This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/QGbdo9KaPJOUkVKkWk8pn03bC3I.roa
File:                     QGbdo9KaPJOUkVKkWk8pn03bC3I.roa (raw, json)
Hash identifier:          JDiRJSTH7SwahL4D3nCUKPQeWTiiuTiqxm1vja2j8k4=
Subject key identifier:   40:66:DD:A3:D2:9A:3C:93:94:91:52:A4:5A:4F:29:9F:4D:DB:0B:72
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       95
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/QGbdo9KaPJOUkVKkWk8pn03bC3I.roa
Signing time:             Thu 01 Jan 2026 01:31:54 +0000
ROA not before:           Thu 01 Jan 2026 01:31:54 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     32787
IP address blocks:        61.211.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 04:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jan  1 01:31:54 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4066DDA3D29A3C93949152A45A4F299F4DDB0B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:2c:97:54:25:07:42:7d:88:1e:64:f7:3c:
                    21:f5:00:ef:dd:e7:b3:8f:a8:4f:47:60:67:05:f1:
                    f8:38:63:40:b6:74:f6:c8:b4:d7:30:d7:b5:61:aa:
                    23:81:75:bd:5d:9e:a5:2f:b9:b5:ad:de:6d:13:c0:
                    5f:8c:e1:2b:66:5b:73:73:1c:43:f1:84:81:85:b6:
                    39:ff:17:37:29:db:a1:75:da:b8:27:7b:89:df:01:
                    fd:d8:7f:f5:c8:64:dd:e9:59:3d:8a:92:a9:0d:c2:
                    0f:4e:7a:fd:2d:f7:62:f0:60:96:46:73:bf:18:1b:
                    4a:a5:55:f3:c6:3e:ab:83:10:f1:40:fb:c7:ae:3c:
                    3d:cf:de:e1:e2:e0:db:0b:e3:66:9f:39:06:f6:f0:
                    81:67:ea:64:43:03:27:96:ac:8f:3e:e8:f9:a7:38:
                    4b:a8:78:20:0d:cf:43:d3:94:bf:4e:29:ad:58:ca:
                    62:3d:14:67:77:ad:67:c0:75:1a:1d:c3:c7:b3:50:
                    2e:88:b0:d2:1e:d9:b2:3e:8f:15:94:d5:3f:e1:c9:
                    d6:e5:64:ac:32:53:bd:94:df:85:1c:cd:04:ea:29:
                    3a:d4:c6:6b:f4:a5:11:e5:26:fe:3a:06:9b:d4:b6:
                    20:87:a3:9c:75:15:2f:bb:3a:3f:04:c0:e1:81:0c:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:66:DD:A3:D2:9A:3C:93:94:91:52:A4:5A:4F:29:9F:4D:DB:0B:72
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/QGbdo9KaPJOUkVKkWk8pn03bC3I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e6:6e:32:21:02:a2:b5:c2:0e:06:7f:ef:a1:12:ab:99:41:
         af:95:e5:7b:83:69:7e:df:7b:8a:7f:70:a5:3b:87:f1:9a:72:
         d0:36:c3:e8:3a:a5:f4:07:6b:3b:cd:56:e8:ec:1f:98:f6:36:
         85:6a:fc:64:ce:59:af:89:a7:a0:7e:c0:2a:52:40:5f:36:25:
         3b:57:61:5a:be:81:57:f4:6f:5a:49:fa:76:7c:a1:e5:51:0d:
         3b:72:09:64:da:fa:32:9e:e4:58:c6:48:4e:22:73:d1:37:38:
         f5:34:a7:0c:8d:c9:d5:62:95:d4:22:96:87:0b:38:8f:9f:e6:
         84:b1:cc:74:f2:ee:5c:e5:b6:e8:21:79:dc:65:9d:ea:e2:33:
         18:80:a8:94:0d:fe:af:55:75:11:ea:ad:c3:82:c4:52:60:b5:
         6e:cb:dd:1d:54:cf:a9:c2:32:51:d2:13:85:4e:cb:6f:16:77:
         ca:87:63:bd:9c:55:f0:31:20:1e:91:38:27:b4:13:dc:80:08:
         cc:46:15:81:26:df:37:f1:73:a8:cd:bd:2d:20:2f:a6:9f:cc:
         4a:3f:ab:23:b4:f1:51:a2:e0:20:a0:e5:eb:ba:5e:6d:70:bc:
         72:0f:a5:ad:a7:7d:17:a9:80:58:0e:ad:ac:c3:07:aa:97:e1:
         ff:1f:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:56:31 2026 by rpki-client