:45:81:a6:76:e0:0b:a1:47:f2:b4:00:4c:3b:
                    27:35:1f:fd:bd:37:ca:6b:45:d6:60:b4:1c:af:e9:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:69:5A:2E:4F:71:9A:03:0C:93:DB:5A:AF:95:A5:3F:24:F2:B9:10
            X509v3 Authority Key Identifier:
                keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O2laLk9xmgMMk9tar5WlPyTyuRA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:58:ef:d5:d2:33:bf:2a:e8:68:9d:79:bc:e6:39:d7:f0:b7:
         e6:c2:20:2f:b7:ed:c8:8c:fd:6a:3b:79:fc:1b:87:43:26:db:
         7d:64:db:0f:87:7e:5f:21:7a:cf:0d:7d:1c:75:8e:dc:f9:2d:
         1c:b3:44:82:aa:f0:15:24:18:34:b2:c6:93:c4:00:b3:45:0a:
         07:22:2b:e7:56:fb:9f:2b:3f:49:d9:e7:ba:06:94:66:da:21:
         ae:ab:a9:be:e2:f8:43:7a:2b:77:6a:b5:5e:9a:dc:73:18:52:
         84:75:cf:30:e3:10:91:d8:f2:93:1c:57:81:95:22:79:4b:e9:
         5e:9e:a0:e7:d0:9d:06:8b:0a:02:23:d6:bf:bd:ca:c0:e5:25:
         7b:37:33:23:77:a0:b0:cd:d4:e9:4d:02:20:b6:57:f7:47:96:
         54:a6:64:7e:d1:82:b8:0b:f8:89:9f:01:28:af:60:9a:73:7d:
         05:43:78:84:a0:f0:82:1a:af:c9:43:fa:82:84:a1:e4:52:a6:
         02:e6:be:dc:5f:b0:94:af:1b:60:62:5d:84:63:16:db:34:14:
         e2:bc:79:6f:d7:bc:5d:40:26:c1:4e:11:9a:e9:85:d2:20:5b:
         96:ae:64:65:fb:45:6c:1b:18:6c:6b:e0:d8:fd:48:4f:3d:a6:
         e9:07:59:1f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTA2
QjFGM0Q2NDlFNUEyNUFBMTM0MEMxOEJENkE3QzI0Q0YzNkFGNjAeFw0yNjAxMDEw
MTI5NDNaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCNjk1QTJFNEY3MTlB
MDMwQzkzREI1QUFGOTVBNTNGMjRGMkI5MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo1eRp1PRU0Dnc90oKVSLag6lNqos0NIQpakIQ6qIQbuSePay1
vPj95Uedhf5ZypassrBaP8W5+Wd2rXMNUdtFWx2GKm8vUjVK4mLml4ki5ugf+UxN
tPG7QiSoXlebcY1Db02wxpCcgfWXoM3K6YB7IbDfjMzki0wsI7JzzSINES0owXJM
X4X0yl8Nlyx2hPaDFENpovAXUifdYrlxES988xvTxAlJrpYQx7gzKHl89BRNsiWk
RzyXrUT1Nz9daCYSpVXKFHW/EpMW/gArO9p/TtsoeHY/7xh9c14HiZ3Msh4eRYGm
duALoUfytABMOyc1H/29N8prRdZgtByv6YwNAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUO2laLk9xmgMMk9tar5WlPyTyuRAwHwYDVR0jBBgwFoAUEGsfPWSeWiWqE0DB
i9anwkzzavYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMDAzL0VHc2ZQV1NlV2lXcUUwREJpOWFud2t6emF2WS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VHc2ZQV1NlV2lXcUUwREJpOWFu
d2t6emF2WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDAwMy9PMmxhTGs5eG1nTU1rOXRhcjVXbFB5VHl1UkEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAIAEDoDANBgkqhkiG9w0BAQsFAAOCAQEAZVjv1dIzvyroaJ15vOY5
1/C35sIgL7ftyIz9ajt5/BuHQybbfWTbD4d+XyF6zw19HHWO3PktHLNEgqrwFSQY
NLLGk8QAs0UKByIr51b7nys/SdnnugaUZtohrqupvuL4Q3ord2q1XprccxhShHXP
MOMQkdjykxxXgZUieUvpXp6g59CdBosKAiPWv73KwOUlezczI3egsM3U6U0CILZX
90eWVKZkftGCuAv4iZ8BKK9gmnN9BUN4hKDwghqvyUP6goSh5FKmAua+3F+wlK8b
YGJdhGMW2zQU4rx5b9e8XUAmwU4RmumF0iBblq5kZftFbBsYbGvg2P1ITz2m6QdZ
Hw==
-----END CERTIFICATE-----
Generated at Fri Jan 9 22:26:19 2026 by rpki-client