This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/_8pxt6Ikot-3aF4-1iRmAT5rZp0.roa
File:                     _8pxt6Ikot-3aF4-1iRmAT5rZp0.roa (raw, json)
Hash identifier:          Q5FWG4OGk9Wyfz8D6RWiukIR759cL6qwGBvVJsCe/Rk=
Subject key identifier:   FF:CA:71:B7:A2:24:A2:DF:B7:68:5E:3E:D6:24:66:01:3E:6B:66:9D
Certificate issuer:       /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial:       6E
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/_8pxt6Ikot-3aF4-1iRmAT5rZp0.roa
Signing time:             Thu 01 Jan 2026 01:29:48 +0000
ROA not before:           Thu 01 Jan 2026 01:29:48 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     55392
IP address blocks:        2409:250::/28 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
        Validity
            Not Before: Jan  1 01:29:48 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=FFCA71B7A224A2DFB7685E3ED62466013E6B669D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:f2:c3:68:e7:90:2c:51:32:82:51:6a:e5:
                    b8:c5:7f:e3:d1:7b:0f:b7:f9:3e:51:47:b2:c4:a6:
                    b6:ac:c8:8f:15:ef:e7:f4:84:f2:54:5a:d1:e4:57:
                    96:b7:a2:42:4c:bd:f1:7a:c4:f4:9f:54:81:18:58:
                    b9:aa:64:2b:13:75:fc:7f:50:1f:0b:36:52:27:59:
                    c5:2b:16:73:36:33:0c:f0:74:2c:e2:09:fb:f0:72:
                    ff:bb:cf:b3:25:8a:f3:d6:2e:76:c9:5e:15:f3:fa:
                    db:9a:11:68:71:0d:1f:0c:d8:b5:ca:98:c3:06:d4:
                    ef:27:47:80:43:10:05:74:53:bc:ef:36:db:14:e7:
                    a0:f5:2b:aa:17:80:fd:da:89:0c:da:99:be:cf:a4:
                    f4:be:cf:8b:cd:bc:e6:9a:72:04:4d:e0:e3:d3:e5:
                    c3:d4:26:ba:67:9a:b9:48:25:23:6e:f9:b7:2c:fd:
                    12:7a:bc:f0:42:1b:30:fe:c3:9a:97:5e:e7:3d:ab:
                    d2:35:17:19:33:1b:68:4c:70:9a:e9:30:e2:5a:75:
                    5c:a8:d2:cf:cb:59:13:68:78:91:06:de:80:ed:7d:
                    de:79:0b:0f:66:ac:d4:60:a1:83:c0:45:ae:06:80:
                    b3:55:21:35:16:8d:be:cf:c9:ba:c7:52:1e:60:bb:
                    12:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CA:71:B7:A2:24:A2:DF:B7:68:5E:3E:D6:24:66:01:3E:6B:66:9D
            X509v3 Authority Key Identifier:
                keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/_8pxt6Ikot-3aF4-1iRmAT5rZp0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409:250::/28

    Signature Algorithm: sha256WithRSAEncryption
         05:d8:88:c3:44:77:71:cf:8a:e7:19:87:0f:f7:b9:33:31:23:
         e6:b7:3d:2a:43:ff:6d:45:f7:1e:a9:c7:95:4a:10:a4:1c:2d:
         a7:99:b1:cd:a2:d1:d3:a6:6a:17:60:ef:98:6e:90:f0:59:99:
         b0:34:ae:59:67:64:e3:eb:23:b6:ad:0d:bc:be:8a:f3:a4:c7:
         47:a2:2c:8f:23:9d:9c:09:0c:06:a5:b0:b4:24:4a:98:c2:a4:
         44:50:c5:d8:0a:89:90:f0:c8:39:a4:4d:6f:a8:7a:a9:22:b2:
         68:41:36:a2:13:2c:a6:10:11:39:8d:a4:52:73:43:6e:15:3d:
         b7:f8:03:97:76:76:a1:f6:44:67:bd:5b:48:a5:eb:b4:03:18:
         7b:61:e7:32:6a:b9:72:22:ff:aa:fd:00:34:7f:a2:31:db:d1:
         9a:d6:e3:59:8b:97:80:03:8b:b0:74:64:15:9d:ac:b9:e4:8f:
         18:6e:00:9a:3f:4c:33:76:4c:60:ab:63:c3:fd:64:57:8b:0a:
         12:f0:30:58:3c:e9:12:ab:d0:00:6d:c9:6f:75:6b:ed:dc:79:
         48:a2:02:89:8e:46:79:19:7c:31:00:6f:37:9d:4f:2e:bd:2c:
         41:c7:44:e3:c9:4d:47:89:74:01:58:cb:6d:34:28:d5:6f:bc:
         fd:ee:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 22:50:34 2026 by rpki-client