This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/odAlVonQmSwBx95z8tCfVOZs9s0.roa
File:                     odAlVonQmSwBx95z8tCfVOZs9s0.roa (raw, json)
Hash identifier:          rRodba8EkOMsjz2xKjea7jBZRgdhkjoCmyYexyaI3Ys=
Subject key identifier:   A1:D0:25:56:89:D0:99:2C:01:C7:DE:73:F2:D0:9F:54:E6:6C:F6:CD
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       A0
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/odAlVonQmSwBx95z8tCfVOZs9s0.roa
Signing time:             Thu 01 Jan 2026 01:31:31 +0000
ROA not before:           Thu 01 Jan 2026 01:31:31 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18260
IP address blocks:        210.141.214.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Jan  1 01:31:31 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=A1D0255689D0992C01C7DE73F2D09F54E66CF6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:26:a9:51:e8:d0:67:9a:1d:e6:30:70:fe:
                    5d:3e:5f:f0:01:37:cb:96:f6:f6:23:bd:da:8c:bd:
                    e4:e7:48:2a:c9:c1:70:49:77:f6:cc:b3:c1:5d:b3:
                    d0:24:39:62:36:45:38:0b:af:89:4d:95:56:8e:0b:
                    73:d8:dc:90:5b:03:ba:50:03:a7:7d:c8:a9:55:6b:
                    c5:6d:98:33:be:da:c0:9a:ad:d8:dc:13:da:3b:33:
                    ef:18:67:c5:bc:42:90:46:ab:01:e1:f0:ce:26:3f:
                    74:08:d5:bd:52:72:bd:28:65:2e:10:db:32:3a:6d:
                    c2:e6:4a:b9:ea:98:01:08:ba:30:52:f0:24:80:96:
                    62:10:b4:01:3d:7d:18:ba:02:a0:42:97:a8:e6:37:
                    b4:2e:da:94:51:97:41:1d:78:f5:f5:17:c6:7f:50:
                    61:e4:a7:67:34:68:76:88:47:63:fd:a0:52:3d:a4:
                    33:60:6e:3e:56:ac:8f:a3:22:40:0c:5b:63:31:b7:
                    da:52:fe:d7:09:69:56:8d:17:2a:fc:4c:3a:f7:f4:
                    45:51:a1:b2:fd:0d:e6:37:1e:7f:5b:90:7c:26:36:
                    91:21:56:79:df:0b:f9:90:69:d0:7f:a4:42:01:46:
                    12:e6:ae:f9:d2:8d:d9:b3:0f:1f:ce:bb:50:a7:f1:
                    a3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D0:25:56:89:D0:99:2C:01:C7:DE:73:F2:D0:9F:54:E6:6C:F6:CD
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/odAlVonQmSwBx95z8tCfVOZs9s0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:63:7b:9c:8b:ee:82:25:e8:8c:e5:23:0a:70:2c:99:54:
         28:9d:b0:bc:1d:26:d5:f7:14:8e:1e:0b:84:e0:13:2a:aa:87:
         da:b4:93:7e:6a:8d:ac:02:62:4b:d1:4b:ac:ff:99:6e:66:42:
         81:70:62:21:1b:03:52:00:9c:01:88:09:27:a4:34:87:6c:67:
         f1:d0:19:0f:78:b0:2a:2d:a4:d6:d0:15:9a:80:3c:fc:04:ce:
         4f:d8:10:14:cc:89:ce:67:e5:c2:0f:83:a1:98:bb:e1:89:b9:
         69:e2:4a:7d:bb:df:45:de:c4:dc:5b:d0:0b:70:0c:71:42:69:
         31:b4:f1:9d:5a:fe:36:95:65:8f:f1:80:a7:26:c6:79:22:64:
         53:03:d6:26:5c:f8:cd:b1:d5:5f:64:86:b5:9f:04:fc:ce:3c:
         b9:f2:7c:d8:58:c7:74:d1:05:2f:2b:fe:cb:8b:3e:94:9d:79:
         34:f1:a9:50:61:d4:51:70:90:d8:5e:69:b3:c6:5e:a6:79:83:
         17:d8:cc:37:72:85:22:01:81:d9:0a:1c:77:83:1f:71:c5:8b:
         d7:9c:33:e4:ba:6d:01:14:34:3d:48:ab:ef:03:69:ee:e5:50:
         0c:88:c4:3f:53:2a:c4:f7:1f:da:37:85:94:31:25:ac:30:5c:
         d1:4c:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:27:30 2026 by rpki-client