This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/Q9NqIvdlg-wd852DJ5aSFd8VZYA.roa
File:                     Q9NqIvdlg-wd852DJ5aSFd8VZYA.roa (raw, json)
Hash identifier:          F9n4RA9j+r7sq9x2V/NSicPu5fuifhJvG42w2SBq8Z4=
Subject key identifier:   43:D3:6A:22:F7:65:83:EC:1D:F3:9D:83:27:96:92:15:DF:15:65:80
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       97
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/Q9NqIvdlg-wd852DJ5aSFd8VZYA.roa
Signing time:             Thu 01 Jan 2026 01:34:47 +0000
ROA not before:           Thu 01 Jan 2026 01:34:47 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9622
IP address blocks:        202.52.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Jan  1 01:34:47 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=43D36A22F76583EC1DF39D8327969215DF156580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:03:f7:d5:f4:cb:5e:32:64:4b:2a:56:76:
                    c9:79:93:a5:09:b3:69:ea:41:67:b8:2b:10:bf:ee:
                    b9:1a:40:ee:3b:a1:75:8d:c5:d9:a6:b2:ec:a6:34:
                    1f:89:b2:20:31:f4:8c:67:c9:17:34:fb:24:5a:61:
                    fd:a6:f9:d5:e7:3f:2b:6e:4b:f4:cf:a5:e9:73:75:
                    54:c6:91:93:a4:2e:23:c0:0a:35:e2:24:6c:72:f6:
                    87:47:34:53:c5:b5:70:62:4a:7f:54:61:f8:80:1a:
                    c7:4d:2d:89:f3:9c:a8:18:bf:2a:e1:9a:f6:ae:a8:
                    92:d8:15:00:bc:b9:6f:e6:07:df:b8:60:7b:c0:fb:
                    56:94:ee:a9:82:bb:15:77:b6:99:a4:40:44:26:ce:
                    0f:38:b4:d3:19:0b:db:30:fd:61:71:42:22:39:27:
                    c9:bc:db:2d:fe:af:11:76:76:62:0c:1f:4e:ad:f8:
                    e1:66:b3:de:6c:3a:d4:d5:2e:1d:b8:a5:64:30:fb:
                    bd:7f:70:77:42:8e:08:72:02:fb:9f:b3:d9:c3:d5:
                    a9:91:5c:ae:43:f4:44:74:a6:d8:fe:85:b6:d2:82:
                    c6:06:d2:1d:00:c1:48:9b:71:e3:83:64:e6:97:cd:
                    12:a6:76:db:08:be:76:f1:f3:b0:64:cb:75:c8:1d:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:6A:22:F7:65:83:EC:1D:F3:9D:83:27:96:92:15:DF:15:65:80
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/Q9NqIvdlg-wd852DJ5aSFd8VZYA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:d6:8c:34:eb:fb:7c:b6:7c:7e:82:95:56:90:18:2b:7e:b8:
         83:af:4d:22:3e:d9:11:5a:ff:cc:08:3e:ee:31:00:09:07:fc:
         f4:fe:3b:ba:f9:15:b8:6d:c2:80:db:cf:c5:ef:39:50:0c:e4:
         f6:55:a7:6c:6d:e4:4e:78:e0:1f:0d:8d:1e:85:05:96:98:40:
         d9:47:2e:ba:f5:25:3b:99:78:6f:09:93:2b:6c:cb:8c:7f:03:
         86:76:f3:41:e7:aa:1e:63:f6:ad:6d:9f:ca:6f:81:93:a6:1c:
         c8:8a:c1:d2:40:f1:26:3a:0c:f9:d6:0a:07:ad:4f:f4:1d:fa:
         e0:f9:cc:5f:14:f5:34:07:fe:a3:bd:5e:c5:a7:ed:07:2d:a0:
         67:39:9a:d6:17:08:aa:1d:9c:37:54:06:ff:80:de:a9:ad:3f:
         5d:9e:5e:98:d2:ed:6e:59:51:80:45:e2:b5:f6:5b:e7:7a:6d:
         47:4a:25:63:b7:b4:3e:63:a1:89:9d:d8:ab:f4:64:17:0b:94:
         42:7f:0e:59:af:68:b8:ed:da:a1:3b:07:d7:6f:e3:f5:cb:25:
         a4:cb:f0:ca:9f:0a:c2:ee:5c:87:dd:33:3e:14:f2:1a:c8:94:
         8d:3c:0a:ed:22:7b:54:51:06:35:d8:e4:f0:7a:28:fc:f7:b3:
         6d:a5:f2:1a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjAxMDEw
MTM0NDdaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQzRDM2QTIyRjc2NTgz
RUMxREYzOUQ4MzI3OTY5MjE1REYxNTY1ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJGgP31fTLXjJkSypWdsl5k6UJs2nqQWe4KxC/7rkaQO47oXWN
xdmmsuymNB+JsiAx9IxnyRc0+yRaYf2m+dXnPytuS/TPpelzdVTGkZOkLiPACjXi
JGxy9odHNFPFtXBiSn9UYfiAGsdNLYnznKgYvyrhmvauqJLYFQC8uW/mB9+4YHvA
+1aU7qmCuxV3tpmkQEQmzg84tNMZC9sw/WFxQiI5J8m82y3+rxF2dmIMH06t+OFm
s95sOtTVLh24pWQw+71/cHdCjghyAvufs9nD1amRXK5D9ER0ptj+hbbSgsYG0h0A
wUibceODZOaXzRKmdtsIvnbx87Bky3XIHeTnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUQ9NqIvdlg+wd852DJ5aSFd8VZYAwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzkzL1E5TnFJdmRsZy13ZDg1MkRKNWFTRmQ4VlpZQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKNBAwDQYJKoZIhvcNAQELBQADggEBAI3WjDTr+3y2fH6ClVaQGCt+uIOv
TSI+2RFa/8wIPu4xAAkH/PT+O7r5FbhtwoDbz8XvOVAM5PZVp2xt5E544B8NjR6F
BZaYQNlHLrr1JTuZeG8Jkytsy4x/A4Z280Hnqh5j9q1tn8pvgZOmHMiKwdJA8SY6
DPnWCgetT/Qd+uD5zF8U9TQH/qO9XsWn7QctoGc5mtYXCKodnDdUBv+A3qmtP12e
XpjS7W5ZUYBF4rX2W+d6bUdKJWO3tD5joYmd2Kv0ZBcLlEJ/DlmvaLjt2qE7B9dv
4/XLJaTL8MqfCsLuXIfdMz4U8hrIlI08Cu0ie1RRBjXY5PB6KPz3s22l8ho=
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:08:32 2026 by rpki-client