This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/CcMW4Ggq2FNDoG7T5HCYvXCuJAw.roa
File:                     CcMW4Ggq2FNDoG7T5HCYvXCuJAw.roa (raw, json)
Hash identifier:          FH0sGUYkiW4ZgwwfDdkMCMAYPv4CZll8oh2iE+VaSoI=
Subject key identifier:   09:C3:16:E0:68:2A:D8:53:43:A0:6E:D3:E4:70:98:BD:70:AE:24:0C
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       86
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/CcMW4Ggq2FNDoG7T5HCYvXCuJAw.roa
Signing time:             Thu 01 Jan 2026 01:34:26 +0000
ROA not before:           Thu 01 Jan 2026 01:34:26 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7667
IP address blocks:        202.255.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Jan  1 01:34:26 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=09C316E0682AD85343A06ED3E47098BD70AE240C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b6:ee:47:21:76:f9:10:94:67:27:2b:35:d2:
                    0d:e9:28:88:2b:49:6f:27:b1:61:14:9e:33:73:9b:
                    73:0c:51:de:01:49:47:3d:16:72:d0:d9:b7:cf:49:
                    e9:75:01:e9:45:3a:d9:0f:c8:eb:d5:95:60:27:e9:
                    90:5b:f1:85:64:72:5e:95:49:72:5a:05:47:e4:c3:
                    15:08:2a:30:2f:76:eb:25:c1:45:ac:8b:87:8c:87:
                    19:a9:86:a5:3d:d0:64:b1:31:87:40:c7:5e:f3:80:
                    cb:75:cf:22:08:cc:92:9b:7b:d3:24:64:3a:82:9b:
                    27:60:f7:04:a8:81:8f:2a:15:34:a0:3a:ae:9b:ef:
                    f2:95:79:28:5f:0b:80:26:43:e0:d7:af:89:a2:b4:
                    db:80:0f:a3:92:86:6c:a8:92:a1:38:dc:19:41:8f:
                    63:02:77:96:65:a1:3f:e0:52:2d:27:87:2f:38:fc:
                    98:f3:b9:d5:a0:ca:fe:7e:8f:fa:33:15:8b:2d:59:
                    e1:0f:ef:90:f8:93:92:86:98:ae:1a:43:8b:0a:c4:
                    2a:82:8c:14:c9:34:17:a4:f5:4c:a3:9a:64:41:8d:
                    5c:5a:fa:44:f7:5a:66:76:1f:3c:27:5b:de:5a:04:
                    da:29:a3:8e:c3:8b:33:0b:10:0e:0f:4d:16:7f:f1:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C3:16:E0:68:2A:D8:53:43:A0:6E:D3:E4:70:98:BD:70:AE:24:0C
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/CcMW4Ggq2FNDoG7T5HCYvXCuJAw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:43:85:08:e0:7a:ae:4f:7b:35:65:1c:7a:ba:cd:11:96:3b:
         8c:43:0f:ac:4a:b1:fb:93:57:bd:0b:f8:98:d5:f3:dd:18:eb:
         a3:e3:4d:b3:43:a4:85:28:99:c7:07:79:c9:6c:5f:08:4e:bc:
         68:04:1a:28:07:b5:12:d4:54:82:9b:01:d2:75:72:66:a8:d0:
         3b:39:be:98:75:6e:a2:a2:1d:6c:f3:e2:18:3e:9b:4f:21:28:
         81:b0:12:8f:a3:68:69:14:1c:12:79:b9:a5:c4:d3:be:ca:e9:
         f8:bc:2b:27:08:1c:c0:72:44:27:3a:90:30:73:73:93:fc:66:
         ef:16:83:42:63:0c:b2:91:42:df:86:e7:1b:be:68:7c:27:bd:
         6d:db:46:8d:3c:e1:a8:9a:f4:84:b6:9e:8f:d9:49:a7:b9:5c:
         e4:f6:be:a3:14:75:32:74:3b:cd:28:9e:4d:46:da:ce:aa:4b:
         ca:ea:92:2f:53:62:fe:37:33:dc:ff:88:e8:04:83:ee:b0:20:
         e8:f4:13:f0:97:06:4f:2d:11:08:35:1c:66:01:f3:b8:ec:c0:
         02:9f:df:fc:c6:ba:37:cf:59:a4:23:25:f0:5a:2d:62:6d:ca:
         37:15:8b:a6:00:8e:14:a7:d9:58:2e:0e:d1:c0:55:d4:d3:6f:
         af:96:09:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:59:34 2026 by rpki-client