This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/4L0YtFl6XHpwWSVKtznQqqyaS4g.roa
File:                     4L0YtFl6XHpwWSVKtznQqqyaS4g.roa (raw, json)
Hash identifier:          vRHvJsnCMgJXobhnQAxBN3SDxtZQGCaQCeM9ZbJq7q8=
Subject key identifier:   E0:BD:18:B4:59:7A:5C:7A:70:59:25:4A:B7:39:D0:AA:AC:9A:4B:88
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0610
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4L0YtFl6XHpwWSVKtznQqqyaS4g.roa
Signing time:             Thu 01 Jan 2026 01:49:54 +0000
ROA not before:           Thu 01 Jan 2026 01:49:54 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:49:54 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=E0BD18B4597A5C7A7059254AB739D0AAAC9A4B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:13:f6:b2:91:d2:fd:fb:c9:6f:12:6e:aa:
                    dd:54:2f:d9:1c:03:5b:95:9d:7e:b5:e1:18:21:91:
                    0d:ed:c7:b9:fe:e4:39:3f:7b:b9:0f:0c:5e:ee:3e:
                    42:fa:c1:75:97:bd:4f:95:6e:28:1f:cd:90:96:6f:
                    8b:ad:ca:e9:ae:eb:50:1f:e7:af:83:f4:ac:ba:b8:
                    c3:4c:5d:03:35:e3:9e:94:b3:b0:9c:6f:52:b1:38:
                    46:1d:65:f5:64:81:28:5b:12:0c:78:8c:1d:68:ef:
                    cb:fb:45:3f:96:68:9b:d8:d2:1f:b8:bb:b4:7c:99:
                    87:7b:93:c7:68:c1:0e:8a:11:26:b5:6e:ac:51:a6:
                    13:12:04:3e:c8:a5:56:bf:dc:4a:0a:58:ac:c3:e2:
                    f3:63:02:1b:af:a5:90:bb:f0:56:82:f4:96:3c:dc:
                    3f:bb:72:42:d1:67:c0:7a:10:04:4c:c0:1e:ae:48:
                    9b:e9:1c:1d:b3:65:2a:3a:ae:e4:de:32:a3:b2:bf:
                    86:66:58:09:37:1f:d2:17:87:2e:c1:2d:6b:c6:d3:
                    40:67:84:ff:10:69:ae:d0:bb:41:cf:4e:4b:93:54:
                    0b:5f:3a:3a:79:c4:aa:ac:ab:be:59:01:3e:47:c0:
                    fb:21:4c:5d:b2:07:31:e5:94:ce:e1:8f:40:7f:37:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BD:18:B4:59:7A:5C:7A:70:59:25:4A:B7:39:D0:AA:AC:9A:4B:88
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4L0YtFl6XHpwWSVKtznQqqyaS4g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:1b:12:91:cb:6c:de:d1:a3:05:67:38:74:1d:be:49:08:
         7c:07:cc:4e:5f:34:39:5f:66:ca:b1:80:ed:59:80:8f:80:d4:
         cf:2d:a8:5b:e0:35:fe:83:ad:21:ef:8f:9f:ff:e6:b1:ff:6a:
         00:b0:b8:92:f2:0e:6f:7c:e3:26:27:c8:49:3c:d5:d1:02:ce:
         92:48:4f:96:8b:86:62:1c:30:04:68:14:4f:bd:8a:98:88:5b:
         b8:c3:db:1c:a5:9d:6e:6e:ac:bc:e1:17:11:27:aa:0b:59:ff:
         0a:ff:29:11:ab:b8:ab:ea:be:1f:0e:4e:63:c2:9b:69:77:e3:
         2c:fa:6f:33:5a:9a:a6:b6:d8:ef:3c:17:99:a3:d1:70:8e:20:
         16:45:cf:3c:a9:ca:e4:9f:b0:29:e6:da:6a:59:74:19:86:de:
         8c:b8:d2:74:30:40:8d:8e:9a:4f:22:fd:2c:58:04:5e:13:d7:
         d5:6d:ff:f1:77:8a:f0:09:31:74:f9:f9:6d:19:5e:74:53:ef:
         cb:8a:e7:ca:66:01:47:d3:d9:01:95:2f:dc:1d:6e:0b:fb:f0:
         1f:39:cc:8b:33:e7:69:e0:c3:26:5f:74:aa:72:3e:dd:7b:2e:
         45:d9:c9:0b:19:fc:48:38:c9:14:5c:ab:c9:41:67:75:df:6c:
         5c:5b:4d:04
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAxMDEw
MTQ5NTRaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUwQkQxOEI0NTk3QTVD
N0E3MDU5MjU0QUI3MzlEMEFBQUM5QTRCODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqVhP2spHS/fvJbxJuqt1UL9kcA1uVnX614RghkQ3tx7n+5Dk/
e7kPDF7uPkL6wXWXvU+VbigfzZCWb4utyumu61Af56+D9Ky6uMNMXQM1456Us7Cc
b1KxOEYdZfVkgShbEgx4jB1o78v7RT+WaJvY0h+4u7R8mYd7k8dowQ6KESa1bqxR
phMSBD7IpVa/3EoKWKzD4vNjAhuvpZC78FaC9JY83D+7ckLRZ8B6EARMwB6uSJvp
HB2zZSo6ruTeMqOyv4ZmWAk3H9IXhy7BLWvG00BnhP8Qaa7Qu0HPTkuTVAtfOjp5
xKqsq75ZAT5HwPshTF2yBzHllM7hj0B/N/GrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU4L0YtFl6XHpwWSVKtznQqqyaS4gwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzRMMFl0Rmw2WEhwd1dTVkt0em5RcXF5YVM0Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALclIQwDQYJKoZIhvcNAQELBQADggEBAJP4GxKRy2ze0aMFZzh0Hb5JCHwH
zE5fNDlfZsqxgO1ZgI+A1M8tqFvgNf6DrSHvj5//5rH/agCwuJLyDm984yYnyEk8
1dECzpJIT5aLhmIcMARoFE+9ipiIW7jD2xylnW5urLzhFxEnqgtZ/wr/KRGruKvq
vh8OTmPCm2l34yz6bzNamqa22O88F5mj0XCOIBZFzzypyuSfsCnm2mpZdBmG3oy4
0nQwQI2Omk8i/SxYBF4T19Vt//F3ivAJMXT5+W0ZXnRT78uK58pmAUfT2QGVL9wd
bgv78B85zIsz52ngwyZfdKpyPt17LkXZyQsZ/Eg4yRRcq8lBZ3XfbFxbTQQ=
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:33:09 2026 by rpki-client