This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/0ORi7apSga95SJLm8IxZMqNAK4g.roa
File:                     0ORi7apSga95SJLm8IxZMqNAK4g.roa (raw, json)
Hash identifier:          QUxZk7Y3fTGsRRK+j2ue/IvTjC4FLSpji1sidhqpglw=
Subject key identifier:   D0:E4:62:ED:AA:52:81:AF:79:48:92:E6:F0:8C:59:32:A3:40:2B:88
Certificate issuer:       /CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
Certificate serial:       3F
Authority key identifier: DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/0ORi7apSga95SJLm8IxZMqNAK4g.roa
Signing time:             Thu 01 Jan 2026 01:38:10 +0000
ROA not before:           Thu 01 Jan 2026 01:38:10 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17530
IP address blocks:        64.63.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
        Validity
            Not Before: Jan  1 01:38:10 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D0E462EDAA5281AF794892E6F08C5932A3402B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:34:f9:36:4e:33:e9:2b:de:88:10:12:08:
                    85:0a:b4:09:45:49:86:5b:96:b8:53:bf:3a:56:f2:
                    9e:ca:39:ae:b0:61:bb:df:00:a9:c3:0a:ce:4f:8c:
                    cd:ad:39:91:aa:a9:3b:72:b6:94:4a:b7:08:95:ef:
                    50:2a:98:70:43:c1:d7:22:1a:a8:7d:dc:06:0a:6a:
                    26:b8:32:7c:3c:63:d4:e1:e5:73:93:3a:a6:c9:f7:
                    c3:7a:8f:7d:56:d1:04:5e:81:4c:a3:bc:a4:39:f0:
                    f1:32:4e:59:09:63:14:4b:92:76:c7:73:48:1f:ea:
                    f4:9f:60:fd:85:c6:d7:a8:eb:2b:f3:b3:8e:31:8c:
                    2a:8c:47:aa:ed:52:4b:f5:f0:a9:f5:3c:ee:9d:b6:
                    4b:cb:ee:95:f0:63:ae:7c:49:51:c9:d1:7b:14:73:
                    17:fb:7a:ea:27:d6:63:ef:38:af:ce:da:98:ac:04:
                    7c:da:76:e9:11:77:3e:66:ce:a1:a4:7b:ec:10:36:
                    31:fb:14:b7:e9:11:29:20:e7:c7:a8:c1:f0:87:9b:
                    3d:ab:86:64:e2:fc:9c:9c:6e:62:75:17:61:e3:a8:
                    ec:08:05:5b:2b:90:a1:d7:30:0e:b4:92:45:dc:12:
                    9e:57:c2:ed:22:5e:4e:f0:19:a5:4a:a6:b4:eb:2a:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E4:62:ED:AA:52:81:AF:79:48:92:E6:F0:8C:59:32:A3:40:2B:88
            X509v3 Authority Key Identifier:
                keyid:DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/0ORi7apSga95SJLm8IxZMqNAK4g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:d8:17:a5:9d:2d:e5:a6:01:0f:f5:1d:57:a0:8d:ed:10:d9:
         24:15:ad:ca:68:7e:03:9f:3e:78:e3:34:03:7d:4a:0c:5b:58:
         0a:bd:e9:c2:b7:61:41:f2:41:c1:7b:53:79:b9:53:b8:62:02:
         ab:01:9a:40:60:20:db:e4:71:b4:e6:44:92:91:1c:fc:3e:9b:
         5a:e8:1e:57:43:13:04:22:d9:1b:55:bc:1d:05:b6:f7:1f:d4:
         49:e7:52:7d:04:3c:ec:09:79:f9:e9:ec:69:d0:e3:6a:ac:cf:
         d4:02:42:72:66:f7:18:11:37:c8:33:6f:2d:a7:13:da:3a:ac:
         40:0e:15:d9:8a:06:b2:05:9a:ff:67:e0:db:0d:06:73:83:f3:
         fb:c1:09:f9:0c:cf:0a:71:1f:25:fa:52:50:00:9c:92:cb:45:
         67:67:21:bb:85:0c:d5:8a:01:24:4d:a9:ca:b0:25:bc:93:a5:
         2f:45:d2:93:35:22:14:09:8b:af:ba:ce:f4:ea:d6:94:dd:81:
         e9:93:3b:ce:bc:c2:54:d1:a8:49:0d:0f:70:a6:ec:50:f2:c6:
         3d:5e:3f:42:0a:bb:85:0c:89:63:b3:87:7e:83:f4:94:31:3f:
         9b:90:07:4f:23:4d:9e:41:d4:67:8f:56:b5:04:ae:38:c2:10:
         76:24:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:50:55 2026 by rpki-client