This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/jaXAcq4mZ13LphXF62PKQquDrww.roa
File:                     jaXAcq4mZ13LphXF62PKQquDrww.roa (raw, json)
Hash identifier:          PbIi5IbaWfEbDbL/CyHpq3m0yxVgTl3Bav98jckX25k=
Subject key identifier:   8D:A5:C0:72:AE:26:67:5D:CB:A6:15:C5:EB:63:CA:42:AB:83:AF:0C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0600
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/jaXAcq4mZ13LphXF62PKQquDrww.roa
Signing time:             Thu 01 Jan 2026 01:45:53 +0000
ROA not before:           Thu 01 Jan 2026 01:45:53 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        111.67.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536 (0x600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:45:53 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=8DA5C072AE26675DCBA615C5EB63CA42AB83AF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:1b:00:8d:99:cd:26:63:8c:ac:8f:77:17:
                    f3:f5:5b:f5:08:b8:c4:91:62:13:12:03:99:c3:6b:
                    15:bf:61:44:65:55:1c:b9:94:45:1a:61:c9:a1:8a:
                    f8:9f:18:6b:c6:37:07:54:e4:12:77:15:f2:50:05:
                    6a:37:ce:47:47:6a:3b:c1:4c:99:77:8c:bb:fc:db:
                    7b:6d:39:08:aa:91:fd:73:db:1b:86:3d:ad:ec:a5:
                    a1:6a:af:fe:6a:99:9a:46:43:3e:77:99:6c:aa:3b:
                    91:17:df:a5:ce:0b:90:c7:7e:a7:76:1c:a8:1d:04:
                    b6:f0:01:8e:e3:14:6e:11:b7:93:50:69:fb:61:a4:
                    7d:7c:c0:17:c1:0d:f1:50:31:9b:ea:5d:72:1a:ec:
                    53:f5:55:ed:3b:74:9e:5f:f9:27:95:b8:a8:14:40:
                    62:65:f0:c2:3f:cc:16:a0:7a:54:84:78:13:0f:db:
                    9d:06:35:77:36:2e:8e:69:11:d2:39:82:a7:f1:e4:
                    f6:90:56:cb:f9:fc:77:12:31:18:27:8a:b7:24:80:
                    2e:68:77:28:4e:38:d6:4b:f2:60:ef:41:e9:07:2a:
                    20:c7:83:c4:7c:ec:14:2d:ee:eb:33:cc:b2:d1:f5:
                    27:b4:b7:db:a5:59:93:f8:29:8a:96:88:2b:90:9a:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A5:C0:72:AE:26:67:5D:CB:A6:15:C5:EB:63:CA:42:AB:83:AF:0C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/jaXAcq4mZ13LphXF62PKQquDrww.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:11:4f:f2:47:c3:76:84:a7:49:3d:9e:be:e7:e0:9e:a4:f6:
         90:f4:83:e2:68:26:75:20:66:bb:b6:8a:49:fa:b5:aa:bf:18:
         c3:f6:95:4c:82:37:3e:cc:db:64:8f:26:98:7a:1f:37:18:17:
         d3:9d:da:0b:62:a2:5f:cd:52:84:ef:57:8b:ac:1e:9e:4f:19:
         9c:4e:b9:ce:2c:04:65:7a:0a:1d:39:96:45:de:5e:1e:e1:7f:
         95:64:4b:83:3d:8c:ae:da:c0:36:ab:27:d4:96:0c:45:63:31:
         0b:90:ad:e2:5c:7e:d8:2d:c7:c8:44:a4:b3:c7:a2:4c:49:f6:
         59:8c:49:c8:1e:4f:4f:ce:86:30:1e:0d:42:68:87:7b:b5:02:
         5a:dc:96:79:e6:f5:4e:23:96:4d:fe:36:3f:00:f4:8a:33:c3:
         c0:39:6f:55:08:6f:a5:d1:00:05:3a:82:a2:67:00:c2:62:5c:
         81:64:01:e0:61:78:77:6c:79:c7:85:eb:71:96:fa:5a:25:b5:
         1b:b7:85:69:2e:d5:df:7c:62:3f:7f:87:b2:bd:23:90:ce:00:
         36:93:c3:a3:65:d0:30:60:96:5f:35:74:0e:67:ce:81:16:0b:
         ba:ad:fc:47:37:fc:6f:20:62:54:ee:c0:75:cb:e5:3b:52:ad:
         5e:f1:9e:5f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAxMDEw
MTQ1NTNaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhEQTVDMDcyQUUyNjY3
NURDQkE2MTVDNUVCNjNDQTQyQUI4M0FGMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRORsAjZnNJmOMrI93F/P1W/UIuMSRYhMSA5nDaxW/YURlVRy5
lEUaYcmhivifGGvGNwdU5BJ3FfJQBWo3zkdHajvBTJl3jLv823ttOQiqkf1z2xuG
Pa3spaFqr/5qmZpGQz53mWyqO5EX36XOC5DHfqd2HKgdBLbwAY7jFG4Rt5NQafth
pH18wBfBDfFQMZvqXXIa7FP1Ve07dJ5f+SeVuKgUQGJl8MI/zBagelSEeBMP250G
NXc2Lo5pEdI5gqfx5PaQVsv5/HcSMRgnirckgC5odyhOONZL8mDvQekHKiDHg8R8
7BQt7uszzLLR9Se0t9ulWZP4KYqWiCuQmlAbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUjaXAcq4mZ13LphXF62PKQquDrwwwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2phWEFjcTRtWjEzTHBoWEY2MlBLUXF1RHJ3dy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJvQ3gwDQYJKoZIhvcNAQELBQADggEBABQRT/JHw3aEp0k9nr7n4J6k9pD0
g+JoJnUgZru2ikn6taq/GMP2lUyCNz7M22SPJph6HzcYF9Od2gtiol/NUoTvV4us
Hp5PGZxOuc4sBGV6Ch05lkXeXh7hf5VkS4M9jK7awDarJ9SWDEVjMQuQreJcftgt
x8hEpLPHokxJ9lmMScgeT0/OhjAeDUJoh3u1Alrclnnm9U4jlk3+Nj8A9Iozw8A5
b1UIb6XRAAU6gqJnAMJiXIFkAeBheHdseceF63GW+loltRu3hWku1d98Yj9/h7K9
I5DOADaTw6Nl0DBgll81dA5nzoEWC7qt/Ec3/G8gYlTuwHXL5TtSrV7xnl8=
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:33:09 2026 by rpki-client