This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/X7U1wXddCWoSD_8FStOLSXZsiII.roa
File:                     X7U1wXddCWoSD_8FStOLSXZsiII.roa (raw, json)
Hash identifier:          HGEeuB2YrPb3gOFJQdkHEB8auaM19fb+27381RtIr/8=
Subject key identifier:   5F:B5:35:C1:77:5D:09:6A:12:0F:FF:05:4A:D3:8B:49:76:6C:88:82
Certificate issuer:       /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial:       3F
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/X7U1wXddCWoSD_8FStOLSXZsiII.roa
Signing time:             Thu 01 Jan 2026 01:37:57 +0000
ROA not before:           Thu 01 Jan 2026 01:37:57 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17683
IP address blocks:        2001:f98::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
        Validity
            Not Before: Jan  1 01:37:57 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=5FB535C1775D096A120FFF054AD38B49766C8882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:6a:d4:74:65:57:a3:9b:51:68:04:8d:c5:
                    6b:26:57:d4:b3:fc:68:07:8e:30:ca:13:83:38:e6:
                    73:5e:30:92:15:67:b6:0d:e1:69:65:41:74:75:e5:
                    87:32:8f:12:05:04:a7:bb:8b:19:d1:18:b2:de:4c:
                    c5:2a:4c:e5:1c:e6:f2:26:ee:4b:41:4f:09:ed:ff:
                    4e:70:c0:01:ea:b0:f7:1f:d3:79:c6:a4:03:e7:1c:
                    59:4e:78:3a:57:ec:6e:33:ae:c7:85:f2:5e:8d:03:
                    c4:60:62:8e:d1:12:a1:b4:76:43:9f:ea:60:9f:04:
                    28:36:64:41:2e:fb:f1:2b:57:75:49:63:ce:b9:19:
                    4c:4e:a4:6a:72:58:9b:8d:db:b7:2f:bb:d5:61:47:
                    5a:94:6c:84:63:de:ac:ac:2e:fe:4c:30:10:be:7b:
                    de:02:ae:d4:2e:15:cd:7d:ba:8e:6c:18:5c:11:cd:
                    4c:ff:d4:b2:c7:9c:f1:bb:dd:5e:9a:d5:1f:f7:40:
                    27:63:fd:ee:3e:c0:e5:90:87:4f:f8:5c:cd:92:96:
                    85:83:fb:69:ab:91:0e:de:9f:71:18:ab:59:b4:fb:
                    a4:dd:c4:eb:d8:a0:01:b8:e4:a9:8c:65:03:32:83:
                    c4:b0:05:dd:c4:5f:d4:af:a4:2c:71:7a:9b:0a:52:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B5:35:C1:77:5D:09:6A:12:0F:FF:05:4A:D3:8B:49:76:6C:88:82
            X509v3 Authority Key Identifier:
                keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/X7U1wXddCWoSD_8FStOLSXZsiII.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f98::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:dd:ce:f1:a1:64:b4:e1:0c:95:36:9f:02:3d:3e:c4:94:5e:
         4c:32:0a:f3:7f:59:86:b4:02:53:13:6e:25:da:e4:87:ec:0f:
         46:2f:6d:47:de:5e:ad:2c:19:e3:4c:e5:76:29:ca:db:c9:28:
         65:e9:bb:8d:e0:57:b6:b5:53:a9:8c:cc:9f:4f:57:d9:ec:8d:
         4d:90:3c:af:d5:60:a6:10:b3:37:bb:a0:e3:32:f1:94:54:09:
         6d:99:78:a6:55:db:8a:f8:dd:ca:d5:ff:42:be:cc:95:f1:a2:
         f4:4e:d6:31:4b:80:04:30:14:e4:0f:28:03:56:13:ed:46:e8:
         a0:d7:e9:40:97:c3:a1:26:c5:b1:82:e9:ba:a5:a0:2c:3f:89:
         21:c0:d6:49:d0:0e:7f:69:36:34:45:4f:63:bd:a6:9e:b7:1f:
         12:a1:6c:ff:b1:c5:29:6c:69:07:91:d5:50:0f:6a:c4:9f:1f:
         ac:15:a3:09:4b:b2:c0:86:55:48:b3:e3:02:c6:60:c2:75:90:
         8d:79:fb:ee:a4:05:a8:84:63:c8:29:ac:6f:c2:ee:8e:b8:6a:
         95:39:1a:6c:29:51:03:18:8f:9b:23:fe:72:22:88:39:e9:cd:
         54:6c:f5:9e:80:92:3c:b4:e8:12:5a:f9:9b:e6:9c:a0:71:35:
         56:96:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 17:39:26 2026 by rpki-client