This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/PN5XISFfLYpR1cmhD13RxExD-dk.roa
File:                     PN5XISFfLYpR1cmhD13RxExD-dk.roa (raw, json)
Hash identifier:          AjcQcv15PDKqTHJtC0a5Rtm2ZzJS8IL2Y5wfpUKFBXA=
Subject key identifier:   3C:DE:57:21:21:5F:2D:8A:51:D5:C9:A1:0F:5D:D1:C4:4C:43:F9:D9
Certificate issuer:       /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial:       71
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/PN5XISFfLYpR1cmhD13RxExD-dk.roa
Signing time:             Thu 01 Jan 2026 01:29:43 +0000
ROA not before:           Thu 01 Jan 2026 01:29:43 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2001:7fa:7::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
        Validity
            Not Before: Jan  1 01:29:43 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3CDE5721215F2D8A51D5C9A10F5DD1C44C43F9D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:53:c1:fc:9f:74:7a:fa:f9:c7:b4:e1:f4:
                    ce:8f:ca:53:aa:57:34:5d:88:c3:86:58:b3:48:e9:
                    b0:31:98:ed:01:cd:c9:bd:f3:3d:10:64:21:69:1d:
                    60:3b:a8:ca:a7:8f:d9:6e:1b:f6:4d:a0:d2:27:28:
                    d0:43:d9:29:fd:b1:6c:ac:37:65:7d:75:71:83:6a:
                    8f:5e:3c:b3:ba:b2:6e:09:9c:d6:68:c4:0a:81:8b:
                    87:4b:b3:7b:94:04:bb:62:85:bf:9c:50:32:2d:4a:
                    2c:da:df:a5:08:9c:c8:f8:ce:60:32:ca:41:08:7b:
                    d9:42:3e:76:b6:64:d2:fd:cf:d2:7a:bb:b6:8a:66:
                    fc:93:22:1d:ba:f4:11:39:d1:76:24:b5:00:25:ee:
                    50:37:e4:8b:4c:b4:c6:7d:b0:f7:0a:86:d1:3d:7c:
                    8d:94:24:b3:24:33:f9:0d:e9:3f:dd:13:1c:37:00:
                    27:91:08:81:90:9c:21:df:52:ce:b3:d1:40:63:27:
                    8c:78:d5:e9:89:54:e0:65:9f:e6:63:c0:9e:85:3f:
                    e9:34:18:79:94:2e:cf:f9:ca:43:09:21:19:41:97:
                    57:90:9b:14:cd:69:49:44:7c:5d:03:a3:16:b5:a2:
                    36:90:8c:f8:37:c8:e9:b6:00:f9:31:08:d7:9a:7b:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DE:57:21:21:5F:2D:8A:51:D5:C9:A1:0F:5D:D1:C4:4C:43:F9:D9
            X509v3 Authority Key Identifier:
                keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/PN5XISFfLYpR1cmhD13RxExD-dk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:bc:f2:cc:67:fb:f7:5b:3f:92:92:c9:5b:ea:f6:ac:4b:
         63:cb:41:8a:27:fb:e6:71:71:3e:f0:e1:a5:44:89:d5:e6:ba:
         42:3b:5f:b1:21:06:33:e4:65:7a:bd:3c:ec:ef:39:80:d3:52:
         3a:d2:96:62:43:b2:73:08:0c:f1:38:33:33:87:1e:cd:fd:80:
         ff:ed:53:c8:4e:27:20:a6:dd:80:43:a4:23:b4:cb:19:b0:b7:
         d5:2a:7b:2e:43:b1:b8:32:2a:c4:80:c3:1c:5c:2d:0b:ce:0e:
         7e:c4:ae:fa:34:79:eb:0b:e1:00:6d:d7:96:a7:02:87:ac:b6:
         8c:16:d3:62:ab:3f:4a:18:19:f3:5a:b6:2f:19:96:94:83:9c:
         bb:4e:c6:dd:07:f1:05:3f:ed:9b:ab:c1:af:e0:36:ca:65:e1:
         9f:27:81:d7:6c:66:55:34:4c:32:80:a0:d4:ec:9c:b1:e4:79:
         ea:c7:23:6e:05:5c:3f:26:a2:7d:6d:91:dd:da:93:59:76:4e:
         4b:f0:61:1a:49:c4:75:94:95:ac:36:48:d2:44:95:81:de:62:
         39:bb:89:78:fc:00:c4:26:93:70:76:5d:8a:24:26:4a:c3:ec:
         12:e4:07:40:e8:7d:13:26:69:26:78:b6:26:b3:6e:82:b3:5a:
         8b:d2:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:58:30 2026 by rpki-client