This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/NtETuU4NkHUjB5Wn0PKOIibSB8o.roa
File:                     NtETuU4NkHUjB5Wn0PKOIibSB8o.roa (raw, json)
Hash identifier:          IwJXxEKc+n5f91vvUYg+2fQGjPm32edeSas6mDuZLf4=
Subject key identifier:   36:D1:13:B9:4E:0D:90:75:23:07:95:A7:D0:F2:8E:22:26:D2:07:CA
Certificate issuer:       /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial:       4A
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/NtETuU4NkHUjB5Wn0PKOIibSB8o.roa
Signing time:             Thu 01 Jan 2026 01:37:59 +0000
ROA not before:           Thu 01 Jan 2026 01:37:59 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     55385
IP address blocks:        119.47.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Validity
            Not Before: Jan  1 01:37:59 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=36D113B94E0D9075230795A7D0F28E2226D207CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:52:5a:8b:c2:91:65:e4:7f:80:7c:7e:18:
                    b2:eb:dd:7b:a4:3e:ff:64:2d:6a:bf:0b:54:53:33:
                    f9:c3:8f:95:c8:23:4b:b8:76:04:1c:ba:6f:f0:35:
                    66:13:2f:c2:02:c1:ae:ad:f0:a8:96:3e:f9:0a:a5:
                    34:03:e9:86:01:e9:e8:c3:2a:cd:eb:7b:a3:29:4e:
                    3b:ff:d0:68:f0:3f:57:ee:02:f1:a0:92:29:6e:40:
                    c1:10:c5:bf:01:6b:6a:01:e9:68:76:54:0c:b9:8c:
                    50:ee:c5:4e:70:28:b7:0e:23:d7:e1:06:cc:ad:62:
                    21:a0:bd:fd:3b:70:f8:7a:4c:d6:fc:22:ef:9f:e2:
                    e4:eb:bc:e6:13:90:b7:22:65:ee:93:13:4f:e6:87:
                    54:4b:fe:b4:ea:20:fb:5e:a8:3b:4a:57:7e:83:bd:
                    22:73:85:28:a0:ce:4e:86:34:75:4d:40:8d:18:03:
                    96:e2:40:d9:8a:7b:3c:d5:48:4b:8f:75:1c:c1:a6:
                    1f:a3:98:c7:cd:e8:0b:a7:15:58:62:db:64:a0:48:
                    72:98:5a:bc:00:37:7d:34:bc:7f:62:66:ec:5f:c9:
                    37:fe:da:82:fa:28:23:bf:4e:24:8d:85:f7:4a:43:
                    4a:a1:75:37:14:c6:cc:42:54:f4:d5:6b:64:8a:da:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D1:13:B9:4E:0D:90:75:23:07:95:A7:D0:F2:8E:22:26:D2:07:CA
            X509v3 Authority Key Identifier:
                keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/NtETuU4NkHUjB5Wn0PKOIibSB8o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:65:6c:60:27:cd:a9:1e:01:2a:2c:39:5e:3f:5b:31:02:a0:
         d0:7d:5c:54:8f:59:88:61:ac:d0:23:43:7d:65:ec:94:2a:e5:
         bb:b7:c7:dc:24:18:73:c7:6a:e5:ed:da:f2:d4:a6:f6:45:03:
         5d:eb:b9:b6:08:e4:c4:a1:21:5a:84:c7:f6:66:79:2c:a5:0d:
         88:17:f0:9c:8c:88:99:fd:f3:04:ad:ee:6d:fa:63:30:7c:bb:
         10:f4:9e:15:96:48:dd:0d:05:14:c9:9d:36:ff:26:0a:51:0e:
         78:d3:ac:72:51:fa:f0:9f:d1:a4:46:5d:56:da:eb:cb:99:59:
         75:56:22:0a:4b:ca:86:b0:8c:02:85:78:55:61:07:54:7a:ce:
         96:12:33:89:2e:a4:22:6f:93:c8:40:33:e9:72:02:ac:1b:51:
         6b:64:0f:ca:63:d6:f3:73:9d:ce:cc:65:98:3d:83:7b:04:65:
         a0:09:12:b0:ba:68:a1:88:0a:ee:42:e1:d5:90:b0:fd:e7:ea:
         fa:49:cb:25:ba:8b:ca:2b:16:e6:94:ca:f9:3f:09:3f:b2:65:
         10:80:af:b9:dc:28:96:95:e8:e3:7e:17:e0:53:83:ec:79:6c:
         0e:cb:d3:de:46:d5:4d:cd:23:82:9c:76:97:b6:9b:6b:05:d4:
         a5:6c:10:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:27:44 2026 by rpki-client