This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/KJeZGz9iGe8JyM060MzZdR_f1TM.roa
File:                     KJeZGz9iGe8JyM060MzZdR_f1TM.roa (raw, json)
Hash identifier:          k+LnHlnTy7S+X4K+pE2Z/Asdjp32XwMB/r/zCRb6b3o=
Subject key identifier:   28:97:99:1B:3F:62:19:EF:09:C8:CD:3A:D0:CC:D9:75:1F:DF:D5:33
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       2B
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/KJeZGz9iGe8JyM060MzZdR_f1TM.roa
Signing time:             Mon 19 Jan 2026 14:14:56 +0000
ROA not before:           Mon 19 Jan 2026 14:14:56 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        210.171.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Jan 19 14:14:56 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=2897991B3F6219EF09C8CD3AD0CCD9751FDFD533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:20:c3:5c:13:c8:6b:8e:d9:64:0c:1f:39:
                    81:a4:c8:8f:73:e7:5b:b3:33:30:bc:5b:d5:aa:12:
                    4b:9b:57:54:06:ee:66:5a:7a:6f:b5:12:46:2e:a2:
                    50:28:84:a5:88:27:7d:8e:b6:39:e2:c7:36:5d:1e:
                    1e:88:bb:a6:21:fc:00:f2:ba:33:8f:fb:6e:d7:64:
                    23:92:4a:f0:8c:2d:9f:1f:87:08:ac:9a:0c:65:e3:
                    e9:c8:5d:8b:27:70:90:ec:4c:43:3e:f5:48:af:ed:
                    ff:1f:79:5e:3b:91:96:66:f2:24:4a:6c:c1:17:85:
                    6b:28:07:2b:dd:75:a8:c0:c9:fa:d7:fc:7f:80:80:
                    ce:aa:32:8a:00:ad:9a:2f:a5:75:6e:6d:fe:71:63:
                    9b:a2:9a:10:a1:e4:73:ea:f9:91:90:4f:13:bc:92:
                    31:3f:78:60:b7:00:da:f2:5d:42:e4:a9:10:dc:8d:
                    1b:88:b9:0b:96:c7:a6:fb:82:dc:df:81:30:3d:aa:
                    71:e5:75:29:78:34:a3:8f:ac:d0:88:59:34:a7:ff:
                    53:ba:a0:9f:2e:a5:75:1a:44:8c:a7:05:72:65:d5:
                    3c:0e:f4:f8:76:3d:54:cf:9a:07:28:27:ce:90:e3:
                    72:00:e4:c0:1a:aa:79:d9:c5:8a:41:4c:52:bf:3c:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:97:99:1B:3F:62:19:EF:09:C8:CD:3A:D0:CC:D9:75:1F:DF:D5:33
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/KJeZGz9iGe8JyM060MzZdR_f1TM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:0d:c8:02:9f:23:92:85:64:84:ad:a2:5b:f4:8a:f5:72:63:
         b7:49:9a:76:b8:8c:89:7c:4b:04:00:86:a7:d4:6e:2c:6d:40:
         85:46:cc:65:4b:45:27:68:f2:a4:6d:1c:ea:03:da:54:d4:e3:
         4b:fe:c4:f3:e5:e7:c5:6a:0c:a6:90:c9:77:6c:0a:fc:05:6c:
         6b:a6:af:a9:44:88:9b:f1:e9:82:a4:ea:be:cd:fa:2e:79:8a:
         f4:7e:0d:bc:a2:0d:e5:38:a9:71:17:3a:a5:a8:0d:17:3e:b8:
         7f:14:2d:45:3d:5c:b1:de:25:ee:80:05:9f:85:6a:45:05:33:
         aa:a2:08:a8:c3:cc:34:03:c2:19:22:3d:1e:60:89:14:2e:21:
         98:6a:35:5b:0f:5c:fb:e8:59:22:85:de:ee:93:2a:d9:1f:03:
         98:5b:d5:f7:39:8f:dc:b2:91:27:da:96:87:eb:27:df:6b:63:
         5b:58:31:58:9e:95:52:46:20:7c:a6:eb:5d:23:5b:98:87:87:
         10:08:8d:97:d6:76:e4:ae:68:24:ba:c1:56:44:f3:6f:fe:4c:
         3f:42:30:55:86:7f:35:d8:0e:31:77:64:70:69:dc:9d:50:1a:
         f7:b6:59:78:af:9a:ec:3c:95:ef:04:c5:b6:c6:1a:8d:2e:f8:
         8d:27:50:b1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx
NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDExOTE0
MTQ1NloXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMjg5Nzk5MUIzRjYyMTlF
RjA5QzhDRDNBRDBDQ0Q5NzUxRkRGRDUzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANs1IMNcE8hrjtlkDB85gaTIj3PnW7MzMLxb1aoSS5tXVAbuZlp6
b7USRi6iUCiEpYgnfY62OeLHNl0eHoi7piH8APK6M4/7btdkI5JK8Iwtnx+HCKya
DGXj6chdiydwkOxMQz71SK/t/x95XjuRlmbyJEpswReFaygHK911qMDJ+tf8f4CA
zqoyigCtmi+ldW5t/nFjm6KaEKHkc+r5kZBPE7ySMT94YLcA2vJdQuSpENyNG4i5
C5bHpvuC3N+BMD2qceV1KXg0o4+s0IhZNKf/U7qgny6ldRpEjKcFcmXVPA70+HY9
VM+aBygnzpDjcgDkwBqqednFikFMUr881NcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQol5kbP2IZ7wnIzTrQzNl1H9/VMzAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER
Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10
TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xOTEvS0plWkd6OWlHZThKeU0wNjBNelpkUl9mMVRNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNKrgDANBgkqhkiG9w0BAQsFAAOCAQEAog3IAp8jkoVkhK2iW/SK9XJjt0ma
driMiXxLBACGp9RuLG1AhUbMZUtFJ2jypG0c6gPaVNTjS/7E8+XnxWoMppDJd2wK
/AVsa6avqUSIm/HpgqTqvs36LnmK9H4NvKIN5TipcRc6pagNFz64fxQtRT1csd4l
7oAFn4VqRQUzqqIIqMPMNAPCGSI9HmCJFC4hmGo1Ww9c++hZIoXe7pMq2R8DmFvV
9zmP3LKRJ9qWh+sn32tjW1gxWJ6VUkYgfKbrXSNbmIeHEAiNl9Z25K5oJLrBVkTz
b/5MP0IwVYZ/NdgOMXdkcGncnVAa97ZZeK+a7DyV7wTFtsYajS74jSdQsQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:28:00 2026 by rpki-client