This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/dscaq_ygdC7LRzfJBy3atR6n6sQ.roa
File:                     dscaq_ygdC7LRzfJBy3atR6n6sQ.roa (raw, json)
Hash identifier:          xDzsUV9lfsDLR4b1sdbkUD41hatjUxeTvuA6I+l4FoQ=
Subject key identifier:   76:C7:1A:AB:FC:A0:74:2E:CB:47:37:C9:07:2D:DA:B5:1E:A7:EA:C4
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0623
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dscaq_ygdC7LRzfJBy3atR6n6sQ.roa
Signing time:             Thu 01 Jan 2026 01:50:07 +0000
ROA not before:           Thu 01 Jan 2026 01:50:07 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:50:07 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=76C71AABFCA0742ECB4737C9072DDAB51EA7EAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:c0:4b:cb:97:9e:b0:d4:75:e6:e3:ee:a2:
                    ad:67:95:b1:21:ff:fa:22:74:74:34:03:0c:82:d8:
                    bd:ba:1f:eb:cb:6e:49:3d:2a:bf:88:e6:51:b1:88:
                    ee:e7:55:23:10:d6:8e:e3:84:54:c5:e3:a3:e9:06:
                    3f:6a:d2:49:4b:fc:f6:63:9f:c8:76:b0:b8:b0:f8:
                    67:7e:b8:17:5c:7d:0f:a8:98:41:22:94:8a:93:4a:
                    01:cc:a3:4a:0e:bc:1f:bf:59:d1:20:c5:09:5a:8f:
                    89:c2:dc:73:1f:1d:ca:57:a7:bc:15:74:41:52:39:
                    67:7e:cb:fc:64:46:18:4f:4e:ce:4f:8e:b3:c3:89:
                    a9:7e:09:22:4e:5e:73:eb:c6:12:15:72:db:0d:a9:
                    fd:86:2f:20:17:84:37:e1:48:f5:30:f3:a5:c1:2c:
                    0b:5b:b7:96:ba:b0:89:1f:d2:99:02:b3:06:a7:18:
                    e7:b4:2a:aa:d7:f9:cf:6c:12:09:49:aa:e8:6a:33:
                    14:52:99:2f:df:7f:8c:23:96:43:cd:92:50:f9:f3:
                    a1:3b:2e:e3:90:db:c8:94:32:cd:b5:1d:aa:49:17:
                    76:30:1c:61:4f:c8:3f:9f:c3:97:4e:da:5f:6d:c7:
                    bc:55:00:ee:cf:3b:cb:8d:12:28:1e:64:21:22:0d:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C7:1A:AB:FC:A0:74:2E:CB:47:37:C9:07:2D:DA:B5:1E:A7:EA:C4
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dscaq_ygdC7LRzfJBy3atR6n6sQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:f6:b2:ba:41:21:35:43:a3:de:77:e7:14:51:67:54:fe:19:
         09:3e:4e:52:d9:54:44:7f:a9:76:4e:7c:bd:c2:4d:aa:3e:b2:
         12:c4:27:9b:10:47:9e:4a:b4:d9:85:9f:8a:cc:1c:09:33:44:
         32:26:a4:5a:0d:57:4a:55:7d:ff:0e:91:cd:89:e7:8a:44:3f:
         75:a5:e7:e6:fd:e1:62:74:b8:90:29:69:e1:11:fa:fc:fd:e7:
         23:5d:05:6b:15:4d:f6:3e:aa:9c:9b:c3:3c:bd:18:97:ed:7a:
         eb:d5:0e:95:d9:4a:51:3c:4b:b7:f4:8f:eb:03:d3:ba:15:c8:
         e6:58:95:64:bc:1d:ae:92:05:7f:43:d6:be:78:23:92:c3:ec:
         e5:95:22:f9:aa:4a:d3:80:e4:21:ff:a6:41:1f:4a:2b:43:a4:
         11:55:74:94:6a:13:8e:47:12:8e:c8:93:24:af:95:48:8d:53:
         b2:da:67:f1:bb:1b:87:ae:42:0b:5e:b5:aa:3f:54:ed:78:65:
         e9:05:81:0c:cd:89:9f:57:0e:27:48:1c:98:77:e1:b2:ea:10:
         7f:eb:b6:d1:91:b6:c0:7c:d1:8b:78:29:7c:56:ee:7c:64:9e:
         28:0b:72:9b:11:2e:07:a3:2b:b3:20:4b:5c:bb:47:26:29:71:
         8b:ef:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:15 2026 by rpki-client