This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/7PnBEKxcG9qPrpgadpm3YqGwNJI.roa
File:                     7PnBEKxcG9qPrpgadpm3YqGwNJI.roa (raw, json)
Hash identifier:          g6my71a/9IWwl14VIXdUWNptl8QPWrwCokfYtiw5/8M=
Subject key identifier:   EC:F9:C1:10:AC:5C:1B:DA:8F:AE:98:1A:76:99:B7:62:A1:B0:34:92
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       98
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/7PnBEKxcG9qPrpgadpm3YqGwNJI.roa
Signing time:             Thu 01 Jan 2026 01:34:47 +0000
ROA not before:           Thu 01 Jan 2026 01:34:47 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9622
IP address blocks:        202.91.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Jan  1 01:34:47 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=ECF9C110AC5C1BDA8FAE981A7699B762A1B03492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:42:74:11:d3:de:30:fa:c9:ea:9b:66:8b:
                    1f:3e:7d:67:f5:b3:dd:bd:96:ed:3f:32:76:23:b4:
                    52:f3:6d:1d:06:9e:f4:ae:ed:30:58:fe:96:15:4c:
                    85:fa:ca:21:0f:76:48:0a:2e:3a:88:69:6a:4d:61:
                    b4:ff:12:d0:ea:45:cb:f7:c9:13:a8:28:ca:ce:a3:
                    d5:14:8a:6e:24:20:f5:1b:a7:67:6e:ad:23:ea:eb:
                    3d:04:6e:54:63:e5:6d:05:96:13:0e:e1:3a:1b:cd:
                    09:47:c1:24:fd:41:63:56:f9:ea:61:f1:3a:2a:40:
                    46:11:83:8f:9f:15:46:ab:9c:1b:27:ae:1d:74:2c:
                    32:ca:9a:e8:9c:49:8c:c3:00:62:54:40:7f:64:08:
                    a8:5d:f9:4a:12:d8:12:a4:fe:c6:86:d9:b4:38:60:
                    d7:4d:75:26:74:ee:b8:54:1f:8f:8b:8e:2e:7b:1e:
                    c8:b4:3b:39:39:01:0b:ab:37:fc:29:a9:60:e3:f8:
                    92:49:1c:31:ad:3b:d2:32:10:a3:ed:12:57:bb:a6:
                    91:b3:47:25:51:ff:1a:8d:2e:88:e1:0d:49:d3:79:
                    b4:86:0a:bc:d4:28:76:06:2f:19:c9:52:5b:02:05:
                    55:f5:53:81:2f:30:f6:c7:91:bd:3e:03:ed:26:8c:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:C1:10:AC:5C:1B:DA:8F:AE:98:1A:76:99:B7:62:A1:B0:34:92
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/7PnBEKxcG9qPrpgadpm3YqGwNJI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:cb:35:71:0a:05:7c:ee:de:32:1a:42:40:6a:d0:66:b9:
         cb:d2:96:a1:6e:4e:6b:10:c4:d9:38:d8:30:84:96:08:62:4d:
         c3:1f:a4:af:d2:b3:6c:b5:43:ae:94:74:d5:8d:4b:30:81:fb:
         bc:f7:e8:df:5c:8b:17:d4:cd:91:f0:92:3c:4e:50:f9:f6:74:
         ba:29:17:7f:93:56:2a:6a:10:74:a3:86:d9:86:a7:b3:a9:66:
         63:ea:29:b7:3a:10:98:81:4b:39:87:71:55:0c:6a:c1:72:b2:
         88:06:29:cc:67:8b:4f:20:f5:7c:5b:62:b0:ba:40:78:7a:b4:
         27:fd:15:44:b7:74:0b:6d:aa:08:92:a7:02:42:f6:6a:e4:4f:
         ae:f4:1b:ec:f7:bd:ca:31:22:7e:b9:aa:fe:cd:64:e8:ab:fe:
         45:43:cc:f2:d8:01:5c:61:8c:f8:79:12:51:3a:43:7f:e7:d9:
         54:ca:2d:0a:22:d9:fc:32:a1:d4:6b:9f:a6:3c:b5:99:fe:19:
         46:49:d0:df:b3:4a:44:54:ed:d6:a3:3f:4a:17:9d:77:ff:4f:
         5f:26:64:d0:5d:3d:67:b7:04:c3:eb:a5:9d:7b:f5:eb:78:6d:
         6c:2e:73:83:fd:bb:43:0e:3f:fd:b8:3f:e6:97:d6:6d:0b:78:
         35:91:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:08:10 2026 by rpki-client