This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/938/4BiAh-A-FANg1A6aElcnz9O_LcY.roa
File:                     4BiAh-A-FANg1A6aElcnz9O_LcY.roa (raw, json)
Hash identifier:          zV6CT48gYijhTxxMHABmUUiSCbGlVBxi5Zx/O5MvXY8=
Subject key identifier:   E0:18:80:87:E0:3E:14:03:60:D4:0E:9A:12:57:27:CF:D3:BF:2D:C6
Certificate issuer:       /CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C
Certificate serial:       02
Authority key identifier: 52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/4BiAh-A-FANg1A6aElcnz9O_LcY.roa
Signing time:             Tue 18 Nov 2025 09:11:16 +0000
ROA not before:           Tue 18 Nov 2025 09:11:16 +0000
ROA not after:            Wed 18 Nov 2026 08:52:31 +0000
asID:                     146976
IP address blocks:        202.126.24.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C
        Validity
            Not Before: Nov 18 09:11:16 2025 GMT
            Not After : Nov 18 08:52:31 2026 GMT
        Subject: CN=E0188087E03E140360D40E9A125727CFD3BF2DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:49:e1:f1:8c:f2:59:2d:ee:3f:8d:7e:63:95:
                    8a:63:fb:7f:4c:89:5e:6a:32:39:2c:27:a2:fb:79:
                    66:de:ec:49:fb:c2:ca:83:f9:ee:f2:e3:6a:d3:c4:
                    b6:1f:1f:62:d2:61:94:5e:1b:3a:7e:6c:d3:e5:93:
                    96:fd:b1:fa:b0:29:d2:16:fd:37:32:70:b8:58:ec:
                    7d:da:05:8e:70:3a:ef:03:26:de:dc:0c:e3:c5:bf:
                    4f:f6:89:50:ce:cd:90:56:13:ab:45:ce:1c:09:d5:
                    30:d4:de:38:d1:b7:68:44:9f:2c:d3:0a:38:1a:3e:
                    0c:de:32:ce:6a:5b:f1:c4:d2:5c:4d:2c:e3:ea:8a:
                    df:81:ba:5f:1c:24:3b:4a:4f:68:1e:0b:8e:94:f6:
                    66:b1:cf:86:06:0f:2d:01:c3:d8:8e:66:39:50:a8:
                    56:87:47:a1:84:8d:3c:db:db:44:8e:af:02:6c:18:
                    a1:7f:8e:56:c7:62:db:ae:03:f2:41:ec:1f:f9:19:
                    f9:c7:be:fb:95:e9:36:88:0f:b2:59:5d:d9:2c:bc:
                    5d:c5:f4:c5:0a:96:db:b2:77:24:fc:4c:d0:91:aa:
                    7f:2c:31:4a:38:be:cb:68:c7:62:49:a5:c4:53:be:
                    01:bb:68:60:f7:81:f4:f1:11:98:5b:17:07:08:47:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:18:80:87:E0:3E:14:03:60:D4:0E:9A:12:57:27:CF:D3:BF:2D:C6
            X509v3 Authority Key Identifier:
                keyid:52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/4BiAh-A-FANg1A6aElcnz9O_LcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:be:5a:10:49:dd:d2:d2:46:93:80:2c:c3:9e:fc:85:8f:
         50:f2:61:44:da:cd:19:65:51:45:0f:6b:f8:bc:f9:44:67:20:
         fd:28:c0:27:c1:31:9a:13:d0:fe:de:73:db:5e:b9:19:71:b0:
         aa:8f:0a:0d:1d:de:66:17:b7:3b:3c:31:70:59:8f:2a:cc:6e:
         76:2b:10:9a:72:1e:b0:e0:6f:1f:ae:d8:69:96:7b:93:c9:87:
         1c:5c:19:53:d9:5e:a4:94:9c:80:d7:62:1e:5b:c2:5d:aa:b9:
         37:99:9a:e6:c3:5a:1f:2e:b0:1b:46:51:25:eb:5e:6b:79:42:
         85:db:4e:0b:dd:2e:79:1d:bf:a0:b7:71:40:86:49:c3:04:ed:
         c4:c4:a8:a1:9c:39:bc:b1:fc:e9:90:93:b8:b6:7b:09:0e:f9:
         be:2f:98:0e:c3:c1:af:a2:fd:4b:7f:1e:5a:31:a0:df:69:80:
         3a:b7:30:fa:cf:c2:4d:26:71:ff:58:f7:42:03:3d:42:67:af:
         3a:69:81:db:c2:aa:5d:34:ce:56:1f:43:ec:31:d9:3b:df:ca:
         d4:f0:bd:ee:84:50:d1:94:c1:de:e7:62:7e:7b:cf:4d:f6:23:
         88:aa:4f:89:9c:f3:83:13:50:40:fb:22:81:00:3a:fb:02:23:
         90:ef:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:26:19 2025 by rpki-client