This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/tCNiIufUPr8jlgJwAgKspVLF5jA.roa
File:                     tCNiIufUPr8jlgJwAgKspVLF5jA.roa (raw, json)
Hash identifier:          inGNVELKoihiQCu9LmutcWssY9vqAnbbT4I+jg0zlwM=
Subject key identifier:   B4:23:62:22:E7:D4:3E:BF:23:96:02:70:02:02:AC:A5:52:C5:E6:30
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05CA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/tCNiIufUPr8jlgJwAgKspVLF5jA.roa
Signing time:             Thu 01 Jan 2026 01:34:11 +0000
ROA not before:           Thu 01 Jan 2026 01:34:11 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        61.200.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:11 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=B4236222E7D43EBF239602700202ACA552C5E630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:92:51:5c:50:fb:8f:2e:5e:d6:9e:72:44:
                    39:90:b4:db:b0:e0:09:e0:d9:f7:eb:19:a0:50:e7:
                    b6:21:5f:0a:b0:70:d4:e9:27:2a:95:6f:d5:74:e2:
                    01:29:76:90:26:6c:01:ae:2c:50:50:30:f3:5c:23:
                    75:64:af:2f:ba:bf:ef:0d:38:1a:88:48:13:3a:60:
                    c5:d4:27:8d:5f:9d:e4:d7:7a:a0:c6:d9:77:b8:66:
                    7b:d7:b7:9f:14:be:5f:6a:08:2f:88:fd:e4:be:ee:
                    62:b0:dd:3a:7d:59:79:43:35:59:d7:dc:a7:31:30:
                    ad:30:32:b0:8d:6f:91:98:00:0d:84:1d:62:0a:1c:
                    df:08:ac:2f:19:0f:fe:5b:4c:8d:31:81:b1:1a:ba:
                    cb:db:4f:ff:c2:ba:2f:a9:a5:4b:46:27:36:7c:ee:
                    5b:ab:5b:94:d8:2c:b6:3f:a9:e3:dc:d7:84:16:6d:
                    61:c8:81:ca:3e:3e:ba:04:72:33:ba:93:27:5f:54:
                    e3:cf:f5:ba:36:ea:e8:22:ba:47:36:cb:ce:4c:dd:
                    03:39:25:f9:14:f3:a9:c2:9a:3f:78:92:51:ed:51:
                    5f:36:5d:fd:55:00:43:e9:52:1a:ba:ae:40:59:51:
                    54:92:38:5e:ab:22:15:0c:ee:64:c9:07:43:b5:89:
                    09:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:23:62:22:E7:D4:3E:BF:23:96:02:70:02:02:AC:A5:52:C5:E6:30
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/tCNiIufUPr8jlgJwAgKspVLF5jA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:f1:2e:bc:fb:ee:8e:a3:e3:90:89:11:91:e2:7d:fd:20:f7:
         41:55:c2:24:e5:68:a7:47:cd:2b:57:9b:ce:5a:d3:bc:be:63:
         be:3c:d6:bb:7b:df:40:42:dd:45:7f:ee:77:9f:9e:bf:62:92:
         6a:8b:dc:ae:2e:07:0c:2a:9d:1c:6a:55:a8:81:94:b0:2c:f3:
         0e:b2:c5:d7:89:42:09:12:0e:8f:44:2a:0e:2a:b5:de:e6:2a:
         d8:ce:93:e8:6d:08:bf:aa:74:ea:36:ce:a5:c1:05:d6:32:26:
         5c:43:af:07:a6:9c:31:f4:bb:ee:7f:18:84:08:0e:68:11:5d:
         66:54:4f:34:f2:f5:de:64:6f:6c:b8:74:70:94:9f:4d:26:eb:
         28:f4:95:aa:e0:05:5e:16:2d:76:72:c1:63:c6:ef:35:dc:de:
         05:81:1d:26:b2:48:1f:1c:9a:8b:b7:5d:7c:99:2c:9a:14:25:
         9e:52:32:76:0a:87:66:91:a8:dd:cf:cb:ae:1e:06:32:e5:2c:
         fb:ff:8b:23:72:cd:2c:81:63:d8:4a:d2:59:4f:a0:95:59:ac:
         14:7d:02:94:2b:36:a1:f5:2d:ff:a3:73:d5:b3:3d:b7:a4:1a:
         56:8b:18:a5:63:2d:52:98:e3:dc:56:fd:1b:3f:71:de:69:53:
         b6:51:06:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:33:09 2026 by rpki-client