This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/vbn8oDuX5SVz5isyUL-bE22I2UQ.roa
File:                     vbn8oDuX5SVz5isyUL-bE22I2UQ.roa (raw, json)
Hash identifier:          zuOnDn9sjXIgviwvpx2k+DHYWDnAHVTjq9pwNeUj0CI=
Subject key identifier:   BD:B9:FC:A0:3B:97:E5:25:73:E6:2B:32:50:BF:9B:13:6D:88:D9:44
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05EA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/vbn8oDuX5SVz5isyUL-bE22I2UQ.roa
Signing time:             Thu 01 Jan 2026 01:41:23 +0000
ROA not before:           Thu 01 Jan 2026 01:41:23 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        59.85.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:41:23 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=BDB9FCA03B97E52573E62B3250BF9B136D88D944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:68:fa:38:c5:36:a6:85:97:33:6b:c3:32:
                    7a:3a:e0:7e:ce:3e:64:68:6e:05:9a:1c:47:f8:15:
                    e9:d2:af:63:50:5c:3b:27:21:01:27:ba:35:72:63:
                    fe:22:b3:68:19:82:8c:26:49:fd:93:e7:6e:66:cb:
                    9e:e6:4b:b7:0f:f8:de:1a:ff:ef:e2:1f:73:ca:25:
                    f6:fb:34:ed:20:bf:ff:96:6a:fd:8f:f5:fe:f2:c1:
                    58:be:9b:2e:5e:07:25:d6:5c:42:f9:db:06:46:4f:
                    e1:f6:57:65:6e:9e:b7:b2:94:26:08:39:b9:c0:dd:
                    61:79:d6:88:eb:c6:b2:d8:45:ed:aa:af:98:5b:7b:
                    e0:c7:ca:f4:e4:2c:d9:86:7e:e6:b4:cd:e4:cd:6b:
                    16:9b:70:24:58:dc:c7:e4:22:d4:a4:a2:6d:4f:e0:
                    46:79:08:52:1e:14:9f:92:ae:94:fc:ec:fa:83:0e:
                    78:47:4c:42:5b:79:d8:fd:b5:10:85:39:ac:3a:74:
                    cf:52:30:8d:f0:1a:ae:9b:66:48:7a:ef:54:1f:f0:
                    ab:a6:16:ce:e3:32:3f:29:9b:d0:f7:34:8b:52:4d:
                    4f:e0:00:b3:ba:08:a5:bb:1c:87:ee:07:35:21:4e:
                    ce:d7:2e:a3:dc:b3:cd:41:64:82:ee:24:a7:77:5e:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B9:FC:A0:3B:97:E5:25:73:E6:2B:32:50:BF:9B:13:6D:88:D9:44
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/vbn8oDuX5SVz5isyUL-bE22I2UQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.85.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:07:62:a7:65:92:84:f8:7c:49:9a:ce:a7:7d:55:dc:cd:
         01:34:5d:76:87:c5:09:34:60:ed:0f:c4:30:a9:47:00:ed:17:
         1c:f2:3c:6f:2f:1b:a3:dd:3f:05:8c:37:7d:c1:41:1f:49:2e:
         dc:5b:65:ae:55:1e:99:f8:82:44:fc:95:4a:5b:a9:0b:aa:12:
         be:b8:47:21:a5:4c:8c:32:a5:9c:3b:33:04:31:06:09:a2:74:
         3a:6f:16:f1:a2:6b:59:e2:a2:7d:2b:2a:29:e0:96:26:32:09:
         66:49:21:0a:84:2a:f8:2a:5a:66:ef:08:3f:22:d1:b5:04:ec:
         fd:98:25:58:8d:4f:13:88:87:b2:a7:f9:da:b5:6f:4a:38:45:
         e1:c8:8e:66:63:01:aa:43:ce:61:1a:25:2a:1e:5d:9c:dc:24:
         fe:ca:a9:1e:b4:4f:df:2c:6a:39:89:d4:8f:b8:cb:8a:c1:a9:
         69:35:77:ff:39:36:77:5e:14:5e:fc:82:18:ea:cc:f4:7f:d7:
         3c:9a:84:d0:81:94:ee:b2:93:c6:78:91:bc:bc:a4:dd:8e:fa:
         ea:d4:28:6d:d0:88:22:f4:ec:48:88:2f:67:08:68:d4:b2:f5:
         48:02:db:83:70:b1:20:9f:c9:70:3d:ea:41:98:07:8a:f4:57:
         32:93:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:33:10 2026 by rpki-client