This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/CObJMKcmx7LidNyemFLPpFhRBAo.roa
File:                     CObJMKcmx7LidNyemFLPpFhRBAo.roa (raw, json)
Hash identifier:          F+YorYyk60HQS+TQXDNVZcqao1itGlUWTSX2ip6/KJo=
Subject key identifier:   08:E6:C9:30:A7:26:C7:B2:E2:74:DC:9E:98:52:CF:A4:58:51:04:0A
Certificate issuer:       /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial:       1A
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/CObJMKcmx7LidNyemFLPpFhRBAo.roa
Signing time:             Thu 06 Nov 2025 01:40:21 +0000
ROA not before:           Thu 06 Nov 2025 01:40:21 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     17936
IP address blocks:        218.228.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
        Validity
            Not Before: Nov  6 01:40:21 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=08E6C930A726C7B2E274DC9E9852CFA45851040A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:ad:32:f9:8b:04:4b:21:ed:ed:75:cd:8c:
                    7c:50:9f:5c:72:32:d1:1c:69:32:75:d4:5c:12:2a:
                    ce:21:b9:5d:6e:50:46:f6:0c:5a:25:49:3d:5c:f2:
                    22:9b:5a:fb:44:0a:d1:28:16:0c:e2:77:bd:95:a5:
                    e9:e3:fe:09:7a:72:4b:b5:54:6a:db:11:64:5f:80:
                    9b:ba:c9:6e:d0:30:d4:3d:1d:c3:02:dc:12:fd:a1:
                    af:80:d6:a1:ca:fc:e6:0b:f3:b1:91:00:c4:90:65:
                    94:49:52:47:46:16:1f:79:de:2c:01:71:ee:9d:d6:
                    46:9d:96:d4:90:b7:66:a9:b4:32:f8:0d:81:e9:af:
                    8a:35:1e:d7:a6:57:77:7b:db:04:b4:5f:13:40:bd:
                    1b:d8:ca:4c:a0:40:b9:21:f4:d8:77:c1:b5:95:d0:
                    da:1f:e4:61:66:b5:ad:29:13:03:8b:cb:eb:2b:4b:
                    12:ef:59:c3:c6:c8:f6:8a:93:c8:bd:e2:6d:0d:33:
                    38:08:a4:7e:3c:a0:9d:2f:3c:57:33:34:2f:38:56:
                    93:e6:ac:55:ef:5c:ea:4b:2e:1f:f8:d6:93:d6:f8:
                    83:c3:a5:75:a1:2f:92:53:23:1c:40:c5:9f:46:f9:
                    f4:5a:a8:eb:7a:7d:a3:62:4b:9c:54:7d:56:f2:a6:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E6:C9:30:A7:26:C7:B2:E2:74:DC:9E:98:52:CF:A4:58:51:04:0A
            X509v3 Authority Key Identifier:
                keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/CObJMKcmx7LidNyemFLPpFhRBAo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.228.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:ae:2f:b0:e3:f1:36:b2:7e:33:bf:2e:34:50:09:40:c7:
         01:c2:37:b4:a2:ed:c2:f4:cc:20:0d:b7:86:29:24:33:79:87:
         74:a0:13:03:0c:db:8d:7e:ee:70:d4:dd:dd:99:fb:34:b2:a1:
         98:66:db:1b:45:47:b1:14:e0:ce:cc:46:f6:02:0e:a7:f0:d1:
         f4:43:16:53:7f:2b:ea:fe:43:18:49:67:b5:fc:61:45:93:d6:
         68:57:12:40:56:75:ab:a1:9e:ed:61:9d:fa:2a:a6:ba:67:3e:
         50:3a:66:87:71:14:df:dd:4f:01:53:00:23:cd:8a:11:34:ee:
         0f:b8:40:79:6f:1b:61:14:83:b9:10:1a:1b:48:27:f8:0c:05:
         e1:67:c2:9c:88:2f:e0:4f:be:3e:4f:60:ce:30:56:21:de:ba:
         bb:4b:0a:03:12:aa:c9:7e:a9:e1:60:3a:67:b4:6d:67:c6:8c:
         4e:68:c1:d6:d5:2d:b7:b5:71:74:fd:1f:6d:62:18:39:ba:7d:
         d0:25:a1:48:5a:69:06:82:d1:d8:20:8a:e0:18:b5:c2:ab:9d:
         68:e4:4a:e6:89:4b:46:61:25:99:7a:4c:8e:bd:3b:f0:32:b9:
         95:47:0b:be:9d:f0:e0:01:7e:db:e7:5b:ba:45:7a:2e:a4:44:
         a0:72:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:24:07 2025 by rpki-client