This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d1VwuxyQZRlBaL_xwXyei4tGpiY.roa
File:                     d1VwuxyQZRlBaL_xwXyei4tGpiY.roa (raw, json)
Hash identifier:          nemt/rmychYxZHRaE5kiJ8GsihZVPo2Wrs02BugC4Pk=
Subject key identifier:   77:55:70:BB:1C:90:65:19:41:68:BF:F1:C1:7C:9E:8B:8B:46:A6:26
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       6B
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d1VwuxyQZRlBaL_xwXyei4tGpiY.roa
Signing time:             Mon 08 Dec 2025 00:04:02 +0000
ROA not before:           Mon 08 Dec 2025 00:04:02 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2509
IP address blocks:        202.13.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 15:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Dec  8 00:04:02 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=775570BB1C9065194168BFF1C17C9E8B8B46A626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:4f:41:30:af:f7:e1:9f:af:37:45:1b:64:
                    23:cd:a9:3d:87:1a:49:eb:d3:48:d3:df:84:e9:49:
                    63:7e:31:b5:90:f5:59:b2:ee:f7:85:e2:64:30:d9:
                    17:f7:83:bc:55:3f:7a:e5:8f:b1:71:54:32:88:92:
                    db:c7:4b:5d:97:c3:da:45:c0:27:6d:c7:0d:19:9a:
                    d8:e7:b2:79:a0:d2:49:72:70:c3:60:a0:ed:75:df:
                    51:9f:70:1a:e4:c2:bb:7a:e3:11:e6:cd:c2:65:cd:
                    d0:33:bf:11:31:ed:29:6a:d4:45:32:b4:64:3b:98:
                    1e:95:2a:db:3e:c0:70:5d:2e:1e:cb:69:c6:d6:1f:
                    d8:72:ce:23:5f:bd:b7:04:eb:cc:ca:a5:5c:d0:5b:
                    8e:5a:c4:ae:46:54:a6:14:62:58:4b:d5:a9:af:4b:
                    e6:27:b5:e5:bd:c0:20:02:b9:a0:91:b0:c2:5c:eb:
                    c3:a1:27:9d:36:ff:c0:82:e6:53:3a:a9:84:13:bd:
                    ac:c7:e6:b2:fa:dc:1e:52:20:ad:83:dd:47:9b:5d:
                    01:69:78:d4:15:26:26:9f:59:f6:ed:ab:bd:d1:9c:
                    3c:5d:8f:64:12:16:d4:5a:95:17:30:69:a6:15:d7:
                    6d:3c:f7:e6:23:fb:46:f4:72:64:75:0f:ef:85:17:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:55:70:BB:1C:90:65:19:41:68:BF:F1:C1:7C:9E:8B:8B:46:A6:26
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d1VwuxyQZRlBaL_xwXyei4tGpiY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.13.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:c9:7d:a3:be:11:fd:f2:1f:53:5b:4a:6a:f9:31:18:31:
         d6:2b:8b:d2:61:b7:31:8d:02:47:e3:38:22:37:1d:d7:fd:c3:
         29:45:59:55:ac:8f:eb:3f:54:94:88:f9:43:66:2b:c7:e9:e5:
         9f:5f:06:83:78:20:e8:ee:ea:43:38:c2:66:6f:48:93:28:a1:
         d6:0d:86:29:64:6b:11:0d:a4:5b:af:c8:4f:88:e1:ce:0a:ce:
         27:c6:97:d3:5e:5e:58:41:e5:b2:5d:1a:e2:e3:cc:82:57:6f:
         ef:24:89:02:44:25:11:d3:44:d2:41:6a:2b:e0:df:09:7c:fa:
         f5:37:a9:2f:dd:f2:18:75:ae:b4:75:55:18:a5:b2:79:4d:ef:
         98:1e:74:d8:39:30:52:59:94:4b:2c:31:27:d8:30:78:58:42:
         17:29:96:32:85:be:5b:10:13:50:27:c1:6e:d8:7a:67:05:cb:
         f4:39:93:b0:ec:e3:d8:f0:25:46:42:3e:7f:02:9a:90:37:f5:
         12:fc:78:a6:e8:e0:5c:ad:87:35:11:9b:f4:c5:5b:24:64:14:
         a3:e6:be:22:65:58:af:ff:ca:35:99:91:49:5a:ab:64:ee:3e:
         48:e4:9d:6f:b0:3d:f8:08:a7:28:4f:a3:e4:0d:1d:a1:29:32:
         cf:0f:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:11:24 2026 by rpki-client