This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/XVxs3KIWgaHU_vATzV4d-aB2QOU.roa
File:                     XVxs3KIWgaHU_vATzV4d-aB2QOU.roa (raw, json)
Hash identifier:          7U43c93k5AP9DOTsWUCGXWC673kZbUAnMjojnw8Lu8w=
Subject key identifier:   5D:5C:6C:DC:A2:16:81:A1:D4:FE:F0:13:CD:5E:1D:F9:A0:76:40:E5
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       9F
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/XVxs3KIWgaHU_vATzV4d-aB2QOU.roa
Signing time:             Thu 01 Jan 2026 01:31:31 +0000
ROA not before:           Thu 01 Jan 2026 01:31:31 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18260
IP address blocks:        210.141.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Jan  1 01:31:31 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=5D5C6CDCA21681A1D4FEF013CD5E1DF9A07640E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:65:59:a0:b3:66:ab:ee:ac:ef:3d:68:8f:
                    cb:c5:23:dc:b0:cf:6d:12:dc:83:a1:e6:b5:b3:3a:
                    2e:1f:30:e0:7e:b3:78:15:e3:81:12:b9:95:1f:29:
                    91:40:ae:0e:43:9e:cc:63:b8:04:84:bb:80:82:3b:
                    54:b1:60:e6:82:c7:9f:97:2d:76:6d:ef:1d:20:2a:
                    d3:da:6f:85:db:04:18:b0:ec:9f:5f:c1:a9:a9:4f:
                    e4:05:09:78:00:3a:7b:34:45:eb:08:a2:bc:e7:cb:
                    bb:f0:66:ff:fd:60:c7:c9:96:a5:c2:4b:64:0e:37:
                    3f:0e:1f:3d:5f:d2:4a:b1:d5:85:a0:7b:b5:45:0b:
                    2d:c4:f5:7a:e6:ff:28:c4:27:92:c8:b5:ee:71:2f:
                    0b:58:cb:96:5f:ab:94:bb:54:17:d9:71:4e:03:e8:
                    d5:32:bf:86:e0:ca:16:49:49:7e:44:b1:f3:ca:a5:
                    7d:c7:f9:87:71:8f:3a:55:d0:34:29:fb:e0:f5:c5:
                    10:d9:71:41:f0:e8:c3:c8:ce:4c:c5:b0:30:02:0b:
                    46:c8:a5:46:a4:4d:b7:02:a0:bb:a6:93:60:fc:54:
                    84:90:7a:7a:fe:30:36:03:19:81:af:4a:d4:f4:ab:
                    d9:8b:dc:91:bb:f4:bd:0c:df:d5:80:fc:5a:be:9f:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5C:6C:DC:A2:16:81:A1:D4:FE:F0:13:CD:5E:1D:F9:A0:76:40:E5
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/XVxs3KIWgaHU_vATzV4d-aB2QOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:ea:7d:78:60:5b:d5:16:ce:3f:a3:3e:c0:26:67:c0:fe:
         a0:2f:04:1f:58:0e:d4:4e:b8:13:c6:97:9b:55:ec:6b:e8:f9:
         8a:89:09:ba:83:18:35:d7:58:05:02:49:8b:ab:6f:88:25:27:
         24:69:4e:b1:3d:84:36:50:a3:2d:38:c6:6b:bc:2c:03:e3:69:
         49:64:2c:42:0b:33:30:93:38:c3:ae:3d:d8:17:9c:ba:b1:72:
         e0:82:9a:f0:c2:67:4d:d6:1e:8d:36:69:ad:93:6b:c4:d4:5d:
         98:5a:08:0e:fd:ab:55:4a:e4:6f:3c:d9:24:ed:81:a9:70:93:
         f1:89:8e:0f:6f:40:fd:11:84:6e:03:47:97:3f:16:0a:bd:65:
         5e:db:70:a4:69:d2:73:51:7e:83:b7:3f:3d:70:e4:1f:dc:24:
         df:41:90:4a:0d:97:c1:49:91:ba:6b:b9:95:69:c6:a2:67:c5:
         df:3a:6f:0a:75:c2:05:b4:ef:7e:b6:6b:4f:05:d1:f3:d3:ca:
         66:b3:43:f2:c2:22:33:74:e5:47:f4:99:2a:5b:6c:66:e8:37:
         8e:8d:69:c9:f1:0e:4f:b9:87:32:11:a1:4f:13:71:c4:c3:91:
         e5:0e:77:70:d2:48:3c:54:9b:10:53:bd:d6:f4:b6:e5:eb:6b:
         12:7f:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:27:28 2026 by rpki-client