This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/T0reV2BKH0gzgQ9uiave4FHO038.roa
File:                     T0reV2BKH0gzgQ9uiave4FHO038.roa (raw, json)
Hash identifier:          u50J89+LmGfBg/qIJeGHruZvKUPYcugsayy3/E2DRDI=
Subject key identifier:   4F:4A:DE:57:60:4A:1F:48:33:81:0F:6E:89:AB:DE:E0:51:CE:D3:7F
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       87
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/T0reV2BKH0gzgQ9uiave4FHO038.roa
Signing time:             Thu 01 Jan 2026 01:34:27 +0000
ROA not before:           Thu 01 Jan 2026 01:34:27 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     131078
IP address blocks:        202.255.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Jan  1 01:34:27 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4F4ADE57604A1F4833810F6E89ABDEE051CED37F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:8f:01:91:62:cb:b4:3e:3f:72:0d:81:4c:
                    eb:e8:1a:05:fa:51:61:98:96:a8:2c:7d:9b:49:f9:
                    c5:f8:55:12:7b:25:4c:ba:1b:4c:94:a2:33:ce:6f:
                    cf:90:57:b1:68:32:c4:dd:5d:09:ab:ae:8b:5c:23:
                    55:93:5a:73:04:f8:c6:e0:b2:54:e3:59:fd:51:8b:
                    ca:72:6e:cf:c1:cd:3e:8f:5f:5a:fa:7a:81:76:c4:
                    d3:f9:46:0a:16:7d:e5:97:65:3d:e7:a9:73:fe:41:
                    71:ff:aa:e2:e0:db:4d:12:26:91:71:ec:42:c4:95:
                    87:d2:15:9d:dd:8a:6b:d5:1b:70:5a:c3:94:65:b9:
                    9c:7b:00:56:02:6a:28:f9:c9:d2:ba:1e:43:08:e0:
                    4c:b4:9f:dd:74:95:13:c0:68:a8:ce:04:52:5c:a0:
                    ee:ea:19:95:d1:fa:e0:40:e0:3b:f1:2c:d0:dc:a0:
                    15:4a:81:04:a8:56:b3:81:f7:9e:6e:0b:d3:f4:59:
                    58:4d:61:0d:cb:51:8a:97:3d:7c:3d:56:0f:c2:74:
                    38:12:f6:1d:86:cb:37:2b:ef:08:b8:c2:1e:4b:29:
                    e1:09:66:1e:02:77:16:eb:3c:44:bd:d0:34:43:61:
                    e3:bf:eb:e4:9b:71:e3:db:5e:e1:47:58:3b:93:28:
                    0a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4A:DE:57:60:4A:1F:48:33:81:0F:6E:89:AB:DE:E0:51:CE:D3:7F
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/T0reV2BKH0gzgQ9uiave4FHO038.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:43:3a:2e:4b:d2:98:30:81:fc:2a:e7:35:15:8d:22:4b:
         b0:59:63:f3:46:f6:84:d6:bb:35:41:83:f5:79:ca:52:f9:2d:
         0b:96:6a:37:d1:1b:88:3a:eb:42:d9:63:3a:77:c2:d2:10:68:
         c3:f8:0d:e2:a3:33:31:bd:57:4b:e6:27:0e:7e:87:6e:1f:9d:
         4c:5f:7e:4a:dd:20:a6:78:88:2b:b0:bc:2d:24:8e:b9:2f:1f:
         1c:6a:ec:fe:9d:77:99:dc:fa:d9:c1:a3:d5:52:5b:0a:48:1f:
         6d:66:24:35:c7:a2:ae:86:bf:e0:2f:69:56:f1:8d:32:d9:ef:
         23:a5:24:c0:58:c6:82:9a:8c:2d:2d:19:70:07:4d:91:13:ae:
         61:9d:6a:50:d4:af:05:e5:fd:33:a6:e0:56:2c:5b:9f:8f:c2:
         69:43:41:0a:ba:6c:42:09:54:ed:64:13:b9:6b:93:1c:95:86:
         20:c2:50:82:aa:83:c2:39:0e:d4:e5:55:2b:92:68:cc:3a:e9:
         75:da:8c:2c:b6:80:be:4b:27:b2:a4:f9:e2:cd:be:bc:69:cf:
         3f:e6:7a:f1:fd:99:b9:1b:8a:25:77:99:68:f2:ce:83:78:d5:
         2c:d2:0f:98:5e:5a:c0:9d:ad:c6:ab:03:af:70:f5:86:79:75:
         6c:6a:79:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:32:48 2026 by rpki-client