This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/1JVR3UBwOc_dAGSZLXMJNgyHjFQ.roa
File:                     1JVR3UBwOc_dAGSZLXMJNgyHjFQ.roa (raw, json)
Hash identifier:          1c0+uOr2NVrxgZBqEyKkomGEWbIajrmwfPOw5oFCVRQ=
Subject key identifier:   D4:95:51:DD:40:70:39:CF:DD:00:64:99:2D:73:09:36:0C:87:8C:54
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       062B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1JVR3UBwOc_dAGSZLXMJNgyHjFQ.roa
Signing time:             Thu 01 Jan 2026 01:53:38 +0000
ROA not before:           Thu 01 Jan 2026 01:53:38 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        61.211.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:53:38 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D49551DD407039CFDD0064992D7309360C878C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:5a:f2:76:55:d2:51:9b:73:a8:91:d5:c1:
                    05:18:41:ea:6a:07:88:4c:38:2c:64:a3:ef:ee:50:
                    cb:1a:82:85:53:31:3f:55:f7:87:0f:1b:7f:c5:a2:
                    82:78:96:2a:fb:8d:87:bc:86:e1:77:6e:d8:f7:99:
                    88:07:3f:5d:75:42:e6:a0:38:78:85:19:93:1e:f6:
                    98:8a:71:1d:20:35:09:b5:55:cb:f2:38:36:e0:6e:
                    53:48:ad:9d:d7:74:eb:bf:52:fc:b9:a9:16:8b:14:
                    ed:39:2c:3e:1e:1d:b8:86:d8:55:19:d8:cc:4a:b9:
                    ed:71:df:81:b2:c6:4c:87:a8:f9:49:26:8b:51:9a:
                    00:03:ff:90:3a:87:c3:19:ea:1a:6e:f1:cc:25:49:
                    de:2d:0d:12:d0:ee:75:3b:61:9b:5d:22:65:b9:ef:
                    8c:fc:ea:9c:e0:0b:29:70:87:88:a4:fa:e3:f6:7f:
                    c0:bc:d8:19:d0:6a:a8:09:36:03:6e:8b:06:47:d1:
                    b4:e6:df:c3:3a:9c:1e:7e:4d:f7:f9:b2:0e:43:8d:
                    96:86:cf:5f:b1:b2:a9:1d:09:8f:d4:5c:39:2b:b9:
                    94:54:59:24:33:24:1d:ba:7d:06:ed:59:41:1c:cd:
                    ef:72:e7:ef:c7:90:d1:a8:13:85:74:3b:01:4e:04:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:51:DD:40:70:39:CF:DD:00:64:99:2D:73:09:36:0C:87:8C:54
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1JVR3UBwOc_dAGSZLXMJNgyHjFQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:57:72:d6:14:4f:3e:29:7e:6a:91:ef:d0:83:a0:b5:d3:
         08:10:99:f1:53:42:83:d0:38:64:96:36:d1:51:b2:97:86:1b:
         c6:1f:ff:ee:21:78:d4:bd:4f:5d:d7:31:17:e2:1e:44:60:4b:
         32:42:a1:2f:11:82:74:68:7a:ca:1d:d0:d9:6e:e9:e7:37:09:
         b4:e8:cd:80:cc:a2:88:c6:05:fd:b9:14:80:df:c9:81:e3:a7:
         8e:47:56:77:3a:eb:09:31:b0:c2:dd:96:37:e1:1f:1d:a0:85:
         1b:6f:28:c2:7b:47:b5:f0:17:b9:a1:5d:1c:bc:db:0b:a4:9c:
         81:05:4e:3e:ce:30:63:ac:ac:3a:d1:5a:a7:af:ae:b2:0f:99:
         c9:c2:3b:e9:0d:98:bf:df:ff:db:e3:b4:e7:9f:bb:b1:f6:46:
         29:f8:5a:e2:f3:1e:89:69:74:da:7b:92:6c:d3:50:82:37:07:
         9c:f9:80:9a:a2:b6:e3:14:57:5f:24:5d:df:e0:44:cc:5d:d4:
         0d:41:fa:a0:09:e7:2d:8e:10:93:08:af:52:13:c8:96:4d:51:
         05:9e:c4:f5:8c:52:84:e6:bd:f4:67:ed:16:2c:3b:f9:e2:ed:
         62:c0:72:34:e2:42:fb:b8:5d:8f:8f:09:65:40:30:aa:8c:4e:
         17:2a:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:33:04 2026 by rpki-client