This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/iYPP2odA_x928T7IztW7Nayc5Us.roa
File:                     iYPP2odA_x928T7IztW7Nayc5Us.roa (raw, json)
Hash identifier:          +Try/il+aV5HUryhl5p6pIK+ZtKrNB98n4BcJC5eTbw=
Subject key identifier:   89:83:CF:DA:87:40:FF:1F:76:F1:3E:C8:CE:D5:BB:35:AC:9C:E5:4B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05D4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iYPP2odA_x928T7IztW7Nayc5Us.roa
Signing time:             Thu 01 Jan 2026 01:34:16 +0000
ROA not before:           Thu 01 Jan 2026 01:34:16 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        218.219.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:16 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=8983CFDA8740FF1F76F13EC8CED5BB35AC9CE54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:f9:b2:50:d4:3b:d6:a4:e8:1b:de:3d:d8:
                    1d:66:b7:cf:57:49:12:dd:ba:de:2a:5a:af:8a:ba:
                    b8:b2:b5:8e:86:03:18:5f:5e:d6:a9:0d:d6:ba:70:
                    46:b0:88:73:4e:ac:c2:6b:2d:50:4e:af:1f:a7:5d:
                    c7:da:be:ba:53:e3:38:1d:63:e9:85:98:27:bf:7e:
                    bb:46:3b:91:9b:da:60:22:86:67:d9:81:b8:4e:88:
                    54:06:01:46:38:7b:f7:41:75:bf:51:16:59:d1:56:
                    b7:5c:7c:2d:17:87:15:e7:2d:fe:78:ef:a2:74:11:
                    8c:b4:45:d3:3c:94:81:d9:13:1c:e3:7c:98:d7:28:
                    83:e6:9f:be:a5:17:83:3c:fd:ba:45:93:cf:45:e8:
                    f3:5c:71:7a:9a:57:9d:98:9d:36:d0:26:8d:b2:44:
                    20:ed:ca:83:f2:25:bd:cd:26:1d:38:0b:a7:70:14:
                    bd:f4:5f:6c:18:07:05:58:89:e0:3c:97:7e:9e:a7:
                    41:2c:08:0f:15:d5:17:ef:04:c0:35:b7:e4:66:93:
                    3a:38:18:01:8d:05:bf:e4:8a:eb:3a:b8:78:5e:8f:
                    84:dc:7a:88:54:74:87:6d:4d:d5:5f:97:40:c8:1a:
                    ca:44:2d:91:58:d8:c5:40:a8:e1:2f:f6:90:6b:15:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:83:CF:DA:87:40:FF:1F:76:F1:3E:C8:CE:D5:BB:35:AC:9C:E5:4B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iYPP2odA_x928T7IztW7Nayc5Us.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:87:9d:b0:98:8c:69:ef:8d:13:15:43:2d:04:03:6b:44:
         47:3e:d5:ec:81:73:c0:98:09:ca:3e:4c:67:43:73:97:20:f8:
         49:a3:c7:be:37:d8:e8:67:77:7c:d7:4a:eb:95:f0:dc:e8:99:
         e6:cc:7b:dd:c2:b3:b7:8a:e1:a2:5e:22:60:8f:3c:ac:02:bc:
         eb:cb:ac:f0:49:6b:84:40:d4:44:54:2f:d3:3b:c3:4e:91:3e:
         ca:44:6b:ff:42:d8:db:53:d8:54:d4:c9:e2:20:23:75:39:0b:
         95:18:0d:98:0e:91:d5:1e:71:2e:55:e0:2f:9c:99:8c:c3:6f:
         b8:18:df:67:0c:4b:4a:3a:96:21:9b:00:1e:25:dc:6e:14:63:
         fe:f8:97:57:37:f7:bd:80:e6:a6:62:13:ca:42:9e:ee:2b:f7:
         16:0c:5f:da:d8:c7:05:ea:5e:d9:d2:c1:63:29:48:63:a4:6b:
         82:28:22:fc:65:ee:12:1c:ff:a7:c0:bb:b5:a4:ea:20:18:44:
         ea:4c:b3:a1:33:a6:84:a0:4d:da:cc:62:c3:88:7f:b9:49:ed:
         30:4e:b9:d8:8c:d0:dc:a1:69:77:ee:6e:0e:39:e6:4c:c9:91:
         71:70:62:0a:ee:c9:e6:2f:fb:bb:76:a5:91:58:5a:dd:97:f4:
         e8:ab:36:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:20 2026 by rpki-client