This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/iz-3oH_GaNmH-QTKCc865EjT--0.roa
File:                     iz-3oH_GaNmH-QTKCc865EjT--0.roa (raw, json)
Hash identifier:          HdFyrxZbX5w6h9wANGj1uccBIBLiUFfcE9H+Q3kqwnI=
Subject key identifier:   8B:3F:B7:A0:7F:C6:68:D9:87:F9:04:CA:09:CF:3A:E4:48:D3:FB:ED
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       A4
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/iz-3oH_GaNmH-QTKCc865EjT--0.roa
Signing time:             Thu 01 Jan 2026 01:31:33 +0000
ROA not before:           Thu 01 Jan 2026 01:31:33 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18260
IP address blocks:        220.156.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Jan  1 01:31:33 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=8B3FB7A07FC668D987F904CA09CF3AE448D3FBED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:b6:e5:0b:97:3f:c7:55:2b:ea:eb:a6:1f:
                    fe:8d:78:d0:27:33:f7:92:2b:e5:b0:d3:fc:3c:29:
                    56:21:1e:e0:5e:e0:c9:97:c0:f9:05:dc:82:00:01:
                    8b:56:c5:ba:c9:bc:3b:83:06:90:bf:0c:00:03:aa:
                    f6:b3:df:ef:4b:a4:ae:a1:c4:19:c2:8f:6b:b1:5d:
                    19:88:21:7f:ed:2a:fd:dc:1c:b9:3a:06:bc:40:b8:
                    a6:a9:26:a7:5d:ca:b7:d9:38:3f:7b:ad:24:55:91:
                    9e:cf:53:59:6f:fd:93:fb:e4:58:91:85:94:1c:67:
                    6f:da:69:f9:d9:93:b5:f4:63:72:a8:d3:41:44:19:
                    c5:13:37:8b:82:c5:b4:d0:aa:3e:bb:d6:57:3c:54:
                    d9:de:5f:7a:fa:37:c7:07:cd:5d:07:ee:78:0a:e0:
                    f5:7f:a5:71:ac:5b:7e:4e:b6:8a:f8:36:80:f6:b3:
                    e3:be:f7:02:12:bf:23:83:f3:32:c5:45:ae:7d:26:
                    12:48:dc:87:bf:99:39:02:35:dc:f3:67:66:6a:47:
                    2b:80:17:69:43:51:c2:91:0b:cb:85:e3:7c:63:1b:
                    f7:16:a6:e8:de:4f:a0:e9:4c:75:16:62:28:13:b6:
                    09:6e:1b:58:6d:a8:15:60:a6:2b:84:5e:1a:45:61:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3F:B7:A0:7F:C6:68:D9:87:F9:04:CA:09:CF:3A:E4:48:D3:FB:ED
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/iz-3oH_GaNmH-QTKCc865EjT--0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:59:2e:a1:6e:8f:38:32:8a:4c:35:85:ef:68:c4:6d:52:ec:
         4b:1c:a0:bd:ff:12:fb:7f:60:ce:d0:b5:09:5b:d1:a6:c8:b1:
         74:3c:8f:5f:c6:c7:b0:22:66:72:7f:db:52:ba:d2:33:11:d5:
         9c:cb:83:fb:5f:61:35:84:e2:e0:2f:98:bf:3f:d4:94:26:fb:
         53:3b:8e:93:db:aa:da:39:c5:0f:44:96:0d:43:b7:b9:20:3c:
         4c:d2:7d:6e:98:e8:46:bc:42:b4:02:f6:38:a5:0c:80:02:d6:
         2c:28:48:d3:9d:cd:e7:1c:3e:c5:a0:f5:1e:aa:15:d3:24:0f:
         34:80:79:c1:5f:78:f9:d0:8a:17:9a:04:8c:c3:de:85:84:0e:
         11:28:a4:dd:01:e8:b5:1b:5f:ec:c1:ef:91:e9:fc:2f:6c:94:
         6a:a0:09:eb:5b:47:9b:10:cf:45:d8:6c:cf:b4:91:55:48:c2:
         08:dc:c2:e1:59:0c:00:1f:d1:1b:ba:e8:d1:aa:58:ba:1f:dc:
         5c:52:53:66:48:5d:87:dd:47:06:5a:0c:01:7a:48:9a:52:b8:
         e4:b1:a7:ae:2f:f5:86:57:1c:5e:d4:76:50:41:ba:71:30:eb:
         cf:b6:33:cb:5a:06:e7:2e:50:d5:0c:1e:27:fe:2d:15:35:e1:
         d6:9b:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:27:29 2026 by rpki-client