This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/5r7NBZFptBx32u_i4tU4kZ8Kl-w.roa
File:                     5r7NBZFptBx32u_i4tU4kZ8Kl-w.roa (raw, json)
Hash identifier:          x1kLLONsL7L5FHNWv8RlcCXKzyVOF5pcgPWofyT7ZIg=
Subject key identifier:   E6:BE:CD:05:91:69:B4:1C:77:DA:EF:E2:E2:D5:38:91:9F:0A:97:EC
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0638
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5r7NBZFptBx32u_i4tU4kZ8Kl-w.roa
Signing time:             Thu 01 Jan 2026 01:53:46 +0000
ROA not before:           Thu 01 Jan 2026 01:53:46 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:53:46 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=E6BECD059169B41C77DAEFE2E2D538919F0A97EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:76:b0:04:c9:b0:8b:87:bd:74:7e:98:2b:
                    47:37:07:05:8a:a7:50:c5:6e:47:34:61:c7:ae:3b:
                    a2:ac:7a:81:c1:96:47:e2:cf:26:55:50:98:21:cc:
                    01:93:b7:a7:55:a4:74:dd:41:9b:c8:16:cf:4d:3d:
                    cd:34:ab:e2:23:2f:5b:d1:77:d8:50:c1:35:32:d7:
                    8b:66:6c:5c:b1:ed:5d:85:61:e3:9c:59:82:68:d9:
                    59:7a:b9:8c:dd:6f:2f:ef:f6:27:af:f9:73:aa:3b:
                    15:fa:7a:c3:9b:50:40:24:4e:a5:15:17:bc:62:19:
                    c3:86:26:ed:46:bf:34:db:d9:c2:9d:30:e4:e3:71:
                    d6:d8:ee:f9:fd:18:37:86:41:b9:38:0d:c6:54:96:
                    9e:bb:b4:e8:09:65:b6:ec:48:39:4e:ed:0e:66:b3:
                    1d:55:e8:42:88:07:6e:c8:0a:f8:f2:6c:d8:4c:de:
                    d9:90:25:4f:14:a7:f8:b3:d9:76:d4:ca:40:b1:a4:
                    f3:0e:1b:ef:ed:f0:f7:c6:20:be:0c:49:6c:34:86:
                    40:d8:64:bd:47:78:93:2b:71:0a:1e:21:c0:bb:c2:
                    28:ba:8c:5a:d0:46:3c:6b:6a:f2:e1:06:7f:64:39:
                    3d:2f:88:28:13:0c:28:fb:16:f7:06:cc:bc:4b:f1:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BE:CD:05:91:69:B4:1C:77:DA:EF:E2:E2:D5:38:91:9F:0A:97:EC
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5r7NBZFptBx32u_i4tU4kZ8Kl-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:32:66:6d:1d:36:15:77:29:8c:83:bf:78:44:bd:68:81:
         08:ae:a4:67:6d:79:55:5d:8f:2d:6c:f1:f1:dd:75:47:21:24:
         26:76:7f:64:6b:0c:2b:da:b0:29:94:d5:7e:0d:7e:19:70:77:
         d4:38:10:e3:35:0f:c4:0a:92:ac:20:87:74:69:3e:d6:34:3a:
         c4:a7:49:0e:12:65:f8:ff:8d:11:0e:7f:f0:69:15:6f:a6:55:
         42:63:ed:d4:33:9c:85:f1:24:19:40:d0:9e:9f:d2:9c:58:c4:
         dd:85:d2:bb:c2:3a:c1:e2:26:9e:25:f2:e1:6b:b2:85:50:3f:
         c1:a1:a7:2e:a0:aa:6b:3c:fa:18:c1:a6:51:48:10:13:25:f8:
         64:e0:26:ac:09:5a:50:ab:d5:4b:ae:d1:0f:f6:39:50:65:4a:
         7a:14:31:21:fa:89:c4:9c:c5:00:c0:8b:57:16:81:78:0b:e6:
         bf:a3:92:42:79:53:49:31:2e:8a:9a:1a:75:01:ea:43:10:25:
         ad:c0:8f:3e:72:59:4a:99:36:5c:12:64:e3:1f:1e:ab:59:2b:
         7a:bb:53:fa:e4:29:2f:1f:97:d3:fd:cc:b0:53:52:d5:eb:5b:
         f5:61:e6:37:1a:90:03:ef:96:50:e6:3d:4a:0c:b9:79:ce:9a:
         e4:af:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:21 2026 by rpki-client