This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/Wg9Nwu2H5GCG5bwp0bk7JXyr5Cs.roa
File:                     Wg9Nwu2H5GCG5bwp0bk7JXyr5Cs.roa (raw, json)
Hash identifier:          mmgCFsmLlS1KoAovudB/5WHRxDaz3iP7D2NTeJolICQ=
Subject key identifier:   5A:0F:4D:C2:ED:87:E4:60:86:E5:BC:29:D1:B9:3B:25:7C:AB:E4:2B
Certificate issuer:       /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Certificate serial:       58
Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Wg9Nwu2H5GCG5bwp0bk7JXyr5Cs.roa
Signing time:             Thu 01 Jan 2026 01:34:39 +0000
ROA not before:           Thu 01 Jan 2026 01:34:39 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     3491
IP address blocks:        203.170.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 09:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
        Validity
            Not Before: Jan  1 01:34:39 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=5A0F4DC2ED87E46086E5BC29D1B93B257CABE42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:20:ef:8e:b8:45:b4:23:76:a4:c1:6f:3e:
                    14:83:52:56:f7:ca:94:0f:ca:eb:98:ec:c5:ad:7e:
                    eb:2f:95:7a:c5:d8:78:cc:10:a0:93:6b:c5:55:09:
                    c6:ad:33:86:e5:a4:23:9d:e5:22:2a:25:9e:fb:cc:
                    10:7c:b6:cd:ad:95:a0:6d:8c:38:97:78:32:4a:30:
                    49:2a:2d:19:5b:45:d0:04:e3:83:52:1c:d9:30:8e:
                    28:a0:78:f6:9e:7d:ea:71:14:e0:a8:92:64:95:85:
                    0c:68:b7:d3:c6:99:2b:69:7d:c4:f1:71:a2:4b:dc:
                    ff:c9:38:50:4c:ae:10:03:f0:7b:b7:39:f7:e5:36:
                    d2:f5:38:85:9d:c9:fd:b2:29:f9:d5:75:15:d3:c0:
                    ff:5c:5b:39:f5:59:54:61:48:98:dd:f5:ea:06:d9:
                    e8:eb:71:04:e2:f3:d6:5a:df:cc:4f:f4:41:d1:f9:
                    44:69:0c:30:6c:41:44:7f:ac:d0:08:65:51:f0:30:
                    50:9e:88:a1:f6:49:ce:fd:c2:dd:a9:ba:ac:57:e4:
                    39:6f:4c:21:ed:f4:72:3f:a9:c6:18:8c:8c:52:ac:
                    34:fc:ca:06:07:c1:16:26:8e:72:e4:eb:a1:2d:74:
                    e2:bd:02:0e:47:59:c0:03:5e:0c:c0:c1:57:a2:4f:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0F:4D:C2:ED:87:E4:60:86:E5:BC:29:D1:B9:3B:25:7C:AB:E4:2B
            X509v3 Authority Key Identifier:
                keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Wg9Nwu2H5GCG5bwp0bk7JXyr5Cs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:05:2d:b3:2d:a9:1b:7b:3a:6f:ad:98:72:4c:7b:27:49:93:
         ca:16:a4:71:a1:6a:ef:a5:67:bb:8e:56:63:bb:be:24:3e:88:
         5a:a6:96:5d:1b:48:bb:02:d7:38:6f:35:4c:15:fc:17:93:43:
         1f:b9:66:ed:05:d0:f5:8f:d1:c4:81:69:4a:d0:98:0b:9a:25:
         c6:17:c1:e9:29:4b:75:88:a8:1e:09:4f:83:8e:6d:f1:ac:ed:
         fb:0b:d4:95:37:8d:8d:e5:4a:99:73:4f:53:b7:5b:20:0f:d8:
         af:ff:7c:9f:7a:61:b3:96:81:40:b5:7f:9d:69:21:a5:06:0c:
         ee:62:ef:81:f8:9f:88:f1:4d:32:7d:12:ad:1c:d9:75:4b:6b:
         c1:a2:06:6c:06:e0:bb:c2:22:5e:0d:4c:77:b3:be:25:f1:47:
         8c:dd:bc:19:da:a5:12:ab:b6:5f:6c:b2:cb:54:cd:7a:07:cb:
         60:f9:ac:34:f9:2e:22:a0:42:f2:9c:fb:47:e0:36:f0:37:e7:
         4c:42:fd:ab:01:cb:f8:7f:f6:8d:f1:b9:e0:9a:54:f6:0a:85:
         ce:16:d3:a7:c0:bd:06:09:04:cb:fd:e7:a6:de:0f:73:02:98:
         99:f9:e4:3d:43:86:ab:14:a9:78:b8:34:d3:ae:14:9c:cf:76:
         12:c2:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:42:51 2026 by rpki-client