This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/NnkTWlKbD9mYUBcyq5ZwtHRpGXY.roa
File:                     NnkTWlKbD9mYUBcyq5ZwtHRpGXY.roa (raw, json)
Hash identifier:          eofd7Zef59AYT22qBHiYyVaWVVMF+LEc0I+DrtTyVLI=
Subject key identifier:   36:79:13:5A:52:9B:0F:D9:98:50:17:32:AB:96:70:B4:74:69:19:76
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       7A
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/NnkTWlKbD9mYUBcyq5ZwtHRpGXY.roa
Signing time:             Sun 01 Feb 2026 01:31:19 +0000
ROA not before:           Sun 01 Feb 2026 01:31:19 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     55900
IP address blocks:        218.223.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Feb 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Feb  1 01:31:19 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=3679135A529B0FD998501732AB9670B474691976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:b0:e3:97:45:d5:02:e3:64:d1:f5:46:28:
                    8f:64:14:9f:e8:15:77:04:91:9c:b3:9c:ff:c8:a0:
                    f3:57:5b:f8:5c:cb:35:3d:59:5d:2d:00:82:0e:02:
                    ad:d3:cb:b2:66:e7:66:66:63:56:22:16:65:99:d2:
                    a1:a1:68:83:92:fb:67:6b:c8:a8:26:64:a0:ac:00:
                    c7:7c:de:4e:61:ee:dc:e1:07:81:86:ab:b4:22:c6:
                    ef:63:d9:92:ac:c8:b5:84:6b:37:0b:6d:41:f1:e4:
                    7b:d4:b3:cf:40:93:77:10:39:47:30:08:13:8b:82:
                    ca:47:bb:17:e7:3a:77:95:f7:d8:ff:fd:58:9b:2b:
                    2d:db:3f:21:a7:c8:87:f6:de:93:6b:6e:ab:0e:ba:
                    b6:91:2a:64:96:86:07:79:e3:e4:c6:a8:7e:41:a3:
                    a1:9c:6e:cc:a8:db:32:6d:b3:b4:47:4b:4a:bb:0b:
                    ff:6e:80:58:9c:55:f5:34:b5:fd:54:d2:8f:5b:bc:
                    83:4d:15:44:73:c8:ea:94:a0:19:83:c7:43:31:15:
                    3e:89:34:90:3a:a6:98:f7:c5:83:fc:61:4e:00:f4:
                    08:c5:d0:f5:cc:5e:94:44:6a:7c:0e:df:1e:a9:36:
                    42:08:cc:77:5c:99:64:b9:b4:b8:8c:49:17:f0:cc:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:79:13:5A:52:9B:0F:D9:98:50:17:32:AB:96:70:B4:74:69:19:76
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/NnkTWlKbD9mYUBcyq5ZwtHRpGXY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:9b:6f:8a:b0:b4:18:bd:e1:9f:ba:b1:e2:05:57:cc:6a:2f:
         d1:ea:19:d0:9d:09:e1:0d:37:b8:5e:03:52:5e:88:e5:42:31:
         22:56:91:d3:37:3e:5e:ac:82:e8:4d:f9:e8:14:ee:0d:82:4f:
         13:69:e6:8d:a2:85:46:65:94:12:8f:65:70:61:f5:28:5c:17:
         71:f4:e7:e1:5f:fb:2f:05:03:e3:be:0f:9d:e5:ce:d1:94:7e:
         64:4c:b0:7f:39:c3:21:61:e6:dd:79:d9:5a:f7:57:34:b2:a9:
         b6:ca:e4:19:c4:88:df:6a:ad:24:53:1b:50:e8:e3:ff:63:d2:
         f7:e5:57:1c:90:eb:01:6a:5e:ae:af:37:46:43:73:11:40:f7:
         f9:29:a8:c9:50:83:a6:f6:0f:00:3a:e0:64:94:08:f4:4c:2c:
         8e:99:71:55:a2:2b:85:40:29:50:3a:40:f9:6d:d8:c7:ba:0b:
         ee:c5:aa:9b:2b:f2:f7:9c:cf:e8:28:55:16:d0:b5:85:9e:80:
         0d:79:f3:31:e8:32:f5:d8:71:13:cd:7b:48:5c:de:ea:72:7b:
         63:e1:72:33:3b:8a:62:89:e3:f7:bc:2c:94:49:c0:15:04:42:
         64:f7:9f:ec:13:97:b5:9d:00:8a:a1:47:98:28:12:af:5f:08:
         aa:52:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 19:55:39 2026 by rpki-client