This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30197/HtzX7HlEvEg5yuUPzwUki7hpB6E.roa
File:                     HtzX7HlEvEg5yuUPzwUki7hpB6E.roa (raw, json)
Hash identifier:          AWXaJwUaZK+T9f/lLIAEg5GPY7QT6XLu40evAFcs5X8=
Subject key identifier:   1E:DC:D7:EC:79:44:BC:48:39:CA:E5:0F:CF:05:24:8B:B8:69:07:A1
Certificate issuer:       /CN=B5792779A712895887166267C4BD9E7A7D84C816
Certificate serial:       3F
Authority key identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/HtzX7HlEvEg5yuUPzwUki7hpB6E.roa
Signing time:             Thu 01 Jan 2026 01:38:00 +0000
ROA not before:           Thu 01 Jan 2026 01:38:00 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     55385
IP address blocks:        2401:8b00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5792779A712895887166267C4BD9E7A7D84C816
        Validity
            Not Before: Jan  1 01:38:00 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=1EDCD7EC7944BC4839CAE50FCF05248BB86907A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:1c:7a:51:58:eb:f0:ef:ce:1a:f0:98:8c:
                    12:c1:60:9f:86:1b:63:53:2e:d0:97:1a:d7:8f:4a:
                    ed:43:52:7c:51:0a:7e:65:71:47:b7:3c:fd:ac:3a:
                    a7:bc:62:de:c4:3e:e5:21:86:d8:e2:47:c6:f5:49:
                    ba:f3:59:9c:73:ed:c4:a1:87:93:00:5c:30:ac:91:
                    70:1d:43:73:79:e0:d4:45:d5:ce:12:f0:5c:79:8f:
                    3e:65:54:f4:37:96:4c:b5:9f:17:bb:ce:f1:51:f7:
                    32:f3:3e:8e:23:2f:2b:db:7a:70:44:05:4f:3c:80:
                    9b:34:aa:7c:ec:cf:94:2c:47:85:da:0e:d5:24:4b:
                    28:ad:74:c3:0a:0a:2e:bf:5e:c4:49:1d:39:f2:ee:
                    ef:08:23:31:c5:be:ea:26:a5:11:64:83:b2:31:47:
                    e9:77:86:c6:ba:c9:61:b9:e4:c5:c6:69:e8:84:50:
                    3a:a3:68:03:db:ea:07:6d:04:40:8d:7b:b4:ea:19:
                    fa:79:a6:19:54:28:63:21:8f:93:33:8f:e3:6f:4a:
                    50:59:69:ee:06:c1:ff:3a:8b:c2:f8:0e:4f:c8:28:
                    c8:01:80:c4:8b:d2:0f:66:ee:5f:a8:c8:af:8e:e4:
                    45:ee:d7:5e:5c:17:02:f2:f1:f0:d2:76:ce:ec:35:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DC:D7:EC:79:44:BC:48:39:CA:E5:0F:CF:05:24:8B:B8:69:07:A1
            X509v3 Authority Key Identifier:
                keyid:B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/HtzX7HlEvEg5yuUPzwUki7hpB6E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:07:28:c4:9a:a1:c7:ce:bf:e7:7c:b7:95:99:95:db:99:
         94:47:40:42:3b:48:73:ab:f4:e1:a6:ef:76:7e:8a:bf:c4:f5:
         c8:ed:b1:66:b7:68:29:36:15:67:4a:fb:14:93:16:e8:13:66:
         b4:7c:a7:64:37:08:43:37:61:95:28:25:c6:55:81:7f:d5:15:
         84:40:65:ac:7c:e1:69:1e:c1:eb:b7:83:fe:d5:8d:67:7b:9b:
         26:a9:9b:4f:df:a0:65:25:6f:5d:d4:25:2d:65:ae:26:3c:61:
         6d:20:a8:68:f2:f4:0b:d5:5d:71:56:c7:53:82:f4:d4:66:d3:
         48:c1:25:e7:40:e9:62:60:c4:6e:1b:ef:f3:93:c7:b5:f1:2a:
         57:dc:05:4a:7c:0b:f5:cc:3c:84:85:7b:19:97:f2:5e:b0:57:
         03:92:2a:42:ec:0c:5f:36:2d:b1:28:c2:58:e6:ec:77:43:0d:
         2e:dd:7b:8e:c4:b5:90:71:34:ef:8b:13:95:7f:3d:ce:23:76:
         22:35:db:56:ad:aa:29:3f:2e:fe:b6:e0:e1:33:57:18:42:b0:
         85:04:b4:f4:28:69:33:5e:8b:b5:a9:39:8c:95:6b:58:d6:8a:
         7f:0a:4a:92:5e:13:b3:26:8a:4f:46:70:0c:9f:c4:cd:3a:82:
         64:68:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:08 2026 by rpki-client