This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/gfgR0BgFzrDZsT_VutrerpOtl1k.roa
File:                     gfgR0BgFzrDZsT_VutrerpOtl1k.roa (raw, json)
Hash identifier:          HoP+7uM7fKahAAqu8iUFh9KEszMqx7+44ZGsF8rPSyE=
Subject key identifier:   81:F8:11:D0:18:05:CE:B0:D9:B1:3F:D5:BA:DA:DE:AE:93:AD:97:59
Certificate issuer:       /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial:       29
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/gfgR0BgFzrDZsT_VutrerpOtl1k.roa
Signing time:             Thu 01 Jan 2026 01:33:14 +0000
ROA not before:           Thu 01 Jan 2026 01:33:14 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     23630
IP address blocks:        133.32.112.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
        Validity
            Not Before: Jan  1 01:33:14 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=81F811D01805CEB0D9B13FD5BADADEAE93AD9759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:7d:49:18:4b:0e:33:ce:1c:be:d5:7b:76:
                    88:67:87:97:ca:57:26:f5:24:9e:fd:0f:f5:2a:f3:
                    a0:7a:4f:21:41:d4:30:dd:70:99:ce:d3:4b:60:78:
                    8d:7c:40:03:44:80:db:eb:59:89:74:5d:af:c4:6f:
                    a7:ae:7a:1e:4b:48:91:bb:8d:e3:e4:84:e1:b8:22:
                    22:0f:ed:f0:9d:ca:15:8e:da:48:17:ff:c7:2b:13:
                    03:d1:6d:fe:61:69:1d:2e:ad:52:19:13:e4:8b:fb:
                    87:c3:f0:cb:8f:1b:2c:a6:8e:c3:bd:46:cf:e3:43:
                    52:e7:38:e4:65:8f:0d:32:2a:76:73:f3:79:78:af:
                    43:e3:bb:72:89:a4:c3:1e:a2:7e:ca:e0:63:48:58:
                    75:f0:c2:33:5e:7c:9c:55:bd:29:15:1b:73:1c:c1:
                    a9:6c:6c:a7:5e:96:9b:0b:f5:22:55:2b:56:71:0b:
                    d3:f8:59:5c:11:0d:2f:e0:0f:db:69:66:db:ef:7d:
                    fe:9d:19:02:bf:bd:95:4c:ed:d4:b6:04:50:90:86:
                    a4:6a:ef:f0:95:47:10:49:dc:d3:b5:63:b5:34:f5:
                    b0:f5:84:ec:a3:bc:17:b9:12:78:f6:4b:aa:f5:f0:
                    a2:2a:41:62:0d:11:b7:f3:20:d9:3c:91:c3:58:a7:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F8:11:D0:18:05:CE:B0:D9:B1:3F:D5:BA:DA:DE:AE:93:AD:97:59
            X509v3 Authority Key Identifier:
                keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/gfgR0BgFzrDZsT_VutrerpOtl1k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:7b:44:83:cf:99:39:23:d2:d3:18:0b:16:9a:95:e9:a2:01:
         97:a3:03:fe:bb:70:b5:3c:c5:a0:86:f2:28:e3:af:70:eb:8f:
         44:09:4c:c2:f3:8b:d7:b0:76:d8:05:f3:37:19:cf:61:cc:95:
         e8:71:6e:fc:d5:10:bc:f6:47:50:57:b2:6b:55:92:81:36:c2:
         c9:a2:6c:74:7b:15:12:b8:c7:ea:9c:38:a1:96:55:f1:c3:36:
         28:16:31:f4:8e:cf:6e:38:bf:57:bc:9e:2c:11:f4:9c:97:e5:
         7c:e3:a9:f6:b3:19:f7:f1:e0:5a:35:01:39:4c:6a:1d:6f:ec:
         1e:36:3c:3f:1e:66:e5:ab:23:e6:27:b4:ec:89:51:be:cc:2c:
         4c:db:3f:b2:95:95:5e:0c:29:22:01:d2:07:c2:60:f8:58:85:
         73:5e:3f:b7:57:de:86:8f:db:39:50:d5:0d:00:b8:c2:c6:02:
         59:3b:a8:77:01:d3:c7:ea:32:32:4c:04:44:b3:99:60:ba:e1:
         c9:04:ae:9f:e0:71:6a:47:13:40:9f:d4:78:5f:1e:8e:a3:0e:
         8a:a0:a8:e7:45:ba:2a:16:44:e2:cb:be:dd:a0:78:11:e7:0e:
         a3:14:1c:e8:38:43:be:f4:0f:a7:a9:a6:38:dc:4d:65:ae:c3:
         c9:7d:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:49:56 2026 by rpki-client