This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/0VXb-VJag1vtO-exOyT7Rw3YWDE.roa
File:                     0VXb-VJag1vtO-exOyT7Rw3YWDE.roa (raw, json)
Hash identifier:          L1jfn0hGKTmvxiZd7a3uWz9tpTP6m3IC6PLh486S0EE=
Subject key identifier:   D1:55:DB:F9:52:5A:83:5B:ED:3B:E7:B1:3B:24:FB:47:0D:D8:58:31
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05E5
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/0VXb-VJag1vtO-exOyT7Rw3YWDE.roa
Signing time:             Thu 01 Jan 2026 01:41:21 +0000
ROA not before:           Thu 01 Jan 2026 01:41:21 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:41:21 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D155DBF9525A835BED3BE7B13B24FB470DD85831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:45:19:8e:9d:6e:67:17:4f:9f:b5:6a:a1:
                    07:18:f3:2a:6d:0a:09:61:c3:6a:0a:e4:e2:9c:28:
                    21:a0:01:ca:0c:b1:0a:a7:15:3d:d1:ff:b8:be:7c:
                    2a:07:c6:83:c8:77:41:a2:5d:8a:94:0b:3f:29:30:
                    fb:fd:5a:fc:60:0e:33:6b:87:12:50:41:4a:b6:5c:
                    11:97:c1:4c:79:1d:43:5c:b2:df:25:06:4e:33:cf:
                    fe:7f:98:81:fb:ee:cd:24:04:a3:73:95:b5:e2:45:
                    eb:87:2c:37:dd:41:a1:67:a8:35:28:f6:f1:fe:27:
                    7d:f7:48:3e:1e:c6:1f:c4:7d:99:02:35:0b:bf:71:
                    76:7d:23:0a:18:63:c7:a7:47:4c:ea:46:6b:83:89:
                    d4:f2:c5:47:f8:61:af:61:2e:ba:cf:3b:27:a6:1b:
                    e0:f8:44:d8:20:df:4e:9a:bb:ac:9d:ac:0f:00:1c:
                    c7:9c:1d:41:0a:69:ac:8f:d5:e6:77:b0:a1:fd:13:
                    a3:8b:aa:32:cd:bf:bc:b9:37:c0:51:55:12:ce:94:
                    5d:64:e0:b9:f1:c6:90:ba:3c:0d:3c:b3:03:99:7d:
                    05:ef:9b:6a:ce:de:6d:ad:30:a6:0f:83:35:94:98:
                    db:d6:f0:9e:ec:95:73:05:55:84:20:07:a5:69:22:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:55:DB:F9:52:5A:83:5B:ED:3B:E7:B1:3B:24:FB:47:0D:D8:58:31
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/0VXb-VJag1vtO-exOyT7Rw3YWDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:30:d0:bb:9e:a7:bc:39:1f:6e:70:bf:cb:fa:ca:de:f5:
         24:5c:dd:ed:00:e7:ba:14:7b:36:6d:84:b6:99:87:62:aa:96:
         62:08:d5:f4:8b:6f:a3:63:7e:94:7a:20:ca:02:c8:98:e8:27:
         f9:86:15:a9:57:47:30:b4:b3:74:98:de:07:be:51:40:3e:1f:
         6b:c0:af:90:3e:e8:06:86:a1:a9:20:6a:32:7b:eb:18:a9:e3:
         2b:bf:9e:a0:f8:7d:ce:af:0a:bb:31:4f:b3:fc:36:e0:0b:c2:
         81:4a:24:43:6b:9a:f5:72:7d:9d:39:69:ee:39:e4:5d:de:77:
         4d:14:9d:88:77:da:33:40:54:91:b7:06:db:64:20:db:06:93:
         23:70:7c:d5:62:77:b5:2c:f7:5d:08:b8:30:51:cd:89:bc:5c:
         2a:a8:2d:0b:c0:4b:ce:f2:9b:3d:85:b3:27:63:9a:03:03:fd:
         e0:e3:71:a0:57:f4:76:c9:a0:be:c3:c2:f3:49:19:05:c4:56:
         b3:00:05:e0:ec:23:e8:57:b5:56:c1:e6:91:84:65:c9:68:5b:
         83:f2:35:f4:5e:f5:fc:f1:da:db:b8:44:5e:60:01:2c:10:9e:
         be:4b:4d:f6:ed:6f:03:6f:ad:cb:0c:74:e4:4e:07:f3:df:69:
         1f:d8:57:a6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAxMDEw
MTQxMjFaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQxNTVEQkY5NTI1QTgz
NUJFRDNCRTdCMTNCMjRGQjQ3MEREODU4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLO0UZjp1uZxdPn7VqoQcY8yptCglhw2oK5OKcKCGgAcoMsQqn
FT3R/7i+fCoHxoPId0GiXYqUCz8pMPv9WvxgDjNrhxJQQUq2XBGXwUx5HUNcst8l
Bk4zz/5/mIH77s0kBKNzlbXiReuHLDfdQaFnqDUo9vH+J333SD4exh/EfZkCNQu/
cXZ9IwoYY8enR0zqRmuDidTyxUf4Ya9hLrrPOyemG+D4RNgg306au6ydrA8AHMec
HUEKaayP1eZ3sKH9E6OLqjLNv7y5N8BRVRLOlF1k4LnxxpC6PA08swOZfQXvm2rO
3m2tMKYPgzWUmNvW8J7slXMFVYQgB6VpIkrfAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU0VXb+VJag1vtO+exOyT7Rw3YWDEwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzBWWGItVkphZzF2dE8tZXhPeVQ3UnczWVdERS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDclDANBgkqhkiG9w0BAQsFAAOCAQEAjgUw0Luep7w5H25wv8v6yt71JFzd
7QDnuhR7Nm2EtpmHYqqWYgjV9Itvo2N+lHogygLImOgn+YYVqVdHMLSzdJjeB75R
QD4fa8CvkD7oBoahqSBqMnvrGKnjK7+eoPh9zq8KuzFPs/w24AvCgUokQ2ua9XJ9
nTlp7jnkXd53TRSdiHfaM0BUkbcG22Qg2waTI3B81WJ3tSz3XQi4MFHNibxcKqgt
C8BLzvKbPYWzJ2OaAwP94ONxoFf0dsmgvsPC80kZBcRWswAF4Owj6Fe1VsHmkYRl
yWhbg/I19F71/PHa27hEXmABLBCevktN9u1vA2+tywx05E4H899pH9hXpg==
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:21 2026 by rpki-client