This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/0zzpjXppFx0cPOFKFHErnLQJC0w.roa
File:                     0zzpjXppFx0cPOFKFHErnLQJC0w.roa (raw, json)
Hash identifier:          i4qWVEoFTEPrSG3FJwCFXVSzYzJtyqLnHOTxA1moMsg=
Subject key identifier:   D3:3C:E9:8D:7A:69:17:1D:1C:3C:E1:4A:14:71:2B:9C:B4:09:0B:4C
Certificate issuer:       /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial:       2F
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/0zzpjXppFx0cPOFKFHErnLQJC0w.roa
Signing time:             Thu 01 Jan 2026 01:28:32 +0000
ROA not before:           Thu 01 Jan 2026 01:28:32 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     151374
IP address blocks:        210.158.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Validity
            Not Before: Jan  1 01:28:32 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D33CE98D7A69171D1C3CE14A14712B9CB4090B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:6b:cd:42:51:18:85:f6:08:02:6b:50:de:
                    c6:d1:21:f6:57:d6:28:bf:c9:e4:58:4f:d6:0b:92:
                    6b:2b:8b:42:0a:f5:36:e3:0c:47:03:e1:05:3e:be:
                    e3:b5:40:83:1f:50:60:29:1e:95:4e:6c:10:53:ef:
                    1a:ba:39:c3:4e:24:92:d8:3c:0e:08:3d:1b:b0:c9:
                    ac:8a:f6:96:e7:74:f4:9f:71:1e:bc:0f:20:1e:9c:
                    d9:2b:79:e6:69:90:5d:7a:6c:95:e4:33:2e:b2:28:
                    c7:2d:2b:18:bf:76:f4:85:78:17:9c:8e:52:c3:43:
                    e6:9e:84:eb:97:f0:53:48:15:90:b8:0a:9b:16:f3:
                    53:b3:23:3b:c2:04:24:9c:55:0a:d1:45:15:e9:7e:
                    4b:50:1d:ce:87:e0:80:38:9e:14:dd:54:cd:02:47:
                    1d:3e:94:6a:33:7f:59:b1:34:6d:21:ef:ca:bd:f0:
                    51:b6:62:a0:cd:a9:ab:59:85:d2:55:67:91:6a:a9:
                    26:5d:7a:39:51:20:9f:ff:08:9f:da:89:e6:f3:07:
                    35:44:5d:f1:80:27:6e:25:8d:f8:fd:49:a8:f6:76:
                    ad:b8:be:81:06:8f:c2:a1:42:ae:3e:fb:b5:31:8b:
                    f1:6c:bd:fe:4a:d3:e9:93:c9:93:ab:5d:87:aa:92:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3C:E9:8D:7A:69:17:1D:1C:3C:E1:4A:14:71:2B:9C:B4:09:0B:4C
            X509v3 Authority Key Identifier:
                keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/0zzpjXppFx0cPOFKFHErnLQJC0w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:57:85:93:3a:56:90:f0:54:1d:78:9d:82:93:d5:cb:07:d3:
         f5:e1:83:97:73:5b:de:78:c3:c0:a3:f2:15:30:44:90:02:28:
         10:6e:e0:98:2d:b5:a5:90:9f:39:2d:89:1b:3f:82:0b:35:37:
         b0:53:a3:d6:77:5f:ce:35:4c:28:fe:96:22:18:1c:9f:bb:68:
         e5:8d:e6:f9:d5:b7:9b:68:a1:d1:1d:b8:97:09:65:7b:95:3f:
         df:36:2c:1a:1f:5c:75:b7:9f:de:b0:69:53:71:e6:c3:8b:33:
         85:d9:df:f6:1f:36:84:6d:be:28:00:f4:c4:1f:4c:fc:e6:55:
         8c:ff:cd:32:e0:d2:2d:eb:12:23:89:84:da:db:f0:85:0d:c7:
         fe:56:bc:49:66:31:72:63:f7:b4:55:9a:d5:65:36:cc:80:61:
         ac:bc:36:49:f2:5e:3e:68:8d:f0:e1:0b:9c:65:20:29:ba:99:
         ce:07:27:3b:7f:12:1d:8a:e5:85:f5:46:7e:9f:22:d1:ec:89:
         6c:e0:88:3e:b6:7d:f6:96:40:b7:f6:56:41:96:d9:1f:39:2c:
         35:03:3b:00:6a:07:52:81:5e:90:f6:33:1e:64:08:b9:79:ce:
         8a:36:e9:af:3b:11:0e:ad:6b:3f:75:9e:b6:44:f1:9c:41:93:
         11:d5:57:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:55 2026 by rpki-client