This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/IMQ_6TVotkMQBsGaNgpt4zHz6wQ.roa
File:                     IMQ_6TVotkMQBsGaNgpt4zHz6wQ.roa (raw, json)
Hash identifier:          avBGcXfinQtzOdGA1ChkOMDnHGrn45fMRXuBi2YgcEQ=
Subject key identifier:   20:C4:3F:E9:35:68:B6:43:10:06:C1:9A:36:0A:6D:E3:31:F3:EB:04
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       53
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/IMQ_6TVotkMQBsGaNgpt4zHz6wQ.roa
Signing time:             Thu 01 Jan 2026 01:28:15 +0000
ROA not before:           Thu 01 Jan 2026 01:28:15 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18094
IP address blocks:        219.118.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Jan  1 01:28:15 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=20C43FE93568B6431006C19A360A6DE331F3EB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:33:b9:bd:24:dd:a4:90:6c:47:2e:93:03:
                    87:6f:ba:6f:f8:1a:51:75:7c:e7:a6:a8:41:d8:e1:
                    51:a2:69:5f:a5:9a:ec:1f:28:2c:9f:2f:b9:6d:f6:
                    d2:87:8b:5b:5d:52:a2:9a:e4:21:21:40:8e:ee:dc:
                    a1:02:31:56:ca:d8:25:ba:0f:19:fd:90:64:44:e2:
                    2d:1a:9b:6d:80:27:29:d7:96:ea:fd:24:54:3f:a4:
                    c9:e3:9a:69:3f:34:85:21:d1:1e:e7:23:83:7d:27:
                    c6:d2:57:01:f3:29:af:40:28:1d:1f:27:bd:f5:6d:
                    f5:0d:35:c3:61:3b:67:c8:55:02:a5:8b:05:f2:ee:
                    ea:ce:bb:5b:93:dd:7e:42:ed:f9:c8:e5:60:84:42:
                    f2:0b:21:ff:50:11:10:0c:10:5f:64:f9:f9:2d:0f:
                    b7:74:27:30:e9:9f:ea:01:32:76:e8:aa:7d:ff:80:
                    2c:99:65:fc:9c:a5:33:dd:09:88:d5:d7:11:fa:f8:
                    5c:3e:13:8f:d8:d5:47:de:b5:af:68:28:ea:b5:34:
                    94:75:65:aa:91:24:8c:be:98:94:56:ab:cc:8b:42:
                    48:f5:c5:98:25:6b:32:44:26:57:8b:be:96:b1:fa:
                    b7:a6:58:06:64:80:82:de:92:1b:75:1d:63:95:35:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C4:3F:E9:35:68:B6:43:10:06:C1:9A:36:0A:6D:E3:31:F3:EB:04
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/IMQ_6TVotkMQBsGaNgpt4zHz6wQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.118.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:27:de:73:1e:35:d3:de:79:28:89:18:e7:f1:2e:8d:a0:c4:
         89:6c:09:2b:bc:9f:90:73:a5:c8:5a:13:8f:da:72:67:6b:2f:
         19:ff:09:ac:45:50:3b:0e:79:b6:9c:c7:f5:fc:6e:5a:c6:83:
         67:89:4a:69:24:6e:1a:9a:50:eb:93:0f:3a:1d:28:11:d8:30:
         ec:76:06:a4:15:83:cd:82:bd:36:6d:6a:b8:ba:25:26:be:1f:
         07:a0:7d:1c:5d:f5:77:ce:1a:61:5d:b0:73:4f:8a:24:a8:9d:
         9f:0b:e2:1f:35:4f:4a:9d:77:60:81:77:b1:13:c1:b1:87:8e:
         ca:5e:15:4a:a7:3e:2c:7e:d9:87:04:04:c9:16:a8:be:6a:ab:
         51:52:7e:64:f0:30:a0:13:5e:7c:76:e1:87:08:ff:0e:63:d8:
         dd:87:a6:d1:06:81:ac:05:8c:67:e3:41:06:15:f9:7d:8c:67:
         48:5a:47:3d:31:2c:d6:76:a9:53:76:dd:28:16:98:09:ee:c0:
         2f:78:92:07:0f:f2:14:71:fc:4e:43:0d:83:0c:64:ff:c3:8a:
         e6:00:1c:5e:28:c6:c8:2f:90:89:27:ab:a6:74:07:35:1c:4f:
         ac:ba:a7:3c:4e:35:1c:87:f0:da:ee:e6:78:70:3e:be:5b:6c:
         68:57:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:28:10 2026 by rpki-client