This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/iTTwgk-GdgojaX-j90hYhCR2XGg.roa
File:                     iTTwgk-GdgojaX-j90hYhCR2XGg.roa (raw, json)
Hash identifier:          AW3yTLfWPOGTLHOLr9Lh1AknVVTYir7dBdVi2PV6pyA=
Subject key identifier:   89:34:F0:82:4F:86:76:0A:23:69:7F:A3:F7:48:58:84:24:76:5C:68
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05D7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iTTwgk-GdgojaX-j90hYhCR2XGg.roa
Signing time:             Thu 01 Jan 2026 01:41:14 +0000
ROA not before:           Thu 01 Jan 2026 01:41:14 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        182.21.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:41:14 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=8934F0824F86760A23697FA3F748588424765C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:b0:ca:01:83:68:92:2a:82:e4:32:c5:23:
                    e3:a0:f7:c3:f8:62:4c:75:9e:a0:b2:03:96:9b:0e:
                    ea:ea:e2:83:5d:96:7b:de:fa:e3:1f:18:14:f3:60:
                    2e:ff:db:e7:77:40:35:d2:b0:4e:48:73:41:3b:52:
                    c7:46:c7:fb:08:c4:92:31:54:1f:9c:f3:7e:ab:6d:
                    2b:ea:89:86:32:2f:8a:df:96:23:a5:10:49:7b:ee:
                    29:6f:b8:6e:b7:ee:0d:79:73:75:2a:4f:29:36:88:
                    84:4d:c6:90:f4:8d:c4:ab:65:ad:6b:db:78:bf:27:
                    e7:d8:0f:39:48:8f:04:f1:e4:cd:02:c9:9f:c3:69:
                    9f:5b:ce:58:a8:8b:04:f3:d1:07:74:4e:57:8a:b0:
                    f8:e7:3a:bb:d2:8c:c5:ec:de:f2:3f:79:6f:26:59:
                    84:6e:49:12:81:81:52:d0:06:90:1e:15:ab:27:8d:
                    52:f0:93:19:a9:45:28:ac:ab:b6:59:85:df:53:1c:
                    1f:a3:32:84:d1:b9:06:8d:60:16:40:96:6d:85:ed:
                    8f:a3:4b:ca:6a:6a:48:3b:58:30:f9:4c:2a:6b:0e:
                    d6:cc:f1:17:40:f2:dc:a7:48:d6:a6:de:58:9a:cb:
                    1c:23:a8:eb:80:30:09:d2:d1:cd:37:ef:e8:7c:1e:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:34:F0:82:4F:86:76:0A:23:69:7F:A3:F7:48:58:84:24:76:5C:68
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iTTwgk-GdgojaX-j90hYhCR2XGg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.21.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:98:f8:cc:08:4d:64:47:70:12:f5:d3:81:00:51:d8:20:97:
         b8:89:d3:f4:78:4c:b2:ce:dd:5c:2d:53:00:09:7b:db:be:65:
         ec:98:71:67:26:f4:59:b6:49:8f:84:d4:20:78:11:c0:db:40:
         cb:82:5c:8e:61:42:d8:3d:41:ad:c6:43:dd:64:60:cf:4e:cb:
         28:f7:de:8d:ab:0c:eb:c8:50:0a:30:09:cc:0d:db:01:11:9b:
         eb:b3:c4:59:f8:78:36:aa:c2:06:7c:96:4c:e9:6d:22:fc:74:
         5e:cd:61:3f:74:3c:b4:16:00:e9:7e:7b:c8:a7:21:c1:15:2d:
         de:f8:06:50:85:7a:ef:ab:90:78:4f:0f:bf:fd:cc:6e:4d:18:
         cc:79:ae:bb:f0:f0:6a:e9:ac:24:48:14:ee:58:64:21:fa:83:
         47:b5:08:c8:f3:cb:9c:b7:03:d7:f8:9f:f1:0f:91:08:84:f4:
         b4:ad:39:06:94:22:71:9e:2e:72:01:54:11:7d:a1:aa:3c:b0:
         65:7a:04:ce:79:d2:21:c3:ec:81:08:22:57:38:13:5c:66:3a:
         f8:a4:8b:07:ed:cc:bd:d4:d0:42:06:c2:f1:88:4e:d7:21:12:
         39:6a:d2:ed:09:03:c9:f7:c5:b3:c6:32:bc:79:27:e1:23:39:
         64:1c:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:33:10 2026 by rpki-client