This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/W72b37WOXXy8Xi4E7meUIArKkmE.roa
File:                     W72b37WOXXy8Xi4E7meUIArKkmE.roa (raw, json)
Hash identifier:          XU1jAB6AorAx6ZG/65dv8Huwy4cQb7AZcgpOi9BAXY8=
Subject key identifier:   5B:BD:9B:DF:B5:8E:5D:7C:BC:5E:2E:04:EE:67:94:20:0A:CA:92:61
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       91
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/W72b37WOXXy8Xi4E7meUIArKkmE.roa
Signing time:             Thu 01 Jan 2026 01:29:50 +0000
ROA not before:           Thu 01 Jan 2026 01:29:50 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb04::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Jan  1 01:29:50 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=5BBD9BDFB58E5D7CBC5E2E04EE6794200ACA9261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:90:a3:11:33:2b:20:74:fe:3d:e7:40:80:
                    fe:08:4e:93:12:ee:2b:9b:ba:61:c0:a1:e4:7f:94:
                    f9:60:5a:c6:af:af:28:62:0d:92:a9:7e:16:ca:73:
                    c5:ef:64:cc:9f:ed:f3:07:59:08:b7:5b:e8:e3:6d:
                    9f:e7:15:54:2b:77:92:8e:5c:d5:e8:59:01:10:47:
                    62:3e:6e:b6:18:dd:40:d4:7d:47:ce:e4:96:20:20:
                    25:19:33:eb:5f:db:ad:fb:bf:a1:9e:ed:05:f9:41:
                    82:40:d0:0a:58:84:fc:17:f2:f8:ea:75:33:88:d7:
                    08:ae:a0:80:47:05:ca:cd:22:a4:46:7f:f9:a2:e0:
                    fd:7a:54:fa:6d:82:c2:52:19:de:76:86:67:7f:3b:
                    c3:c4:5e:bf:4c:01:dd:39:a0:52:4d:de:8d:ae:b6:
                    31:dc:02:03:ea:0b:04:93:9d:ac:d5:92:c6:9c:50:
                    c0:6e:45:c1:e9:93:f8:29:fa:e5:20:74:93:ec:c5:
                    18:5c:e5:74:13:83:7c:4c:b3:41:93:ad:80:8c:c5:
                    86:95:97:b8:0e:c0:fd:08:b7:6b:51:90:ca:2f:3f:
                    e0:fe:89:e3:e8:0c:74:82:85:e1:0f:c1:8b:02:1b:
                    07:05:0e:ff:37:33:c4:3b:d9:61:71:4d:bb:16:92:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BD:9B:DF:B5:8E:5D:7C:BC:5E:2E:04:EE:67:94:20:0A:CA:92:61
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/W72b37WOXXy8Xi4E7meUIArKkmE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb04::/30

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:89:23:f4:8f:10:47:b2:cb:8d:e3:21:da:ff:96:79:f8:
         e9:d2:c7:c0:67:8c:00:47:0f:7b:e9:0e:0c:f4:5c:35:b0:65:
         34:6a:0c:69:a0:98:e8:d2:8d:1e:92:bf:4e:62:33:e8:1c:53:
         fd:b3:3a:de:0b:10:57:37:0f:0b:36:2b:3f:04:03:ab:68:a2:
         a1:5c:a5:a4:70:5b:ff:6b:c9:61:f8:92:b5:ef:19:23:d6:ca:
         06:77:c0:0f:75:e9:c6:ea:75:16:68:85:39:b1:ce:85:80:66:
         59:64:16:75:68:8b:e2:e9:32:44:c8:e6:b8:dd:78:69:b8:02:
         1f:c0:44:aa:eb:de:90:b0:ed:9f:4a:a0:90:37:90:f6:26:69:
         b4:fa:ae:b2:6d:b5:e6:fa:86:5a:fd:02:f7:2b:ef:1a:0d:89:
         69:48:47:5b:50:e0:33:a5:70:73:b8:ae:35:91:dd:7e:90:82:
         52:4b:ba:aa:4e:c0:6a:5c:c4:de:ac:72:36:68:36:71:10:c5:
         a3:f8:23:76:42:4b:dd:26:bb:04:a6:95:2d:d7:0a:53:cb:61:
         2f:61:d8:96:c3:95:36:90:81:3a:16:a4:aa:dd:e8:a6:3d:55:
         cd:e4:1e:7c:a7:9c:24:12:5f:ba:19:ca:12:34:32:ff:fd:f3:
         f9:79:9d:19
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDEw
RDg4NjU4MkJEREY0OEIwNDE4NTFDMzhDMEI2MzIxMTVGNUMyMTAeFw0yNjAxMDEw
MTI5NTBaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVCQkQ5QkRGQjU4RTVE
N0NCQzVFMkUwNEVFNjc5NDIwMEFDQTkyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/mJCjETMrIHT+PedAgP4ITpMS7iubumHAoeR/lPlgWsavryhi
DZKpfhbKc8XvZMyf7fMHWQi3W+jjbZ/nFVQrd5KOXNXoWQEQR2I+brYY3UDUfUfO
5JYgICUZM+tf2637v6Ge7QX5QYJA0ApYhPwX8vjqdTOI1wiuoIBHBcrNIqRGf/mi
4P16VPptgsJSGd52hmd/O8PEXr9MAd05oFJN3o2utjHcAgPqCwSTnazVksacUMBu
RcHpk/gp+uUgdJPsxRhc5XQTg3xMs0GTrYCMxYaVl7gOwP0It2tRkMovP+D+iePo
DHSCheEPwYsCGwcFDv83M8Q72WFxTbsWkmi9AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUW72b37WOXXy8Xi4E7meUIArKkmEwHwYDVR0jBBgwFoAU0Q2IZYK930iwQYUc
OMC2MhFfXCEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMjI4LzBRMklaWUs5MzBpd1FZVWNPTUMyTWhGZlhDRS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBRMklaWUs5MzBpd1FZVWNPTUMy
TWhGZlhDRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDIyOC9XNzJiMzdXT1hYeThYaTRFN21lVUlBcktrbUUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUCJAa7BDANBgkqhkiG9w0BAQsFAAOCAQEANm2JI/SPEEeyy43jIdr/
lnn46dLHwGeMAEcPe+kODPRcNbBlNGoMaaCY6NKNHpK/TmIz6BxT/bM63gsQVzcP
CzYrPwQDq2iioVylpHBb/2vJYfiSte8ZI9bKBnfAD3Xpxup1FmiFObHOhYBmWWQW
dWiL4ukyRMjmuN14abgCH8BEquvekLDtn0qgkDeQ9iZptPqusm215vqGWv0C9yvv
Gg2JaUhHW1DgM6Vwc7iuNZHdfpCCUku6qk7AalzE3qxyNmg2cRDFo/gjdkJL3Sa7
BKaVLdcKU8thL2HYlsOVNpCBOhakqt3opj1VzeQefKecJBJfuhnKEjQy//3z+Xmd
GQ==
-----END CERTIFICATE-----
Generated at Fri Jan 9 23:54:08 2026 by rpki-client