This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-04oDN0YqfXkO1g1mIjoRq08gN4.roa
File:                     -04oDN0YqfXkO1g1mIjoRq08gN4.roa (raw, json)
Hash identifier:          9zwR3omj6SvjVmKijf1Mrxuqnn4/9QluhOwywBz/1k4=
Subject key identifier:   FB:4E:28:0C:DD:18:A9:F5:E4:3B:58:35:98:88:E8:46:AD:3C:80:DE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05ED
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-04oDN0YqfXkO1g1mIjoRq08gN4.roa
Signing time:             Thu 01 Jan 2026 01:41:25 +0000
ROA not before:           Thu 01 Jan 2026 01:41:25 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        116.68.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:41:25 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=FB4E280CDD18A9F5E43B58359888E846AD3C80DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:33:57:17:81:5b:ce:56:bd:7f:0c:1c:13:c3:
                    94:b6:f8:27:3b:05:c3:9e:f9:cd:4b:91:52:21:7b:
                    ab:02:f5:e3:c9:cd:2d:94:14:55:05:5f:6c:d6:3f:
                    7b:56:ca:a8:68:1f:6c:7a:3a:cf:48:a4:9f:73:40:
                    e7:19:b6:99:c6:fa:ed:25:4b:09:57:81:c7:c3:bb:
                    93:3a:b0:21:d3:7e:2e:38:de:ce:38:8f:ff:aa:11:
                    67:c2:b1:71:5c:d1:04:5a:f7:c2:e7:35:3a:c6:fb:
                    1b:52:f7:38:5a:d7:64:43:2c:3e:59:82:f6:0a:53:
                    c6:d6:f9:fa:98:bb:40:12:72:9e:44:c1:de:46:1b:
                    1f:1f:95:6e:f1:c9:61:60:18:85:06:3c:29:8c:5b:
                    10:52:96:36:e5:17:dc:73:57:05:27:f0:d7:9b:6a:
                    70:ba:20:40:ba:35:62:bd:65:06:74:3a:74:bc:ad:
                    d2:ac:19:c3:61:25:ff:02:56:07:fc:54:d9:1f:cd:
                    c3:80:93:cd:0f:68:0a:49:1e:c8:dd:88:0e:55:c3:
                    21:11:1b:4c:66:4b:06:40:6d:3e:77:31:f5:b8:53:
                    59:de:63:88:cb:83:af:98:15:a4:3a:df:20:e9:5a:
                    c9:d8:4c:21:be:7e:84:30:7f:13:d9:dc:c1:32:34:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4E:28:0C:DD:18:A9:F5:E4:3B:58:35:98:88:E8:46:AD:3C:80:DE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-04oDN0YqfXkO1g1mIjoRq08gN4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:72:8a:99:84:74:0f:99:f9:96:40:1d:4c:2d:f7:bd:79:30:
         4f:ea:09:64:32:1c:b8:73:bd:dc:47:83:29:ab:cf:cc:d1:3c:
         dd:0c:8b:5d:b5:dc:d3:b8:7b:a1:59:17:16:20:db:8d:9d:8f:
         58:7d:f5:74:e3:bd:57:d2:ea:30:c6:ad:55:4b:e9:dc:46:e8:
         3b:15:fd:7b:0c:a6:09:2e:e2:ed:cb:9b:f1:33:be:98:72:4f:
         0c:d2:20:7c:59:8d:09:3e:11:e8:45:6c:5c:b1:6d:ad:f3:7f:
         ea:03:fc:e2:f7:2d:a1:f0:50:32:f4:38:2f:fd:31:fd:0c:6c:
         17:e7:6a:8f:27:bb:f5:92:3a:dd:13:82:86:d8:af:40:4b:b8:
         48:b1:10:4f:fd:a2:7a:27:45:71:dc:88:d1:e6:10:6e:6a:9c:
         e4:cb:79:7a:10:4b:4b:d8:9f:1c:fe:d7:2d:48:a7:8f:12:1e:
         af:34:f2:11:4f:5d:78:aa:78:bf:d9:c2:1f:69:79:31:d9:ab:
         a8:04:80:90:38:f1:16:3a:1c:77:60:ea:81:fb:88:c2:7f:91:
         ac:3c:6a:3d:66:42:b5:92:60:49:70:d9:6c:5b:49:de:ac:00:
         ca:13:63:fc:72:fa:2b:20:d8:ca:78:3c:f6:1e:bf:bd:e2:33:
         d3:69:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:52 2026 by rpki-client