This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/U4pxwM0xucnFWT0PwoEjTTgDSI4.roa
File:                     U4pxwM0xucnFWT0PwoEjTTgDSI4.roa (raw, json)
Hash identifier:          TLliM/blPzOHTqTf0kt8/p3meJX9ikyumQ2nv0jHIHg=
Subject key identifier:   53:8A:71:C0:CD:31:B9:C9:C5:59:3D:0F:C2:81:23:4D:38:03:48:8E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05C5
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/U4pxwM0xucnFWT0PwoEjTTgDSI4.roa
Signing time:             Thu 01 Jan 2026 01:34:07 +0000
ROA not before:           Thu 01 Jan 2026 01:34:07 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        61.200.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:07 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=538A71C0CD31B9C9C5593D0FC281234D3803488E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:67:12:2a:b5:1c:55:72:c5:27:ea:41:d9:
                    3c:89:ce:0f:9d:5f:a4:d3:e4:4b:f2:fb:12:f8:6c:
                    93:25:c6:eb:e0:dd:4d:dc:07:3b:6b:d2:55:5b:ca:
                    1d:0e:ab:3b:18:fd:3d:ef:23:9a:e1:12:3c:3c:c5:
                    26:da:a0:80:37:44:cc:3a:01:18:aa:8a:3b:fa:9f:
                    1f:7a:6f:a9:10:50:11:d6:07:55:75:98:53:54:93:
                    c8:ae:03:50:49:53:05:fe:57:e4:a1:58:dc:ec:d1:
                    60:d0:e9:e7:7e:c5:76:4c:d7:2b:01:eb:9a:dc:42:
                    85:63:2e:3d:82:23:b1:30:0d:f3:9b:99:d3:ab:0a:
                    16:2c:7d:d7:c9:7a:04:9b:f6:09:9d:07:6b:2d:d3:
                    ed:64:1a:f4:e2:06:11:51:43:c1:7b:ad:dd:ae:e7:
                    0a:68:ac:ae:fb:bf:02:83:2d:f9:31:f7:26:5d:1d:
                    99:7c:53:cd:c6:16:04:0f:8d:aa:84:94:e0:0a:84:
                    e0:84:9d:5e:61:bb:22:83:dc:29:f2:7b:01:a1:ae:
                    6b:2b:02:54:46:e3:ee:41:78:93:e3:96:e9:a9:16:
                    39:6e:ec:cf:97:bc:1a:e7:06:92:ac:e6:bd:ee:34:
                    b1:3d:ae:93:2e:a1:db:d9:95:4d:4c:19:63:c6:d3:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8A:71:C0:CD:31:B9:C9:C5:59:3D:0F:C2:81:23:4D:38:03:48:8E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/U4pxwM0xucnFWT0PwoEjTTgDSI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:78:ba:b1:82:03:c9:79:d1:0f:15:f4:cb:2d:92:ff:31:
         87:c5:29:80:db:9e:58:ac:ac:7e:cf:65:1f:c6:ec:43:9a:9a:
         82:43:2a:86:94:3d:9f:41:70:76:98:ee:85:d3:3f:bb:83:9a:
         0c:60:08:42:e6:6d:ec:95:aa:f6:c6:c9:29:ac:cb:8a:3d:bb:
         e4:dd:fd:86:f0:66:76:d5:fa:f8:e8:8b:d8:f7:12:18:8e:7e:
         4e:d5:4c:ff:ec:50:69:d6:62:10:cd:27:74:cf:e2:e0:ea:69:
         d3:32:3a:20:4a:b9:0b:85:87:d8:02:71:1e:18:97:c6:59:29:
         79:b2:d3:2f:9c:3c:21:c1:f7:24:cd:51:6b:df:a8:60:69:91:
         0b:ad:aa:cf:c0:af:2b:c8:be:3b:f9:d6:ef:72:07:7d:e3:0d:
         dc:96:97:1d:9e:63:cd:53:fc:59:ad:59:2e:03:ce:6a:9b:b6:
         01:f1:72:b1:2e:7f:7e:60:9f:89:f5:a6:6b:2d:ee:20:ed:ae:
         32:42:97:4d:00:20:4e:4c:b8:cd:4b:4d:77:41:62:6f:79:67:
         53:fe:53:43:6b:1c:b3:f0:b2:0f:73:6a:5c:98:bd:7c:fe:ff:
         68:38:53:5f:23:76:0d:19:b8:b9:64:46:d8:dd:af:cb:6c:07:
         fe:72:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:15 2026 by rpki-client