This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/IBhh9fhhn61ktkfL1uxf4_f4FTA.roa
File:                     IBhh9fhhn61ktkfL1uxf4_f4FTA.roa (raw, json)
Hash identifier:          jrzChAyALyONwNoy0fK1oQ38h4bBkqqqf44EhdMTbnw=
Subject key identifier:   20:18:61:F5:F8:61:9F:AD:64:B6:47:CB:D6:EC:5F:E3:F7:F8:15:30
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       9C
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/IBhh9fhhn61ktkfL1uxf4_f4FTA.roa
Signing time:             Thu 01 Jan 2026 01:34:49 +0000
ROA not before:           Thu 01 Jan 2026 01:34:49 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.96.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Jan  1 01:34:49 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=201861F5F8619FAD64B647CBD6EC5FE3F7F81530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:a5:ce:aa:d4:08:64:11:96:ff:90:9e:8f:
                    69:c4:4d:f8:74:d9:a0:26:fe:c0:b8:94:36:2c:ef:
                    86:25:5d:d2:a9:38:5f:3f:b9:3c:76:d4:d6:81:5f:
                    0a:a0:73:fe:ee:b4:ab:c2:8a:83:48:76:bf:72:54:
                    6c:80:ea:34:ce:71:3f:27:07:cb:70:1e:fd:7b:40:
                    16:91:8e:23:6e:93:c6:49:36:c1:df:20:af:78:9e:
                    9b:7e:49:b5:55:80:12:a1:97:f8:b3:38:7b:dc:90:
                    1d:e7:1c:a3:ac:ea:53:0b:d6:96:a7:e8:3a:93:ca:
                    b5:fb:db:99:52:9a:b5:7e:39:a7:ce:c6:a2:2c:0e:
                    6f:06:34:6e:ad:18:71:0d:e5:3b:81:a5:d7:19:72:
                    81:ab:c4:23:e8:d4:50:71:bd:a5:99:40:30:11:5c:
                    b4:26:3c:f9:1f:b0:e3:3a:79:e8:c2:0f:40:6c:d5:
                    d0:9f:72:11:7c:4c:5f:e6:c3:30:32:e1:10:f0:28:
                    f5:5d:1e:2b:c3:a4:bb:aa:ec:10:5f:37:41:2f:51:
                    60:80:0e:20:fc:45:44:2d:16:a4:5e:c1:2d:ff:94:
                    e5:f5:ad:e1:46:6e:30:92:8f:bf:18:0e:da:02:64:
                    bd:97:a5:56:fc:b0:b2:c2:ee:55:e1:4c:ac:fc:6a:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:18:61:F5:F8:61:9F:AD:64:B6:47:CB:D6:EC:5F:E3:F7:F8:15:30
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/IBhh9fhhn61ktkfL1uxf4_f4FTA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:12:23:be:4b:cd:51:ff:11:b5:a2:0b:52:be:72:c1:06:
         fa:0e:55:17:fc:d1:af:8b:dd:49:1d:c3:15:ed:55:1e:2b:20:
         c5:8a:db:b3:30:6b:97:38:27:45:ea:3e:07:c6:f7:fc:49:9e:
         a3:2a:79:50:7e:0b:8e:fa:4a:6d:01:25:b8:83:3a:94:29:5d:
         f7:f7:f4:6a:f4:72:e6:e7:5e:68:f6:93:59:41:b5:32:51:0c:
         ca:b4:02:41:14:90:85:12:25:ef:fd:d3:b6:13:ba:aa:45:f2:
         23:31:7b:25:49:d8:e8:a2:49:8f:74:05:64:a4:87:9e:0e:5d:
         aa:0f:4c:82:04:fb:78:f5:6f:48:97:48:2b:5e:4a:f2:0e:3b:
         3f:a1:5d:e7:7a:50:94:20:d4:a5:8a:94:fe:11:3a:8b:86:3f:
         84:8e:03:d4:19:00:2c:bc:e4:f1:fc:07:93:24:bc:1e:64:4e:
         90:11:31:82:67:e2:34:e0:0c:4d:fd:cf:2b:b6:f5:63:fb:62:
         88:10:11:43:4a:6d:bb:80:15:ed:47:52:a2:d4:38:69:0e:eb:
         bb:63:d7:3f:2e:aa:0c:b4:18:20:ac:a9:04:67:e1:ef:59:7c:
         22:20:82:ce:d5:4c:b4:fe:d7:f9:64:56:b6:fc:26:c0:47:bd:
         bc:79:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:08:10 2026 by rpki-client