This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/xMqGPmZesfEqIjderja1iPWCc-0.roa
File:                     xMqGPmZesfEqIjderja1iPWCc-0.roa (raw, json)
Hash identifier:          vhkehZ4SDktLxnImCk65RrFPhcn5hUCh5tUqkh8gYe4=
Subject key identifier:   C4:CA:86:3E:66:5E:B1:F1:2A:22:37:5E:AE:36:B5:88:F5:82:73:ED
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       49
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/xMqGPmZesfEqIjderja1iPWCc-0.roa
Signing time:             Thu 01 Jan 2026 01:38:11 +0000
ROA not before:           Thu 01 Jan 2026 01:38:11 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17530
IP address blocks:        122.201.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Jan  1 01:38:11 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=C4CA863E665EB1F12A22375EAE36B588F58273ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:50:ce:82:4e:52:a4:a6:33:4b:f8:68:6b:
                    81:bb:c6:2f:d0:1b:88:fd:51:30:0f:3f:ec:b5:01:
                    10:c6:4e:7d:fc:24:02:8d:0c:a3:7b:ea:fd:6b:8c:
                    9a:20:ca:81:dc:9b:6f:52:56:ab:07:df:29:73:49:
                    dd:0e:51:1d:9b:c8:43:3c:9c:73:00:97:ec:15:b8:
                    b4:0d:87:dd:64:8f:8d:bb:c2:06:e5:9b:5d:0f:2a:
                    0b:d5:f1:e0:60:32:65:76:b1:3f:fe:0e:30:35:c3:
                    6f:ad:ab:36:28:60:5a:1e:78:f0:a6:27:1e:1d:8d:
                    14:39:7f:9b:e1:31:3e:d0:29:b6:37:de:f4:69:da:
                    0a:89:66:24:ed:53:2b:6b:1e:a4:3f:4e:21:de:5d:
                    ac:c1:c1:8c:ce:66:05:d8:6f:19:8d:e2:76:a7:35:
                    d8:a0:b8:6b:1b:1a:7d:64:c2:5e:c0:df:20:72:e5:
                    64:3f:46:5a:7d:b7:55:c7:71:28:9c:b8:6b:b3:da:
                    53:bf:6d:8b:3d:35:71:de:75:31:1d:4d:ec:87:cf:
                    7b:ac:b2:35:12:06:63:bb:63:19:35:ef:7b:ee:67:
                    6b:39:06:78:07:5b:49:ad:47:a4:2e:69:2e:bf:95:
                    02:e1:e0:fb:3d:98:6a:b5:3f:c1:dc:8a:1c:44:c0:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CA:86:3E:66:5E:B1:F1:2A:22:37:5E:AE:36:B5:88:F5:82:73:ED
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/xMqGPmZesfEqIjderja1iPWCc-0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.201.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:59:36:08:aa:2b:7e:61:99:51:89:39:bb:bc:34:ef:3a:52:
         05:b5:c3:77:d0:f2:a4:6a:35:9d:51:06:60:ed:9f:63:30:27:
         cf:cc:f3:d4:4f:25:5e:e9:0b:cd:0f:7f:32:43:8e:42:32:85:
         6e:8b:22:6b:9a:94:69:98:fa:8f:bc:60:34:6b:36:24:0a:be:
         52:35:34:ef:75:69:74:5c:b7:5a:0e:69:43:61:9a:aa:00:b7:
         f2:e1:8e:4a:9e:ca:02:d8:fc:c1:77:8b:1b:eb:95:6a:af:f0:
         cf:99:92:32:2f:66:56:b9:74:df:13:5f:8b:c9:94:26:9f:ea:
         e7:e8:00:87:31:5a:dd:2e:48:81:bb:b6:55:ba:c7:f4:4a:c3:
         a2:b8:25:ef:50:c5:fd:88:41:c5:d7:02:a8:4d:82:de:ef:14:
         a9:2d:de:b1:d0:a1:19:f1:38:1b:61:1d:15:2b:1e:77:59:97:
         cd:08:7c:d8:3a:00:63:d7:be:4e:ae:ec:9d:cf:21:2f:b8:f2:
         35:b9:06:f2:7e:81:27:f5:62:d3:81:0c:a4:45:9c:4f:fc:ce:
         98:38:c6:86:ca:2c:d1:7e:58:2b:ae:17:ed:27:df:8c:e9:fb:
         b8:78:e2:6b:5b:68:00:9f:c6:73:66:bb:ce:ff:e7:5a:dc:d9:
         90:b8:2b:5c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OEQx
MjRCRjU2QjM3OEQ2M0VDOEJEODU2RjI4M0U1M0U5NjVFQ0EyMB4XDTI2MDEwMTAx
MzgxMVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoQzRDQTg2M0U2NjVFQjFG
MTJBMjIzNzVFQUUzNkI1ODhGNTgyNzNFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKZAUM6CTlKkpjNL+GhrgbvGL9AbiP1RMA8/7LUBEMZOffwkAo0M
o3vq/WuMmiDKgdybb1JWqwffKXNJ3Q5RHZvIQzyccwCX7BW4tA2H3WSPjbvCBuWb
XQ8qC9Xx4GAyZXaxP/4OMDXDb62rNihgWh548KYnHh2NFDl/m+ExPtAptjfe9Gna
ColmJO1TK2sepD9OId5drMHBjM5mBdhvGY3idqc12KC4axsafWTCXsDfIHLlZD9G
Wn23VcdxKJy4a7PaU79tiz01cd51MR1N7IfPe6yyNRIGY7tjGTXve+5nazkGeAdb
Sa1HpC5pLr+VAuHg+z2YarU/wdyKHETA9f8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTEyoY+Zl6x8SoiN16uNrWI9YJz7TAfBgNVHSMEGDAWgBSY0SS/VrN41j7IvYVv
KD5T6WXsojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAzL21ORWt2MWF6ZU5ZLXlMMkZieWctVS1sbDdLSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21ORWt2MWF6ZU5ZLXlMMkZieWctVS1s
bDdLSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDMveE1xR1BtWmVzZkVxSWpkZXJqYTFpUFdDYy0wLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3rJADANBgkqhkiG9w0BAQsFAAOCAQEAnVk2CKorfmGZUYk5u7w07zpSBbXD
d9DypGo1nVEGYO2fYzAnz8zz1E8lXukLzQ9/MkOOQjKFbosia5qUaZj6j7xgNGs2
JAq+UjU073VpdFy3Wg5pQ2GaqgC38uGOSp7KAtj8wXeLG+uVaq/wz5mSMi9mVrl0
3xNfi8mUJp/q5+gAhzFa3S5Igbu2VbrH9ErDorgl71DF/YhBxdcCqE2C3u8UqS3e
sdChGfE4G2EdFSsed1mXzQh82DoAY9e+Tq7snc8hL7jyNbkG8n6BJ/Vi04EMpEWc
T/zOmDjGhsos0X5YK64X7SffjOn7uHjia1toAJ/Gc2a7zv/nWtzZkLgrXA==
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:26:59 2026 by rpki-client