This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/p09-awyJ3s4yc-ylMTu5XbmDsnc.roa
File:                     p09-awyJ3s4yc-ylMTu5XbmDsnc.roa (raw, json)
Hash identifier:          mLsulAmy39xVfc1ZKGV+tIgvlIgZYLhnWHULbp365zc=
Subject key identifier:   A7:4F:7E:6B:0C:89:DE:CE:32:73:EC:A5:31:3B:B9:5D:B9:83:B2:77
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0627
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/p09-awyJ3s4yc-ylMTu5XbmDsnc.roa
Signing time:             Thu 01 Jan 2026 01:53:36 +0000
ROA not before:           Thu 01 Jan 2026 01:53:36 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        61.198.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:53:36 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=A74F7E6B0C89DECE3273ECA5313BB95DB983B277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:07:f7:a9:b3:91:82:c0:06:d1:80:41:df:1c:
                    e6:94:eb:b9:17:68:27:c1:3a:5c:4d:f5:21:70:b6:
                    52:25:32:e6:71:c9:04:a8:a1:df:01:99:6f:0d:aa:
                    0e:de:7b:46:29:2f:1f:db:7d:e3:16:c5:ef:66:0f:
                    d9:bd:b0:c8:80:16:72:90:b3:dc:0e:2c:cc:48:d4:
                    91:8e:d7:6b:51:5c:8c:12:31:85:23:05:a7:a0:e2:
                    a2:c3:3d:3d:92:05:49:d1:6c:21:a6:fc:23:53:95:
                    a3:cd:8c:99:f1:db:22:2c:53:ae:de:3b:12:99:8f:
                    72:e8:11:d7:38:32:ee:51:5d:e9:ad:16:c3:7e:0f:
                    c6:8c:9f:cc:4e:93:7f:09:1b:2b:05:9d:18:73:fc:
                    57:77:5b:29:f8:2d:fe:fb:5e:1a:ab:3a:e0:7b:0f:
                    5d:bd:9d:bd:34:d9:de:7d:59:31:24:16:f0:15:8c:
                    8e:b3:dd:67:65:9a:74:5e:b9:84:ee:c6:56:50:5d:
                    ec:d0:b3:0e:10:3d:58:ec:63:d7:68:c6:af:9b:ec:
                    ce:a0:05:5a:3f:3a:52:f8:2f:51:ed:67:35:c7:71:
                    3c:6f:72:53:81:ee:2b:27:e0:bf:13:32:10:be:76:
                    c7:91:9e:42:78:f3:5d:f5:da:4d:1e:fe:c0:84:5d:
                    a8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4F:7E:6B:0C:89:DE:CE:32:73:EC:A5:31:3B:B9:5D:B9:83:B2:77
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/p09-awyJ3s4yc-ylMTu5XbmDsnc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:3e:53:7d:ca:8d:f0:9d:84:98:f4:82:9a:72:32:25:e1:ba:
         1f:4f:9e:00:7a:41:b0:71:77:35:d6:df:d1:99:6d:40:ec:a4:
         6d:66:4f:82:29:74:0d:75:b6:88:24:aa:7b:38:ad:b0:95:33:
         d9:36:9e:7c:70:4c:fc:4f:86:b0:cf:4a:81:63:64:2c:a2:fe:
         16:ce:e7:f8:f2:36:0a:8b:c2:a8:e7:c8:c1:8f:4d:3e:f3:74:
         43:c2:59:fa:cc:00:52:a5:b0:6c:0c:f7:ea:3c:d3:02:22:d2:
         4d:be:4b:18:63:d0:cc:eb:ef:a9:26:17:70:73:3a:04:6c:eb:
         1f:8a:4b:5d:9b:e2:70:10:51:77:0c:b6:b7:26:01:34:7a:3e:
         39:dd:17:ca:5b:01:ba:06:ad:03:35:d7:6e:ec:93:c8:e7:c8:
         25:20:94:7a:48:0e:21:a6:f2:f7:b1:9b:fe:87:ea:f1:bf:5a:
         ab:91:2c:2d:f8:34:65:86:47:45:4a:3d:88:03:19:92:b4:ac:
         87:f9:9d:0f:be:7d:02:dc:0d:4e:4f:df:63:f1:a3:23:f2:bc:
         16:bb:e2:24:b5:96:de:c3:9c:04:16:0e:92:38:93:5f:3b:11:
         49:33:66:34:1d:bb:27:d5:2d:b7:c7:6c:66:0f:eb:43:5e:d3:
         f9:dc:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:16 2026 by rpki-client