This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30193/mPo42VPLC6FyCiuo5BUEOcrW2Jg.roa
File:                     mPo42VPLC6FyCiuo5BUEOcrW2Jg.roa (raw, json)
Hash identifier:          kO2gSseSdIvKolBFpM3umkRsFFgKGOtj3gA8xhH9cYk=
Subject key identifier:   98:FA:38:D9:53:CB:0B:A1:72:0A:2B:A8:E4:15:04:39:CA:D6:D8:98
Certificate issuer:       /CN=59D1C2E49F90761EB302F05A991871CC5B1CDB07
Certificate serial:       62
Authority key identifier: 59:D1:C2:E4:9F:90:76:1E:B3:02:F0:5A:99:18:71:CC:5B:1C:DB:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/mPo42VPLC6FyCiuo5BUEOcrW2Jg.roa
Signing time:             Thu 01 Jan 2026 01:30:47 +0000
ROA not before:           Thu 01 Jan 2026 01:30:47 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9363
IP address blocks:        2401:3b00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D1C2E49F90761EB302F05A991871CC5B1CDB07
        Validity
            Not Before: Jan  1 01:30:47 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=98FA38D953CB0BA1720A2BA8E4150439CAD6D898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:81:27:09:18:9b:63:c7:df:9f:c4:0b:6f:
                    b2:5d:03:a7:12:bf:75:44:ed:b0:a8:21:7b:fd:af:
                    c8:76:09:7d:dd:b6:47:fa:8b:12:95:ec:1a:07:b1:
                    6b:55:e9:2a:0b:a8:c1:a5:20:7b:0a:21:27:8f:14:
                    cc:31:99:c5:2d:59:b4:f6:26:7b:6f:8e:4b:14:19:
                    f2:43:e7:ac:b8:4d:70:39:7a:7e:22:e7:14:44:d5:
                    90:38:d8:31:a9:ff:ec:b3:4b:66:e1:56:52:cf:9c:
                    09:50:22:82:f7:d2:d2:93:8d:18:6c:d5:a5:8e:30:
                    1b:99:70:3a:51:2c:2a:61:3a:ca:c1:87:38:c1:21:
                    ad:28:89:8c:54:50:87:eb:d9:1e:2a:05:7d:f0:2a:
                    0d:06:5f:11:62:9d:76:57:c4:97:27:8c:d5:a4:83:
                    8d:4b:2f:80:66:de:26:92:71:ac:2b:8b:1d:60:de:
                    70:98:1a:f8:f1:12:e9:ad:8f:b5:71:be:b6:9a:ca:
                    2c:39:1b:61:a8:f3:5e:3d:b3:57:94:d5:d1:de:4b:
                    93:d6:70:e7:25:1f:31:ad:9d:b7:2d:95:dc:9b:8f:
                    b6:9b:39:75:0f:9c:83:7e:7c:16:d3:83:9f:a9:36:
                    61:d0:bd:86:e7:e2:51:d4:45:8e:9c:a5:83:e1:25:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FA:38:D9:53:CB:0B:A1:72:0A:2B:A8:E4:15:04:39:CA:D6:D8:98
            X509v3 Authority Key Identifier:
                keyid:59:D1:C2:E4:9F:90:76:1E:B3:02:F0:5A:99:18:71:CC:5B:1C:DB:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/mPo42VPLC6FyCiuo5BUEOcrW2Jg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:cd:12:fb:7d:25:83:0c:4c:f6:cc:a2:39:8a:ef:cf:e3:7a:
         d8:bb:46:f3:a9:d8:6b:50:a0:83:b9:84:01:2d:8f:a2:14:94:
         a1:37:b2:4e:ea:d9:58:d6:63:3f:66:3d:d5:a5:51:e1:60:3a:
         ff:e7:a6:a0:e5:d6:45:be:3f:57:14:cc:17:fa:30:09:7e:69:
         78:84:ca:8c:fe:ce:fe:86:4b:7a:ab:66:a1:f2:bc:bb:ea:e8:
         35:48:0a:e1:e1:72:4f:cc:6a:5e:c6:aa:bf:61:ac:77:41:fd:
         d8:30:e4:a6:b5:9a:15:50:83:5b:8b:b4:06:3e:03:f0:2b:74:
         22:16:9a:e7:3b:c0:2b:2c:37:7a:85:4b:44:bb:5b:0c:e5:d7:
         02:1e:ef:14:ea:77:6b:e4:fd:4c:ad:85:2f:1b:b9:57:55:8b:
         91:05:77:8f:59:e5:4a:37:2a:ad:fe:26:7c:32:31:e3:54:fc:
         75:67:29:b3:1b:06:96:e3:08:26:87:99:8b:dc:d1:98:63:bc:
         6e:d1:27:ba:e5:be:34:cf:50:a7:a5:91:c2:7e:9b:79:94:50:
         c2:34:1c:83:36:b3:a8:b9:75:9d:50:87:f0:ba:af:59:e9:e7:
         ef:a8:18:a3:de:bb:72:3d:9c:ea:d1:5c:13:3e:e8:92:bc:40:
         e6:29:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:22:26 2026 by rpki-client