This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/eh9o8voM3WdQc1tu0BtN_31wMU8.roa
File:                     eh9o8voM3WdQc1tu0BtN_31wMU8.roa (raw, json)
Hash identifier:          OP+6ys0T5EcLSUI12WjEwTLMFtYMCn8dEAhS+F8G/GI=
Subject key identifier:   7A:1F:68:F2:FA:0C:DD:67:50:73:5B:6E:D0:1B:4D:FF:7D:70:31:4F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05D5
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eh9o8voM3WdQc1tu0BtN_31wMU8.roa
Signing time:             Thu 01 Jan 2026 01:34:18 +0000
ROA not before:           Thu 01 Jan 2026 01:34:18 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        61.211.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:18 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7A1F68F2FA0CDD6750735B6ED01B4DFF7D70314F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:98:1f:80:03:46:95:ac:27:8a:0c:b2:88:
                    ea:3f:e2:4b:92:51:eb:8a:4e:c9:53:38:94:88:4c:
                    5a:33:68:c3:e9:8e:18:00:95:97:ec:2e:ed:ea:28:
                    4a:cf:54:5e:d3:23:33:c7:fe:a1:2a:bc:7f:2e:99:
                    4e:b8:d3:0f:94:7d:45:c5:71:94:78:a8:ad:45:87:
                    52:51:38:a5:b4:8d:4f:0b:27:f2:91:a4:3a:34:e7:
                    bb:e3:0c:ad:96:95:57:4d:91:99:20:e2:48:a5:4a:
                    04:e7:db:f8:85:30:58:d2:8d:17:21:5c:1d:68:d7:
                    13:e4:ff:fb:0e:ff:0d:00:bd:d0:5f:d3:a2:8d:08:
                    25:14:31:3d:89:c5:8e:48:f2:c9:01:28:73:e1:91:
                    84:d1:27:70:32:0e:19:05:dd:f6:51:a6:f0:53:09:
                    f3:d0:7d:37:59:a4:5d:8b:2e:ad:91:d5:73:f1:ab:
                    3a:44:1e:ab:cb:9a:3a:2a:98:23:ff:05:93:d0:bd:
                    aa:d6:96:79:85:d0:19:a8:6f:fc:16:51:08:99:e0:
                    d8:13:f3:99:d5:ef:1d:b1:f1:e6:88:b4:b4:16:72:
                    e6:14:03:bc:d1:40:43:d6:13:7a:74:44:c2:d6:1a:
                    72:48:45:a4:14:e3:2e:ae:fb:79:19:e7:60:01:07:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:68:F2:FA:0C:DD:67:50:73:5B:6E:D0:1B:4D:FF:7D:70:31:4F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eh9o8voM3WdQc1tu0BtN_31wMU8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:ca:7a:34:ce:94:f8:70:6d:1d:b7:19:d0:1e:21:09:b3:
         f8:db:17:a6:b2:4b:9c:69:03:7e:ff:70:e6:d0:df:85:dd:18:
         dd:60:fd:cf:1f:6f:e8:e8:e0:06:7e:13:91:06:03:34:f4:eb:
         51:15:c8:ba:d2:ec:65:72:67:e5:fb:86:60:8f:1f:d5:dc:bc:
         0a:dc:a2:83:5e:5a:d4:81:32:a9:0b:e2:9b:a1:2d:da:08:9d:
         32:9b:fd:cf:cf:f9:fb:67:3c:7b:dc:e9:85:ed:96:04:c0:f4:
         34:45:c8:ee:4a:ca:11:3e:5f:78:ed:e6:bd:d3:d3:c8:11:67:
         66:51:d9:eb:40:5e:f4:0b:40:19:25:f5:d8:50:2b:53:f2:80:
         7c:39:68:75:19:6e:9d:92:f1:ae:ab:e4:d9:fe:45:59:43:7f:
         90:bf:7d:bf:66:65:d8:4f:e7:f4:04:61:9e:92:60:be:9e:d0:
         7a:a1:0d:5a:67:c9:ab:ef:48:b3:e7:b1:91:7c:86:e5:47:5c:
         19:01:56:97:c4:10:b3:2d:30:42:81:18:26:0a:a1:f7:aa:21:
         f5:9b:44:6d:46:50:61:0a:2a:67:6b:7f:07:89:ec:54:ee:57:
         43:56:e9:da:f7:c0:20:97:70:59:b8:8a:1a:0f:f7:08:d3:f9:
         ac:b4:40:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:20 2026 by rpki-client