This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/Y4Or5jKDsx06T2hzSkarinyx0H8.roa
File:                     Y4Or5jKDsx06T2hzSkarinyx0H8.roa (raw, json)
Hash identifier:          KojPmMPY8RQItQt3qWh0jjGprZJPr81NgkBXWln02dU=
Subject key identifier:   63:83:AB:E6:32:83:B3:1D:3A:4F:68:73:4A:46:AB:8A:7C:B1:D0:7F
Certificate issuer:       /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial:       2C
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/Y4Or5jKDsx06T2hzSkarinyx0H8.roa
Signing time:             Mon 01 Dec 2025 01:32:31 +0000
ROA not before:           Mon 01 Dec 2025 01:32:31 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     24229
IP address blocks:        202.126.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Validity
            Not Before: Dec  1 01:32:31 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=6383ABE63283B31D3A4F68734A46AB8A7CB1D07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:2c:43:04:af:08:fc:a6:3d:fd:b0:c0:42:
                    aa:62:6e:ab:a5:f4:7f:08:62:4c:ba:3b:31:0e:5d:
                    bd:69:85:1b:f8:a1:8b:21:9b:14:58:22:16:4f:0f:
                    e9:19:24:2d:6e:63:f9:12:c4:e4:26:c5:7f:3a:65:
                    20:11:12:5d:d4:a2:a0:90:cb:c5:b0:0b:23:7d:66:
                    0c:63:90:8b:af:23:f1:ab:98:4b:6a:aa:64:6d:a0:
                    b5:26:dd:31:67:97:05:3d:4b:03:2d:9c:d6:d6:ec:
                    86:2d:0f:1d:40:84:53:84:d8:35:96:f3:95:30:ec:
                    13:41:ab:48:f8:94:da:72:80:90:80:8f:c1:31:f0:
                    8e:60:eb:b2:4a:1b:f1:16:c4:31:c5:34:9e:6e:c2:
                    e9:32:9f:ee:30:fa:88:ac:e6:6f:a9:ab:fe:35:76:
                    0b:42:6b:6a:49:a9:34:93:b2:2f:18:d1:6a:7d:93:
                    03:61:cc:77:77:cf:07:83:97:92:c5:8f:f2:85:9d:
                    0c:75:a1:2b:3d:f7:ac:69:09:f8:27:35:2f:4e:14:
                    ad:c5:13:d2:f5:0d:66:ad:24:1e:58:00:d3:68:e0:
                    c5:5f:54:8b:3d:2b:87:d5:a8:cd:87:ae:30:bc:fe:
                    45:4a:c0:a9:f6:d4:16:47:34:8c:15:b6:71:2c:d1:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:83:AB:E6:32:83:B3:1D:3A:4F:68:73:4A:46:AB:8A:7C:B1:D0:7F
            X509v3 Authority Key Identifier:
                keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/Y4Or5jKDsx06T2hzSkarinyx0H8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:e0:32:3b:13:6c:66:9d:ea:c5:ff:58:92:af:8a:0f:ec:c4:
         dc:ca:0d:27:3e:83:05:1b:ea:42:d9:20:70:48:72:35:5f:e7:
         88:5d:a3:37:07:48:c7:bb:64:28:07:2c:69:62:4b:85:76:c0:
         05:6a:5e:9a:99:58:b0:c6:e6:e3:47:32:41:fc:21:fa:ad:09:
         90:22:46:c0:a6:8e:3b:5e:0c:ac:b5:80:20:42:de:86:17:3b:
         24:7f:d9:e6:65:38:88:07:30:8d:03:9d:52:a9:df:08:6e:47:
         98:dd:32:bb:30:89:90:5d:cf:2f:58:0b:bf:1e:84:aa:ad:d7:
         5a:e1:13:3b:47:4e:76:6a:51:af:ba:8c:c6:99:85:51:26:4a:
         5b:1f:21:82:16:e2:b9:78:b3:b5:b9:0d:0b:38:35:35:a6:f8:
         93:cf:83:1f:ca:54:1b:5e:d6:08:18:ba:00:2d:25:f1:d5:91:
         f1:a6:f7:30:36:8f:d7:3e:0c:5d:d9:b9:1d:6e:31:1c:0f:09:
         28:b2:51:84:9f:ed:66:0a:ee:75:e9:ae:ec:da:c5:de:15:2c:
         85:9f:c6:51:ec:79:83:6f:d1:5c:10:34:b0:1b:7a:db:b4:cb:
         56:e6:80:20:2a:73:a4:1b:3a:d4:2d:9e:12:18:5a:28:a2:97:
         81:d4:0d:43
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNzU2
RDlBNUNFOUFDQUM5NzgzNjAwMTFGN0E3Q0ZDNDMwMTgxRDUzMB4XDTI1MTIwMTAx
MzIzMVoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoNjM4M0FCRTYzMjgzQjMx
RDNBNEY2ODczNEE0NkFCOEE3Q0IxRDA3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWgLEMErwj8pj39sMBCqmJuq6X0fwhiTLo7MQ5dvWmFG/ihiyGb
FFgiFk8P6RkkLW5j+RLE5CbFfzplIBESXdSioJDLxbALI31mDGOQi68j8auYS2qq
ZG2gtSbdMWeXBT1LAy2c1tbshi0PHUCEU4TYNZbzlTDsE0GrSPiU2nKAkICPwTHw
jmDrskob8RbEMcU0nm7C6TKf7jD6iKzmb6mr/jV2C0JrakmpNJOyLxjRan2TA2HM
d3fPB4OXksWP8oWdDHWhKz33rGkJ+Cc1L04UrcUT0vUNZq0kHlgA02jgxV9Uiz0r
h9WozYeuMLz+RUrAqfbUFkc0jBW2cSzRK6MCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRjg6vmMoOzHTpPaHNKRquKfLHQfzAfBgNVHSMEGDAWgBTnVtmlzprKyXg2ABH3
p8/EMBgdUzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNTgvNTFiWnBjNmF5c2w0TmdBUjk2ZlB4REFZSFZNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTFiWnBjNmF5c2w0TmdBUjk2ZlB4
REFZSFZNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDU4L1k0T3I1aktEc3gwNlQyaHpTa2FyaW55eDBIOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALKfhAwDQYJKoZIhvcNAQELBQADggEBAIjgMjsTbGad6sX/WJKvig/s
xNzKDSc+gwUb6kLZIHBIcjVf54hdozcHSMe7ZCgHLGliS4V2wAVqXpqZWLDG5uNH
MkH8IfqtCZAiRsCmjjteDKy1gCBC3oYXOyR/2eZlOIgHMI0DnVKp3whuR5jdMrsw
iZBdzy9YC78ehKqt11rhEztHTnZqUa+6jMaZhVEmSlsfIYIW4rl4s7W5DQs4NTWm
+JPPgx/KVBte1ggYugAtJfHVkfGm9zA2j9c+DF3ZuR1uMRwPCSiyUYSf7WYK7nXp
ruzaxd4VLIWfxlHseYNv0VwQNLAbetu0y1bmgCAqc6QbOtQtnhIYWiiil4HUDUM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:40:55 2025 by rpki-client