This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/K4j9m5m5DyG8fnxI4MvK1rim_Rs.roa
File:                     K4j9m5m5DyG8fnxI4MvK1rim_Rs.roa (raw, json)
Hash identifier:          Ch0pULQTW7flGU4FCSPiksXfOhA2dUp/vkWHDVPKabg=
Subject key identifier:   2B:88:FD:9B:99:B9:0F:21:BC:7E:7C:48:E0:CB:CA:D6:B8:A6:FD:1B
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       89
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/K4j9m5m5DyG8fnxI4MvK1rim_Rs.roa
Signing time:             Thu 01 Jan 2026 01:34:28 +0000
ROA not before:           Thu 01 Jan 2026 01:34:28 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     131078
IP address blocks:        202.255.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Jan  1 01:34:28 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=2B88FD9B99B90F21BC7E7C48E0CBCAD6B8A6FD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:70:6e:9d:c5:f8:7c:e2:f1:47:11:de:0e:
                    5c:47:1b:4e:40:5e:44:21:e2:6a:c8:36:5c:01:13:
                    b6:3b:e1:4e:9d:c1:69:e6:93:1c:93:bf:91:6d:d5:
                    02:80:f4:4c:be:c1:8f:04:25:d8:e3:c8:9b:65:f5:
                    79:2a:a6:be:bb:c0:6d:6b:e4:69:22:2f:b0:d5:fa:
                    5f:4d:6b:bd:a7:c2:53:64:39:c9:6c:1d:c8:45:38:
                    e1:33:75:83:09:e9:f6:08:ce:b1:97:09:a8:b9:67:
                    3c:b2:b3:8b:ed:b5:a8:f2:c1:4f:90:c0:49:64:1e:
                    6e:3b:5f:53:f2:d4:4b:f6:d3:eb:f8:8b:4f:94:e3:
                    ac:b7:3a:7c:5d:2f:92:ac:8d:93:f2:1c:be:6f:d3:
                    6f:2a:08:a2:b4:a8:8e:d3:6f:b9:d2:e1:27:f7:3d:
                    f7:c7:ae:59:f8:5b:0f:12:91:0e:15:25:d4:a9:1b:
                    0b:4b:d7:27:3f:f1:26:a7:f5:5b:65:be:b8:7c:29:
                    97:26:53:d7:c3:24:28:4b:db:a2:ef:fb:f0:e1:ef:
                    9e:f9:b3:cd:f0:2a:7f:44:08:07:3e:22:4d:cf:4d:
                    7b:80:25:34:e3:77:65:6e:fe:ab:80:cb:68:80:6c:
                    c7:65:dc:fa:a1:8f:da:c0:0c:ad:4e:a3:5b:66:d1:
                    2b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:FD:9B:99:B9:0F:21:BC:7E:7C:48:E0:CB:CA:D6:B8:A6:FD:1B
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/K4j9m5m5DyG8fnxI4MvK1rim_Rs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:b4:e7:bf:d8:09:90:93:8a:de:2a:c1:df:c5:8d:49:66:01:
         6d:1f:ca:ba:b7:24:2f:17:e6:73:7b:c2:16:71:80:60:3c:db:
         cd:17:fb:c0:2d:6a:af:fc:a4:1b:b5:33:a2:f7:1d:a5:a1:60:
         0d:b6:ba:fd:e9:b3:d0:c4:64:ba:cd:5a:2c:b8:c2:81:c9:fa:
         1c:a1:32:16:09:ed:ec:63:4b:13:13:5e:65:1c:8e:bb:69:c3:
         b0:01:f7:af:23:cc:6c:3a:06:c4:77:90:d6:db:88:4d:6c:db:
         41:3a:0a:3e:0b:02:35:bd:52:33:f8:fb:0d:98:97:57:c8:1e:
         b2:a3:81:ed:2a:56:a7:f3:0b:05:db:62:9f:b5:59:fe:86:51:
         f1:23:d3:7d:87:74:e4:55:76:a5:5a:1e:63:34:90:4e:a3:80:
         93:d2:87:86:d2:90:d9:ef:ec:e2:05:cf:7a:c2:c1:99:1a:51:
         51:37:2d:84:26:b9:83:64:38:7a:c0:71:0b:e7:52:af:5b:4a:
         ea:ed:da:9d:8a:f6:1a:d6:91:2e:e7:90:3e:69:ea:4f:18:43:
         ea:27:c6:a8:2e:3a:fa:4d:f8:0e:7b:be:69:b4:3f:59:77:f3:
         5e:8f:71:15:0d:c1:dd:e5:03:59:0e:67:de:47:1a:b4:8b:63:
         e2:fc:96:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:02:05 2026 by rpki-client