This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/DH6WkJEQelmlmVepGCJmONbWpeE.roa
File:                     DH6WkJEQelmlmVepGCJmONbWpeE.roa (raw, json)
Hash identifier:          ktqFryav7bxwSQ16qeKrYZklm4If6yZf1KajMQ2JMB8=
Subject key identifier:   0C:7E:96:90:91:10:7A:59:A5:99:57:A9:18:22:66:38:D6:D6:A5:E1
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       50
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/DH6WkJEQelmlmVepGCJmONbWpeE.roa
Signing time:             Thu 01 Jan 2026 01:28:14 +0000
ROA not before:           Thu 01 Jan 2026 01:28:14 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18094
IP address blocks:        123.200.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Jan  1 01:28:14 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=0C7E969091107A59A59957A918226638D6D6A5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b9:c9:88:ee:e0:52:37:07:63:5e:03:c3:19:
                    d8:bf:11:fb:20:13:e2:76:84:73:53:43:f7:ce:59:
                    5c:02:d0:fc:65:01:38:95:84:2d:df:d6:07:27:79:
                    13:36:22:48:d9:eb:63:c1:9e:7b:e2:12:6a:50:32:
                    0d:db:55:87:7f:66:cb:13:e3:c6:82:47:9d:92:69:
                    49:86:59:07:73:1c:5a:48:17:00:07:60:ba:fb:f6:
                    81:77:b6:c7:fc:9f:00:8d:df:c3:31:f6:62:38:18:
                    21:d0:cc:9d:41:3c:f2:bc:ab:44:a0:35:8a:75:1d:
                    90:e4:bc:8f:87:be:f6:15:f3:90:1b:32:d7:69:8d:
                    26:68:01:8a:9f:6a:c1:59:3b:fe:1b:5e:c6:8b:a2:
                    6c:f3:46:aa:2b:09:89:43:a1:f4:ea:1b:fd:4a:2e:
                    c7:f0:1b:c1:d1:a5:c8:48:2f:6e:86:e5:7a:d4:ca:
                    36:46:c4:57:e3:4e:39:68:1f:95:26:48:57:c0:ef:
                    0d:ab:45:d2:bf:d3:15:7d:01:72:62:8e:a2:ab:2b:
                    7f:cc:f1:70:09:fc:e6:fa:db:9e:e9:52:99:6c:15:
                    8e:7f:a2:3e:c6:e1:1c:1f:3e:4a:2c:e0:b4:c5:2b:
                    05:09:ba:f4:74:7f:ba:ba:9b:a1:17:49:b7:fd:a4:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7E:96:90:91:10:7A:59:A5:99:57:A9:18:22:66:38:D6:D6:A5:E1
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/DH6WkJEQelmlmVepGCJmONbWpeE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.200.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:91:10:28:17:03:2d:86:67:3f:88:50:09:f2:c0:29:1f:6b:
         61:1b:b0:36:04:32:ad:39:45:65:c9:05:28:f1:d2:47:66:f9:
         c7:31:ce:68:53:b0:c8:5c:4c:cf:fd:27:e6:b1:b4:7a:b6:8c:
         1e:de:64:76:1a:27:aa:58:91:c6:3b:60:97:00:14:12:5e:08:
         34:c9:b7:1c:d2:df:03:a7:e6:ec:15:6d:a5:46:81:88:bf:e0:
         1e:64:f1:32:77:cf:2d:e0:76:62:33:ee:b5:13:84:af:f2:f2:
         76:39:d6:a1:27:5d:55:bd:03:b2:10:6a:fe:b5:29:0b:ce:a3:
         3e:68:ee:3c:80:68:c8:de:29:8d:96:28:90:d4:55:80:5b:1d:
         90:29:02:ef:eb:60:bb:93:3d:39:2f:6d:af:77:4b:97:7b:a5:
         21:88:e1:bb:17:62:78:69:c3:79:ad:b5:34:e5:03:12:b5:e6:
         55:82:d9:7e:fa:e8:19:9f:e2:0c:9b:88:da:2a:67:c8:31:ee:
         5f:54:69:10:34:73:24:ff:05:85:8d:43:fc:94:d6:b2:47:48:
         9c:11:c3:41:a4:cc:e4:b8:cc:25:b0:c5:ef:87:91:24:71:b9:
         40:c6:c4:20:1e:17:f5:3f:e0:5f:df:6d:5a:ab:85:1d:b2:68:
         13:bd:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:27:30 2026 by rpki-client