This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/N5fF7HPaHSQNSCUeO71XIONmdXo.roa
File:                     N5fF7HPaHSQNSCUeO71XIONmdXo.roa (raw, json)
Hash identifier:          QPwS8hu7BDMF/s16+ACRUryq5XPjutnvrqYwem8cqTk=
Subject key identifier:   37:97:C5:EC:73:DA:1D:24:0D:48:25:1E:3B:BD:57:20:E3:66:75:7A
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       94
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/N5fF7HPaHSQNSCUeO71XIONmdXo.roa
Signing time:             Thu 01 Jan 2026 01:34:45 +0000
ROA not before:           Thu 01 Jan 2026 01:34:45 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9622
IP address blocks:        124.47.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Jan  1 01:34:45 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3797C5EC73DA1D240D48251E3BBD5720E366757A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:95:c4:65:23:75:ac:95:82:05:d1:db:a8:
                    03:6f:be:5d:be:11:1e:57:60:2c:7b:2a:79:09:1e:
                    aa:cf:d6:02:78:82:ee:d1:6a:49:37:f0:92:08:fe:
                    de:a3:ea:f0:db:74:33:cc:d4:26:3c:8c:a7:42:d1:
                    29:9b:63:4e:af:a4:f5:e3:8a:5a:c5:e8:6d:15:4a:
                    83:2c:06:6c:25:12:24:52:b7:a9:fd:f9:49:69:6c:
                    b2:a8:4f:56:0b:45:a1:03:62:0e:70:34:8b:63:25:
                    87:ad:79:f8:58:7a:f0:6a:2a:3b:18:8d:54:cf:b5:
                    b8:f5:53:44:dd:5c:11:65:84:f9:ae:d2:99:fa:f5:
                    f5:94:17:a2:69:d6:d3:f6:0a:6e:fd:fd:19:83:69:
                    28:24:73:84:c1:ad:17:7d:60:cb:cc:90:b0:5e:82:
                    48:ad:3c:68:e5:0b:65:6d:02:fa:3a:55:b3:ec:ad:
                    d1:ef:81:1a:8e:ac:a3:e0:9a:a4:01:cf:6b:ab:db:
                    bb:53:15:68:e4:cb:ce:ab:b0:89:4d:66:30:cb:65:
                    f3:2f:98:40:fa:ee:55:20:c8:04:b0:2c:32:69:b0:
                    eb:5b:4e:8a:8f:e2:a7:f1:be:55:ac:5a:3a:e1:1d:
                    ad:c1:43:d6:b1:3d:54:b9:0d:01:8f:d6:53:2a:47:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:97:C5:EC:73:DA:1D:24:0D:48:25:1E:3B:BD:57:20:E3:66:75:7A
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/N5fF7HPaHSQNSCUeO71XIONmdXo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         65:07:da:b5:29:39:34:fd:23:af:32:ea:90:c6:7e:17:28:65:
         b0:d5:06:3f:c7:01:3d:4f:95:30:65:aa:66:34:e6:c2:02:fa:
         06:a7:2d:08:dd:7e:8f:a7:1c:31:65:37:0d:ed:05:10:32:ce:
         dd:4b:83:99:e5:12:2a:0a:61:ac:c3:0f:96:39:f8:51:47:ba:
         9d:20:e9:ec:91:61:1b:8d:fc:65:f9:b0:0c:59:13:a2:42:b1:
         65:8f:f9:d4:25:b1:84:c1:3a:32:67:7e:0e:63:c7:49:f5:bc:
         4d:fd:b2:ca:73:93:72:f6:1b:5e:f4:df:83:24:1e:52:8a:e5:
         03:00:82:e8:c9:2f:91:49:5d:28:68:28:8b:ec:ad:f9:58:b6:
         1b:13:f6:f8:c4:18:ae:3b:b3:7f:7e:1b:e7:37:4b:25:26:96:
         58:1f:fe:aa:cd:fe:56:46:e7:fd:6b:5c:7b:cd:77:af:6f:b6:
         e5:4c:8c:bd:e8:ed:07:42:1a:ad:26:6e:f2:6c:a6:47:84:e5:
         66:5f:98:50:18:13:af:f7:28:91:be:42:5e:ea:1a:aa:60:a4:
         cf:a0:54:e6:85:e4:9b:2b:b0:63:a0:09:5f:f3:9c:ef:be:9a:
         e8:39:65:87:ae:5b:28:43:9b:37:c3:84:4c:06:ed:d2:db:fd:
         4a:ef:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:08:10 2026 by rpki-client