This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/GuImz6n15TZRKw9PST-SDAlYfvM.roa
File:                     GuImz6n15TZRKw9PST-SDAlYfvM.roa (raw, json)
Hash identifier:          nzUkAXNlwIiF0YYCAIWghEG9oKXOMCQHSCX3+Q1RD3M=
Subject key identifier:   1A:E2:26:CF:A9:F5:E5:36:51:2B:0F:4F:49:3F:92:0C:09:58:7E:F3
Certificate issuer:       /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial:       19
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/GuImz6n15TZRKw9PST-SDAlYfvM.roa
Signing time:             Mon 08 Dec 2025 00:03:24 +0000
ROA not before:           Mon 08 Dec 2025 00:03:24 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2509
IP address blocks:        2001:cd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
        Validity
            Not Before: Dec  8 00:03:24 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=1AE226CFA9F5E536512B0F4F493F920C09587EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:99:c8:2a:27:e2:76:fc:2e:f5:dd:74:cf:
                    3c:19:3d:4e:4d:62:c3:92:1a:fb:b2:83:94:25:1c:
                    17:2d:5f:3d:5f:39:36:17:d1:c2:06:f5:8b:a8:a5:
                    0b:15:72:46:9c:41:b6:90:fc:d8:c4:cb:cc:8a:33:
                    1b:49:dc:cf:d9:17:ea:5e:ce:22:4e:83:ad:25:74:
                    5e:11:2c:1d:31:3e:1c:26:d3:42:d8:34:02:bb:36:
                    eb:c1:d8:5e:6d:62:fd:8e:7b:ef:9b:63:ae:14:7c:
                    4b:19:27:7b:d9:17:f4:4c:3f:c6:01:f2:27:4d:22:
                    e4:9b:53:d5:6b:9a:e4:ab:d8:10:66:63:10:a3:2b:
                    f3:07:7f:73:24:ea:95:28:e9:7a:47:54:d9:50:9d:
                    86:ff:3a:d2:f8:58:40:2a:92:2b:0d:27:57:b2:25:
                    41:d7:c5:af:4f:84:92:2d:cd:24:27:c3:74:bf:a6:
                    2a:62:91:8e:e7:9b:3e:84:16:ae:9b:57:34:a0:7c:
                    9d:7c:a6:45:ee:c1:8c:a7:f0:16:cf:bd:9b:e6:d3:
                    1e:29:6b:6d:73:b7:a3:b9:a7:51:43:a1:f0:18:a4:
                    3d:97:50:a1:ef:7c:d6:83:c0:a1:2c:b9:ff:24:a1:
                    f0:65:11:96:7d:a6:a8:ad:8f:2c:8f:71:97:a7:8d:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E2:26:CF:A9:F5:E5:36:51:2B:0F:4F:49:3F:92:0C:09:58:7E:F3
            X509v3 Authority Key Identifier:
                keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/GuImz6n15TZRKw9PST-SDAlYfvM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:30:93:c5:ff:a8:98:f0:c0:75:c2:2e:d5:88:06:a3:42:
         f0:3e:a1:15:69:d0:98:6e:0b:af:69:58:1d:4a:3b:9a:79:4b:
         a4:60:1d:4c:ec:ac:2f:87:9d:91:cf:8b:4b:41:75:fc:fa:b7:
         76:dc:3a:eb:59:b4:19:52:33:2a:7e:7a:9a:3e:61:be:15:20:
         f2:c7:c4:ce:2e:98:3f:2e:65:0e:3c:79:35:e5:48:09:f2:32:
         71:32:89:8d:cd:f8:58:a1:f6:be:e2:cf:68:d6:fa:8b:51:53:
         5c:ac:00:f9:3a:67:88:20:82:a2:a1:0b:9c:53:e7:78:d6:40:
         50:ae:bb:2f:a1:26:c6:ac:24:62:75:1a:ac:3a:23:0e:f2:a9:
         ba:aa:4b:07:16:30:43:42:da:f2:ea:dd:47:63:7a:ad:40:c3:
         f9:05:2d:f4:56:a6:ac:34:dc:e2:00:c6:59:47:10:c7:f8:0d:
         1d:a4:2b:0a:8f:5a:3a:8f:1d:23:65:d5:c3:54:d3:c3:d3:ad:
         8b:fe:74:78:30:38:ea:33:75:5a:d0:0b:09:ff:e1:e1:c6:3b:
         ce:c3:9e:7f:90:1c:b2:68:39:5c:51:df:7d:db:96:e1:f2:1a:
         f6:c8:d4:8b:2d:01:15:53:d5:cd:45:15:3d:c8:05:af:1b:29:
         0f:50:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:03:01 2026 by rpki-client