This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/f9zj-oEoTSNPCpFG8k0OPhRDnS8.roa
File:                     f9zj-oEoTSNPCpFG8k0OPhRDnS8.roa (raw, json)
Hash identifier:          aQ9YenI3IVTaxA8pxxVtav+2wi8prIBMnt8DTm4070Q=
Subject key identifier:   7F:DC:E3:FA:81:28:4D:23:4F:0A:91:46:F2:4D:0E:3E:14:43:9D:2F
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       47
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/f9zj-oEoTSNPCpFG8k0OPhRDnS8.roa
Signing time:             Thu 01 Jan 2026 01:38:10 +0000
ROA not before:           Thu 01 Jan 2026 01:38:10 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17530
IP address blocks:        59.191.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Jan  1 01:38:10 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7FDCE3FA81284D234F0A9146F24D0E3E14439D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:3d:93:58:7d:38:ec:42:5c:0d:a6:ab:2d:
                    f7:65:d5:e7:1a:36:ec:b8:07:1b:6d:94:b8:a3:fb:
                    d8:7a:c1:4c:51:c4:6d:cf:12:4e:ca:0d:91:64:e0:
                    2c:87:11:01:79:55:82:d3:08:2d:d0:ad:7e:9b:a9:
                    6b:af:cd:4e:4e:c0:98:bb:fe:bf:10:f8:9c:24:1d:
                    90:f8:00:1c:9c:ca:2d:6f:c0:14:26:84:fb:1b:2d:
                    c4:c4:5f:64:fe:b4:2a:23:da:f0:5f:de:65:1b:b2:
                    b3:03:19:78:92:e3:c1:50:fe:4c:5f:b9:dc:df:bf:
                    c5:4a:7d:53:b9:62:7d:55:35:2e:4e:68:21:fd:90:
                    55:58:ea:c3:69:c8:07:11:35:13:37:cd:0c:bf:79:
                    a9:78:bb:63:14:01:f1:48:b3:f0:77:8f:a7:11:60:
                    cc:41:1e:59:e5:26:3b:86:d4:20:88:32:5c:bb:ac:
                    48:f1:b8:1c:e1:31:49:a6:1d:c6:c8:36:d0:d3:43:
                    ec:a5:8f:80:d1:30:53:70:ac:96:b1:d5:62:6e:b9:
                    63:f4:f5:8d:41:d6:2e:b6:b8:76:27:29:ac:b0:69:
                    1d:d4:2d:09:4a:ac:9b:63:6a:e6:62:43:28:a2:a0:
                    56:2d:09:c9:a9:ba:5a:eb:1a:7a:ac:36:96:89:6a:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:E3:FA:81:28:4D:23:4F:0A:91:46:F2:4D:0E:3E:14:43:9D:2F
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/f9zj-oEoTSNPCpFG8k0OPhRDnS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.191.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:05:d5:03:cf:a0:05:30:ad:58:26:4e:43:65:7d:dd:a7:
         b5:cb:13:e8:0a:27:83:2f:df:16:7b:7e:b5:3a:41:27:a2:b0:
         39:e6:20:64:ea:fb:68:f2:38:5e:ac:14:35:0e:f0:91:08:f8:
         79:a0:69:5e:c2:bc:8e:5c:80:24:5f:b0:bc:5d:9e:e2:ad:5c:
         84:d7:9f:e1:5a:86:98:62:62:b8:89:73:3a:6d:06:d9:2c:cc:
         05:c6:fc:2a:89:dd:3c:62:be:f7:92:05:2a:19:bf:4b:f6:4f:
         ab:4b:7b:99:0c:3f:2c:07:c0:bd:69:61:3e:9e:25:6e:8a:89:
         ff:f7:d5:94:1b:3c:c4:96:77:b9:68:88:96:6e:a4:73:d2:6c:
         c8:28:e3:5b:67:44:75:a3:a2:24:08:6f:bf:2f:c9:70:23:fa:
         6a:22:94:96:65:a4:cd:55:c7:f9:63:ea:22:c6:61:75:f5:97:
         69:75:cd:3a:88:79:b8:7c:f3:e6:be:60:82:6a:89:81:c4:55:
         84:b4:72:c7:5f:99:15:87:32:d2:59:fc:b7:6a:d1:fd:1f:e6:
         55:1b:a0:68:c6:64:9c:c3:dc:ff:a6:7a:4a:b0:c8:1f:83:cb:
         cf:36:d2:3e:a5:6b:26:e2:ab:e7:4c:33:d8:25:1d:a6:b2:47:
         62:d5:12:c4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OEQx
MjRCRjU2QjM3OEQ2M0VDOEJEODU2RjI4M0U1M0U5NjVFQ0EyMB4XDTI2MDEwMTAx
MzgxMFoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoN0ZEQ0UzRkE4MTI4NEQy
MzRGMEE5MTQ2RjI0RDBFM0UxNDQzOUQyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANNCPZNYfTjsQlwNpqst92XV5xo27LgHG22UuKP72HrBTFHEbc8S
TsoNkWTgLIcRAXlVgtMILdCtfpupa6/NTk7AmLv+vxD4nCQdkPgAHJzKLW/AFCaE
+xstxMRfZP60KiPa8F/eZRuyswMZeJLjwVD+TF+53N+/xUp9U7lifVU1Lk5oIf2Q
VVjqw2nIBxE1EzfNDL95qXi7YxQB8Uiz8HePpxFgzEEeWeUmO4bUIIgyXLusSPG4
HOExSaYdxsg20NND7KWPgNEwU3CslrHVYm65Y/T1jUHWLra4dicprLBpHdQtCUqs
m2Nq5mJDKKKgVi0Jyam6Wusaeqw2lolq0/8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR/3OP6gShNI08KkUbyTQ4+FEOdLzAfBgNVHSMEGDAWgBSY0SS/VrN41j7IvYVv
KD5T6WXsojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAzL21ORWt2MWF6ZU5ZLXlMMkZieWctVS1sbDdLSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21ORWt2MWF6ZU5ZLXlMMkZieWctVS1s
bDdLSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDMvZjl6ai1vRW9UU05QQ3BGRzhrME9QaFJEblM4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBju/gDANBgkqhkiG9w0BAQsFAAOCAQEALAcF1QPPoAUwrVgmTkNlfd2ntcsT
6Aongy/fFnt+tTpBJ6KwOeYgZOr7aPI4XqwUNQ7wkQj4eaBpXsK8jlyAJF+wvF2e
4q1chNef4VqGmGJiuIlzOm0G2SzMBcb8KondPGK+95IFKhm/S/ZPq0t7mQw/LAfA
vWlhPp4lboqJ//fVlBs8xJZ3uWiIlm6kc9JsyCjjW2dEdaOiJAhvvy/JcCP6aiKU
lmWkzVXH+WPqIsZhdfWXaXXNOoh5uHzz5r5ggmqJgcRVhLRyx1+ZFYcy0ln8t2rR
/R/mVRugaMZknMPc/6Z6SrDIH4PLzzbSPqVrJuKr50wz2CUdprJHYtUSxA==
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:26:59 2026 by rpki-client