This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30155/GYdORLRynrUzBH4eolmjVcVUHh8.roa
File:                     GYdORLRynrUzBH4eolmjVcVUHh8.roa (raw, json)
Hash identifier:          053rJdz947dVI8ZVeNMfh0KQTt0DCkEMYzNKzJBdPe4=
Subject key identifier:   19:87:4E:44:B4:72:9E:B5:33:04:7E:1E:A2:59:A3:55:C5:54:1E:1F
Certificate issuer:       /CN=540D04AB978801867F711546D16FB476A278FC9A
Certificate serial:       6E
Authority key identifier: 54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/GYdORLRynrUzBH4eolmjVcVUHh8.roa
Signing time:             Thu 01 Jan 2026 01:29:46 +0000
ROA not before:           Thu 01 Jan 2026 01:29:46 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     55391
IP address blocks:        2409:10::/28 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D04AB978801867F711546D16FB476A278FC9A
        Validity
            Not Before: Jan  1 01:29:46 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=19874E44B4729EB533047E1EA259A355C5541E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:74:cb:f4:72:30:53:1c:f4:2d:c2:1c:92:
                    18:af:56:23:4d:97:ee:c0:1a:71:e6:a5:bd:5c:1e:
                    9e:1f:c9:0e:e7:9d:39:3b:f4:7c:ed:b4:05:14:70:
                    df:fc:63:cc:c6:54:12:06:2b:03:13:06:3b:de:9d:
                    df:17:ae:d5:3b:aa:5e:52:7b:c8:bf:46:26:77:2e:
                    e4:b7:7a:e6:18:ca:04:69:e3:0d:d3:0c:53:fc:be:
                    87:2e:a4:95:52:0e:db:91:b8:22:0f:12:87:88:da:
                    2d:9d:56:4f:06:54:5b:02:20:ca:41:c1:fb:5e:d9:
                    24:0b:c6:b6:e0:86:00:f2:ea:f2:3a:83:ed:15:37:
                    50:fe:4c:0e:64:8a:86:f4:c0:f1:cf:1b:d5:f0:f5:
                    a1:4c:b8:73:04:4b:72:12:6e:36:36:c5:be:02:c9:
                    42:5e:2b:76:e7:77:e4:8d:33:f7:4f:22:e7:ac:9c:
                    f0:cb:a4:52:f4:e9:49:7d:71:4b:da:d7:17:74:90:
                    bc:8a:a2:8b:31:1d:e2:b2:dd:1a:f0:ec:e3:25:fa:
                    94:ba:fb:7b:86:36:2a:59:ba:8c:f6:5b:53:f3:44:
                    35:13:3c:01:8d:96:62:47:7e:4d:86:2d:18:71:68:
                    46:e5:c6:ea:3e:a5:7d:cf:46:f8:69:0e:d2:50:eb:
                    c8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:4E:44:B4:72:9E:B5:33:04:7E:1E:A2:59:A3:55:C5:54:1E:1F
            X509v3 Authority Key Identifier:
                keyid:54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/GYdORLRynrUzBH4eolmjVcVUHh8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409:10::/28

    Signature Algorithm: sha256WithRSAEncryption
         6e:ce:21:48:51:6c:bf:69:79:2e:7e:19:6b:1e:31:62:60:1c:
         d4:c1:42:28:c5:3e:b1:de:36:39:f9:3c:7b:64:ca:0c:fe:bf:
         23:53:30:fe:8b:5d:13:1f:b0:be:ba:3b:22:7f:73:58:9c:05:
         61:4c:ba:a5:b4:a8:b9:4f:2b:0b:13:5b:74:ef:46:01:9c:0b:
         ad:2c:d6:e8:c1:cb:2b:21:46:68:5e:d1:89:4e:9f:c0:86:27:
         6e:28:64:01:2d:5c:ec:55:ae:10:5e:0a:dd:58:af:f5:a3:a3:
         0b:ae:8c:8b:71:59:be:bb:8d:d5:a2:a4:53:3c:96:f2:8a:e0:
         f6:c3:14:ee:37:ca:58:7b:1b:ff:6a:b1:75:3f:aa:9e:c5:c0:
         b5:a3:80:01:94:2a:38:cb:6c:ee:fb:6c:db:c1:1c:df:92:6f:
         9d:2a:08:08:37:4e:5d:3c:66:6e:f4:51:f3:86:9d:6a:a6:83:
         be:10:3b:ef:e1:2e:a7:c9:8c:36:81:ee:71:5e:05:90:16:1c:
         e9:d5:3f:32:b4:f7:1b:95:04:df:81:71:af:82:da:e4:7a:5f:
         0d:71:25:8f:84:69:7d:97:b3:2a:75:fe:64:63:80:90:4f:14:
         e5:6e:41:88:c2:9e:78:26:36:54:e1:16:7c:e2:01:47:f6:10:
         49:e1:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:03:01 2026 by rpki-client