This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/UnAIou-XSfo6lBkaKe4Yf6oKNi8.roa
File:                     UnAIou-XSfo6lBkaKe4Yf6oKNi8.roa (raw, json)
Hash identifier:          X3NgGb8E3DLqFImBXcsqD2NxkgPJkXfFEsPYOTWRMJo=
Subject key identifier:   52:70:08:A2:EF:97:49:FA:3A:94:19:1A:29:EE:18:7F:AA:0A:36:2F
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       4E
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/UnAIou-XSfo6lBkaKe4Yf6oKNi8.roa
Signing time:             Thu 01 Jan 2026 01:32:25 +0000
ROA not before:           Thu 01 Jan 2026 01:32:25 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     23618
IP address blocks:        223.29.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Jan  1 01:32:25 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=527008A2EF9749FA3A94191A29EE187FAA0A362F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:45:a4:b9:b0:a1:74:ce:12:f0:56:f9:94:
                    4a:a9:83:a8:c4:9d:51:6e:68:68:24:02:42:d1:97:
                    a0:ea:27:5d:24:cc:56:c4:ed:40:05:a9:23:df:61:
                    0d:1b:f5:b8:50:13:76:db:da:6b:87:eb:ad:3f:36:
                    a9:65:97:17:6e:27:7c:a8:bc:d6:30:ca:1b:0e:a4:
                    a0:aa:9c:c3:89:53:a9:e9:b5:d3:90:4c:64:b1:05:
                    77:96:ae:e9:8a:cb:7b:59:f1:bc:16:f6:a7:9b:51:
                    2d:19:e8:e9:64:f0:b0:dd:ec:3a:f5:12:e2:4e:30:
                    15:3f:c1:b7:26:65:c3:a2:fc:72:d5:93:ae:61:31:
                    44:80:7d:2c:7a:b0:b2:88:c0:09:1e:2d:d6:65:6b:
                    c0:1b:1b:3f:1e:04:a3:8a:08:32:c2:d1:9c:d9:34:
                    b6:43:97:4c:af:ab:22:07:91:36:83:e8:0f:a8:ae:
                    47:57:83:e5:66:70:54:78:cf:8c:64:d8:1b:2f:a5:
                    13:13:4d:b3:cc:fa:e6:b2:26:0c:00:44:d4:bb:06:
                    1c:5b:ca:2c:cc:ec:b6:59:4c:2c:4a:01:5f:c2:ec:
                    10:09:44:0e:37:f8:9a:a3:6a:de:29:0f:ef:fb:de:
                    eb:6a:53:a7:1b:4e:e5:02:36:e5:b8:22:ec:48:7c:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:70:08:A2:EF:97:49:FA:3A:94:19:1A:29:EE:18:7F:AA:0A:36:2F
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/UnAIou-XSfo6lBkaKe4Yf6oKNi8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:f3:33:ef:1c:fb:3d:b7:36:10:44:80:a9:11:c6:2c:da:a7:
         fe:9a:8a:b9:d5:4b:eb:ba:29:70:4e:c4:a7:62:1d:18:d4:02:
         70:d8:b7:95:88:70:5d:de:34:4b:6a:67:32:bd:4b:f9:71:e4:
         6f:94:55:62:f6:41:b2:b6:7d:ca:c5:64:75:dd:c9:fd:0a:df:
         4f:6c:4c:c7:98:e7:b2:12:c0:c7:dd:c8:0a:bb:ac:4e:7e:3f:
         7f:21:30:3d:02:5e:4e:f8:36:78:ea:37:d7:59:fb:fd:08:76:
         1c:91:5b:af:20:44:cc:1d:dc:74:e9:b8:ae:c9:af:4a:7b:ca:
         a3:e3:51:ef:ef:a8:56:17:2d:c2:6b:4e:5d:9c:b3:02:87:d6:
         01:49:44:45:b9:20:21:91:68:10:01:b5:33:d5:cf:b1:54:ca:
         bd:5a:db:f3:0b:5a:15:7e:a9:63:7b:9a:75:59:02:6e:ae:62:
         e6:0e:68:f1:34:e7:3e:b9:ca:cb:75:28:d7:12:a8:ea:ef:78:
         18:06:19:ba:79:4f:1a:cb:1c:3f:db:c3:14:24:e0:54:38:5e:
         7d:3d:1b:12:6d:90:61:19:66:c2:fe:e5:23:d5:ca:e3:e6:1c:
         7a:25:31:4d:5f:7f:ec:ed:b7:12:9f:b5:03:59:78:29:46:ff:
         ab:8f:8d:95
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTcw
OEU4NUIxMEFDNjAzQzA2RDc4NUI0MjE1M0RDRkUxNjYzQUVBMB4XDTI2MDEwMTAx
MzIyNVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNTI3MDA4QTJFRjk3NDlG
QTNBOTQxOTFBMjlFRTE4N0ZBQTBBMzYyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANY3RaS5sKF0zhLwVvmUSqmDqMSdUW5oaCQCQtGXoOonXSTMVsTt
QAWpI99hDRv1uFATdtvaa4frrT82qWWXF24nfKi81jDKGw6koKqcw4lTqem105BM
ZLEFd5au6YrLe1nxvBb2p5tRLRno6WTwsN3sOvUS4k4wFT/BtyZlw6L8ctWTrmEx
RIB9LHqwsojACR4t1mVrwBsbPx4Eo4oIMsLRnNk0tkOXTK+rIgeRNoPoD6iuR1eD
5WZwVHjPjGTYGy+lExNNs8z65rImDABE1LsGHFvKLMzstllMLEoBX8LsEAlEDjf4
mqNq3ikP7/ve62pTpxtO5QI25bgi7Eh8DXECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRScAii75dJ+jqUGRop7hh/qgo2LzAfBgNVHSMEGDAWgBRecI6FsQrGA8BteFtC
FT3P4WY66jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODI2L1huQ09oYkVLeGdQQWJYaGJRaFU5ei1GbU91by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1huQ09oYkVLeGdQQWJYaGJRaFU5ei1G
bU91by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MjYvVW5BSW91LVhTZm82bEJrYUtlNFlmNm9LTmk4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAt8d9DANBgkqhkiG9w0BAQsFAAOCAQEADvMz7xz7Pbc2EESAqRHGLNqn/pqK
udVL67opcE7Ep2IdGNQCcNi3lYhwXd40S2pnMr1L+XHkb5RVYvZBsrZ9ysVkdd3J
/QrfT2xMx5jnshLAx93ICrusTn4/fyEwPQJeTvg2eOo311n7/Qh2HJFbryBEzB3c
dOm4rsmvSnvKo+NR7++oVhctwmtOXZyzAofWAUlERbkgIZFoEAG1M9XPsVTKvVrb
8wtaFX6pY3uadVkCbq5i5g5o8TTnPrnKy3Uo1xKo6u94GAYZunlPGsscP9vDFCTg
VDhefT0bEm2QYRlmwv7lI9XK4+YceiUxTV9/7O23Ep+1A1l4KUb/q4+NlQ==
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:17:45 2026 by rpki-client