This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/fyjKg8bZYz--AzwuJrmqz05NxAo.roa
File:                     fyjKg8bZYz--AzwuJrmqz05NxAo.roa (raw, json)
Hash identifier:          d8tLU2OSTwGNNbBla725lmQxXRcEPwRNsqYlvrPelS8=
Subject key identifier:   7F:28:CA:83:C6:D9:63:3F:BE:03:3C:2E:26:B9:AA:CF:4E:4D:C4:0A
Certificate issuer:       /CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
Certificate serial:       55
Authority key identifier: 91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/fyjKg8bZYz--AzwuJrmqz05NxAo.roa
Signing time:             Thu 01 Jan 2026 01:31:25 +0000
ROA not before:           Thu 01 Jan 2026 01:31:25 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18260
IP address blocks:        24.53.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
        Validity
            Not Before: Jan  1 01:31:25 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7F28CA83C6D9633FBE033C2E26B9AACF4E4DC40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:fd:c6:25:d9:47:a4:44:fb:d6:5e:14:e6:
                    6e:18:c3:ef:ec:fc:15:65:17:d2:cc:51:9c:38:a4:
                    5b:fe:56:aa:6b:50:59:74:53:8f:34:8d:03:d4:0f:
                    fa:71:32:01:7a:c1:c8:82:e0:46:62:07:07:44:91:
                    ec:bd:d1:5f:12:e7:9b:85:83:07:10:bb:c5:7c:99:
                    4a:09:59:0a:7a:f1:79:1e:93:c9:33:16:16:ff:83:
                    b0:4f:0c:62:9f:88:48:6e:71:91:66:b2:e2:69:50:
                    fb:7c:87:06:31:e8:58:62:73:59:08:7d:2e:2f:c3:
                    ee:e5:e5:c4:96:eb:9a:8c:56:82:14:45:c1:8f:a7:
                    30:3d:43:49:6f:8f:a6:ba:fb:6e:d3:b0:3c:38:f5:
                    9c:fb:d9:e6:6c:94:58:13:94:96:48:b5:45:fd:63:
                    0c:a0:15:34:ef:63:2d:2b:f5:dc:25:49:2d:f4:4d:
                    f0:1a:93:27:c5:f7:bb:57:6a:44:c9:be:a7:47:1f:
                    ea:85:fb:a1:f4:d9:e5:de:51:87:d3:0f:c4:e2:46:
                    da:78:d7:98:47:88:74:18:aa:31:ab:38:5f:4a:dc:
                    31:b5:8f:cb:c8:56:8e:c2:52:1b:ba:01:87:28:de:
                    1e:5f:5f:a6:d0:34:a7:a1:da:94:7b:05:02:10:45:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:28:CA:83:C6:D9:63:3F:BE:03:3C:2E:26:B9:AA:CF:4E:4D:C4:0A
            X509v3 Authority Key Identifier:
                keyid:91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/fyjKg8bZYz--AzwuJrmqz05NxAo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d0:14:f1:27:04:39:8e:ae:cb:83:f5:f8:73:c3:45:88:24:08:
         6d:1c:41:40:9f:d2:9a:d2:c9:9f:85:c8:58:f5:74:36:36:fd:
         55:dc:e2:d6:d0:f7:09:81:25:27:5c:92:26:93:37:b0:03:a9:
         ce:df:af:7a:74:3c:b1:c2:7a:30:26:1d:b2:b7:55:12:1a:54:
         45:ae:65:30:63:f6:11:06:e6:ab:14:8c:84:dc:fd:c5:95:2c:
         62:4e:f6:29:7c:41:25:0c:f4:b3:7a:55:a8:e8:d1:24:aa:f8:
         ad:7b:01:45:e7:dc:de:37:a7:eb:b5:8c:07:42:ba:d1:45:c8:
         0d:b2:a4:80:0f:04:fe:91:52:f2:13:a0:50:f7:38:34:6a:44:
         f7:ab:1a:4a:2d:55:80:94:b7:2a:28:27:59:72:47:78:ca:fe:
         a3:e3:d6:22:ac:45:14:89:54:de:a4:10:e1:7a:e8:f2:a1:3d:
         50:27:5d:39:96:05:2b:10:be:3f:e6:39:3a:6f:51:0b:e2:6d:
         a6:a3:b1:2b:d4:f5:cc:ce:e2:af:3a:4e:96:c0:08:89:35:cb:
         b1:ce:33:5a:91:87:df:2e:5b:9d:f0:0a:33:0a:63:8c:31:24:
         f4:5a:0c:43:17:05:33:14:cb:17:9a:b8:e5:ce:bc:31:ef:8d:
         5c:ff:86:1a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MTNB
Nzk0ODVBRTZENENCNUI5N0FGOEJBQTUyQjU5NjU2QTIyMjRBMB4XDTI2MDEwMTAx
MzEyNVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoN0YyOENBODNDNkQ5NjMz
RkJFMDMzQzJFMjZCOUFBQ0Y0RTREQzQwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMQO/cYl2UekRPvWXhTmbhjD7+z8FWUX0sxRnDikW/5WqmtQWXRT
jzSNA9QP+nEyAXrByILgRmIHB0SR7L3RXxLnm4WDBxC7xXyZSglZCnrxeR6TyTMW
Fv+DsE8MYp+ISG5xkWay4mlQ+3yHBjHoWGJzWQh9Li/D7uXlxJbrmoxWghRFwY+n
MD1DSW+Pprr7btOwPDj1nPvZ5myUWBOUlki1Rf1jDKAVNO9jLSv13CVJLfRN8BqT
J8X3u1dqRMm+p0cf6oX7ofTZ5d5Rh9MPxOJG2njXmEeIdBiqMas4X0rcMbWPy8hW
jsJSG7oBhyjeHl9fptA0p6HalHsFAhBFLr8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR/KMqDxtljP74DPC4muarPTk3ECjAfBgNVHSMEGDAWgBSROnlIWubUy1uXr4uq
UrWWVqIiSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2tUcDVTRnJtMU10Ymw2LUxxbEsxbGxhaUlrby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2tUcDVTRnJtMU10Ymw2LUxxbEsxbGxh
aUlrby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MzEvZnlqS2c4YlpZei0tQXp3dUpybXF6MDVOeEFvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBRg1wDANBgkqhkiG9w0BAQsFAAOCAQEA0BTxJwQ5jq7Lg/X4c8NFiCQIbRxB
QJ/SmtLJn4XIWPV0Njb9Vdzi1tD3CYElJ1ySJpM3sAOpzt+venQ8scJ6MCYdsrdV
EhpURa5lMGP2EQbmqxSMhNz9xZUsYk72KXxBJQz0s3pVqOjRJKr4rXsBRefc3jen
67WMB0K60UXIDbKkgA8E/pFS8hOgUPc4NGpE96saSi1VgJS3KignWXJHeMr+o+PW
IqxFFIlU3qQQ4Xro8qE9UCddOZYFKxC+P+Y5Om9RC+JtpqOxK9T1zM7irzpOlsAI
iTXLsc4zWpGH3y5bnfAKMwpjjDEk9FoMQxcFMxTLF5q45c68Me+NXP+GGg==
-----END CERTIFICATE-----
Generated at Sat Jan 10 23:45:23 2026 by rpki-client