This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/wToLaIgqqu1ggJ-zqZdpOqCcJWc.roa
File:                     wToLaIgqqu1ggJ-zqZdpOqCcJWc.roa (raw, json)
Hash identifier:          vpFEi69dRl1Z6im4JLR4jp1+w6OkKaZBF3Id6Kp42xQ=
Subject key identifier:   C1:3A:0B:68:88:2A:AA:ED:60:80:9F:B3:A9:97:69:3A:A0:9C:25:67
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05C7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/wToLaIgqqu1ggJ-zqZdpOqCcJWc.roa
Signing time:             Thu 01 Jan 2026 01:34:09 +0000
ROA not before:           Thu 01 Jan 2026 01:34:09 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:09 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=C13A0B68882AAAED60809FB3A997693AA09C2567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:41:bb:9c:89:18:1d:cf:d3:26:14:7b:bc:
                    f0:0f:c1:f8:ce:6f:af:c3:6d:5c:f6:bb:a6:83:23:
                    b3:15:14:2f:2d:11:59:e0:26:cb:22:e8:7f:f6:97:
                    c8:cf:69:c1:85:a2:55:2a:04:c7:dc:40:bb:87:1e:
                    95:35:14:11:fc:17:41:69:fe:da:30:a3:0c:e1:31:
                    80:7c:af:70:73:d4:f0:62:a8:f0:8a:57:2c:fb:d9:
                    8f:5d:f4:9c:72:1e:2a:26:80:dd:f8:b4:cc:4e:d0:
                    b9:a7:7a:0f:3e:5a:f2:c1:08:43:39:7a:17:e8:c7:
                    57:03:93:d5:68:19:b1:8f:12:68:ad:6a:9b:f1:58:
                    cb:29:1a:a5:a3:e7:88:82:e1:c1:c5:e0:03:c4:91:
                    be:11:63:7e:34:85:78:6b:4e:a4:ae:17:31:31:9e:
                    53:db:98:d1:34:d2:c8:c8:ff:fc:39:58:0b:c5:37:
                    77:10:aa:bf:47:a0:6a:4e:34:1d:69:21:02:8c:c6:
                    8e:d5:c8:49:e4:c5:35:63:9e:24:73:0f:6f:f8:e0:
                    02:37:67:a3:65:ad:b7:67:cd:19:48:a3:6e:30:49:
                    b9:08:ee:65:d2:fc:50:43:a8:78:6c:36:e2:fb:54:
                    29:8a:ff:9a:59:a1:1d:17:2e:81:76:cc:c1:81:e8:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3A:0B:68:88:2A:AA:ED:60:80:9F:B3:A9:97:69:3A:A0:9C:25:67
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/wToLaIgqqu1ggJ-zqZdpOqCcJWc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:3f:18:1c:ab:a0:9b:cb:1b:1f:c1:07:e0:61:13:78:40:
         d4:ac:da:76:30:e9:e4:bb:eb:fb:64:b6:50:ac:8b:44:80:ae:
         de:b3:13:e3:01:56:cf:bd:09:65:c9:1d:73:53:b1:22:dd:0b:
         77:4a:5b:a1:39:2f:22:6c:f2:99:7e:a9:37:08:a0:b4:98:f2:
         97:d6:77:82:8e:59:31:af:8e:0f:89:eb:72:25:07:cb:ef:2e:
         56:60:5b:a8:67:1b:05:50:6e:6a:87:8b:5d:48:4a:9e:70:14:
         ea:92:61:60:ed:18:68:73:56:9a:6c:33:d1:3a:4f:fa:39:e2:
         c6:98:2a:b2:a0:e8:d9:52:a2:3f:58:9b:51:93:57:70:35:80:
         a2:24:5b:0b:e8:b4:fa:55:c8:00:20:e1:7c:93:ea:ac:61:c1:
         1b:b0:3d:0b:42:62:81:4d:81:1e:05:20:11:27:61:6e:4d:d1:
         19:03:2f:56:f9:80:a5:58:aa:d0:fb:8b:28:de:6f:d8:79:9c:
         b9:bb:f8:73:a2:2b:82:e2:2b:06:6c:82:f2:46:f0:3d:94:3e:
         94:1c:72:63:e8:b4:fc:df:37:75:fc:7b:85:32:84:4a:e4:3e:
         63:0b:c8:47:07:d1:cd:29:33:67:e4:00:87:83:5e:5d:c6:f8:
         f9:a5:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:51 2026 by rpki-client