This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-pQCe4GbvCirMHqHY9hjQ1SwtZ0.roa
File:                     -pQCe4GbvCirMHqHY9hjQ1SwtZ0.roa (raw, json)
Hash identifier:          wWzxk1DA3OC9K7WY+QMubtUYu5qMpp8KKb+gEWYgavg=
Subject key identifier:   FA:94:02:7B:81:9B:BC:28:AB:30:7A:87:63:D8:63:43:54:B0:B5:9D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       063B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-pQCe4GbvCirMHqHY9hjQ1SwtZ0.roa
Signing time:             Thu 01 Jan 2026 01:53:47 +0000
ROA not before:           Thu 01 Jan 2026 01:53:47 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:53:47 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=FA94027B819BBC28AB307A8763D8634354B0B59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:f2:39:b7:14:49:0d:d8:48:74:c1:e2:43:
                    4d:3d:45:2f:2b:60:32:54:7f:97:b9:8f:19:6c:da:
                    95:15:78:33:6c:6c:37:23:c5:ef:1b:99:ef:6b:1b:
                    74:c5:18:cf:b7:85:b5:29:e5:92:09:17:7a:55:b4:
                    8b:a5:2f:63:70:be:14:fa:85:e2:c4:29:c0:ff:2c:
                    90:f1:2f:c4:01:a7:16:6f:b1:c4:11:38:65:78:84:
                    b4:32:e5:3e:57:42:5f:0d:85:91:51:9b:bd:d4:49:
                    1f:37:a3:ab:ae:0f:93:b6:49:9a:61:16:6b:e2:71:
                    b4:2b:09:26:d3:a2:d9:c3:31:a7:a0:97:21:5c:ef:
                    1d:26:68:b5:2f:1a:44:7f:0f:00:a3:62:da:2e:76:
                    30:67:92:c4:aa:30:cd:26:8e:29:77:1a:91:13:42:
                    64:54:48:ac:b4:d0:7a:6e:8d:94:fc:c2:e4:3d:c5:
                    56:95:b5:89:a3:b7:71:87:b8:a7:20:e3:72:06:f5:
                    2b:4b:ec:25:b8:ac:81:2a:13:fc:97:56:b4:2d:f7:
                    80:ef:4f:fe:14:2b:b6:4d:b8:fe:94:59:43:35:84:
                    45:41:2b:9c:fe:f9:aa:c7:2e:c3:a7:bc:c4:86:c4:
                    b7:97:11:7b:f7:39:1f:a4:9a:26:7a:c2:d0:a5:db:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:94:02:7B:81:9B:BC:28:AB:30:7A:87:63:D8:63:43:54:B0:B5:9D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-pQCe4GbvCirMHqHY9hjQ1SwtZ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:32:ca:d1:cf:7b:70:9a:b0:2a:cf:ea:12:8b:0d:55:6b:4e:
         49:f0:0d:d1:0b:5e:61:a3:2b:3e:e8:e7:ce:4a:d0:33:94:c9:
         81:9e:da:34:80:b3:0a:fb:4e:6d:16:c3:ae:86:23:18:b2:d9:
         8c:b1:34:fa:37:dd:75:1b:74:7f:2b:f4:43:be:a9:d3:33:f6:
         de:37:ce:6b:cd:01:00:f7:a3:43:71:90:5f:d6:d0:9b:f7:17:
         2a:f1:be:01:bd:cf:f0:51:63:35:dc:87:67:d4:a3:f1:e2:cb:
         18:a7:d1:7b:9e:cd:45:0e:dd:16:f3:6d:08:07:41:39:f9:24:
         5a:30:43:79:47:07:ed:59:75:67:11:df:cd:bf:a0:f9:a9:32:
         f3:aa:d4:f3:2e:51:f0:85:81:bc:7a:6d:b6:23:e3:6a:cb:e5:
         46:ba:ad:04:cc:37:a2:8c:0c:ba:18:92:01:45:01:fe:f5:05:
         24:28:75:c0:6a:21:52:76:dd:81:78:3f:c6:e8:d1:db:40:5b:
         4e:fc:aa:8a:ab:d3:53:9b:ab:ce:c0:65:f9:23:f1:5a:74:ed:
         4f:1c:a1:8c:e2:34:33:bc:f7:9f:a8:d8:a8:29:29:ed:64:a1:
         5c:6b:0b:be:18:02:17:9f:fa:e1:c1:c4:59:a8:51:7a:73:fa:
         2f:41:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:33:09 2026 by rpki-client