This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20273/8VrPy39jcPGPspcRT6JFTQoRib0.roa
File:                     8VrPy39jcPGPspcRT6JFTQoRib0.roa (raw, json)
Hash identifier:          6KwjMvIZRXGKm2PVu7e03jUpQuSkkOtsjcvFb0NBbP0=
Subject key identifier:   F1:5A:CF:CB:7F:63:70:F1:8F:B2:97:11:4F:A2:45:4D:0A:11:89:BD
Certificate issuer:       /CN=895716F04D35F0F8BA47469217046A965E7A9B7A
Certificate serial:       13
Authority key identifier: 89:57:16:F0:4D:35:F0:F8:BA:47:46:92:17:04:6A:96:5E:7A:9B:7A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/8VrPy39jcPGPspcRT6JFTQoRib0.roa
Signing time:             Mon 05 Jan 2026 14:24:24 +0000
ROA not before:           Mon 05 Jan 2026 14:24:24 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     38656
IP address blocks:        161.248.40.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895716F04D35F0F8BA47469217046A965E7A9B7A
        Validity
            Not Before: Jan  5 14:24:24 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F15ACFCB7F6370F18FB297114FA2454D0A1189BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:81:a4:df:d9:af:e9:1f:fe:4f:76:f1:d2:
                    19:10:17:f1:10:72:ee:d6:44:03:03:85:12:84:59:
                    13:ff:3b:cc:e3:9a:e3:2d:4f:7f:5b:15:ef:f8:77:
                    3b:aa:64:74:2f:31:fa:27:3b:62:14:7b:7c:c4:d1:
                    a6:89:cc:8f:f2:b2:91:ca:86:af:dc:17:a7:3e:cc:
                    f0:69:9c:00:9e:c9:72:25:d7:5b:c7:25:2f:93:d6:
                    16:ed:2e:d9:eb:18:1a:f3:88:1b:fa:9b:a4:4e:b6:
                    6e:34:d0:4d:f2:05:bb:68:dc:e0:c9:22:02:84:0d:
                    be:f5:80:15:8a:42:0c:af:eb:2f:6d:44:a6:36:61:
                    bf:14:56:31:19:70:84:21:2d:98:5c:17:45:3d:92:
                    a4:3f:31:8c:6d:bf:25:29:c8:46:f8:c1:d9:8e:ad:
                    ed:9b:31:3e:f1:07:3b:c1:81:c2:ee:95:b5:b6:43:
                    3c:ea:a4:88:44:0c:b0:b7:ee:7b:3c:42:28:8b:ff:
                    d7:8d:df:15:57:40:2e:1c:10:96:a5:c9:0b:12:83:
                    7c:0b:d9:74:61:20:13:2d:88:9a:a6:4e:81:08:9c:
                    75:64:18:54:d8:0a:3a:f0:71:28:d1:50:29:64:b5:
                    5f:54:8b:b4:4a:36:38:a8:21:f4:10:f8:fa:f2:54:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5A:CF:CB:7F:63:70:F1:8F:B2:97:11:4F:A2:45:4D:0A:11:89:BD
            X509v3 Authority Key Identifier:
                keyid:89:57:16:F0:4D:35:F0:F8:BA:47:46:92:17:04:6A:96:5E:7A:9B:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/8VrPy39jcPGPspcRT6JFTQoRib0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:36:33:49:06:d0:48:47:27:2f:99:f3:a3:97:69:ec:83:09:
         45:4d:b0:cb:1b:b7:a6:b3:db:01:5e:27:8c:9e:2e:4e:5c:77:
         89:d4:08:ad:38:35:25:c4:30:93:2b:21:76:47:44:80:c3:46:
         6f:41:da:ce:2b:17:a5:59:29:70:bf:a8:3b:1e:00:f3:49:b6:
         a2:1d:75:0c:13:34:1b:b0:19:bc:1d:b3:17:34:72:db:d5:ac:
         55:70:92:ad:db:37:26:96:7a:7d:f7:5c:0c:04:32:04:b1:62:
         a0:5d:98:b8:d5:a4:8c:7f:d3:3c:d1:2c:fa:09:d0:35:07:fd:
         54:8b:69:f4:86:ad:b4:36:26:c2:55:05:b1:95:60:72:92:cf:
         40:69:19:d8:fc:25:b8:63:12:fb:d7:85:98:93:78:bb:cf:66:
         f2:48:8d:bf:27:8f:d4:44:82:f7:da:b1:12:53:4e:9b:1b:70:
         73:86:fa:79:c8:58:ce:0c:a8:65:66:96:1d:ad:83:bf:92:68:
         26:be:c2:a0:b9:29:2f:49:28:44:d6:f8:16:e6:aa:8a:a1:b7:
         4e:93:78:3d:31:48:32:48:93:44:85:20:bd:fb:3d:2c:c9:27:
         7c:18:80:23:7c:13:7d:18:cd:bb:3e:11:9d:b7:03:44:fe:2a:
         0e:28:f7:c2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTU3
MTZGMDREMzVGMEY4QkE0NzQ2OTIxNzA0NkE5NjVFN0E5QjdBMB4XDTI2MDEwNTE0
MjQyNFoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRjE1QUNGQ0I3RjYzNzBG
MThGQjI5NzExNEZBMjQ1NEQwQTExODlCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL4FgaTf2a/pH/5PdvHSGRAX8RBy7tZEAwOFEoRZE/87zOOa4y1P
f1sV7/h3O6pkdC8x+ic7YhR7fMTRponMj/KykcqGr9wXpz7M8GmcAJ7JciXXW8cl
L5PWFu0u2esYGvOIG/qbpE62bjTQTfIFu2jc4MkiAoQNvvWAFYpCDK/rL21EpjZh
vxRWMRlwhCEtmFwXRT2SpD8xjG2/JSnIRvjB2Y6t7ZsxPvEHO8GBwu6VtbZDPOqk
iEQMsLfuezxCKIv/143fFVdALhwQlqXJCxKDfAvZdGEgEy2ImqZOgQicdWQYVNgK
OvBxKNFQKWS1X1SLtEo2OKgh9BD4+vJU/IECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTxWs/Lf2Nw8Y+ylxFPokVNChGJvTAfBgNVHSMEGDAWgBSJVxbwTTXw+LpHRpIX
BGqWXnqbejAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNzMvaVZjVzhFMDE4UGk2UjBhU0Z3UnFsbDU2bTNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVZjVzhFMDE4UGk2UjBhU0Z3UnFs
bDU2bTNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjczLzhWclB5MzlqY1BHUHNwY1JUNkpGVFFvUmliMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGh+CgwDQYJKoZIhvcNAQELBQADggEBAHI2M0kG0EhHJy+Z86OXaeyD
CUVNsMsbt6az2wFeJ4yeLk5cd4nUCK04NSXEMJMrIXZHRIDDRm9B2s4rF6VZKXC/
qDseAPNJtqIddQwTNBuwGbwdsxc0ctvVrFVwkq3bNyaWen33XAwEMgSxYqBdmLjV
pIx/0zzRLPoJ0DUH/VSLafSGrbQ2JsJVBbGVYHKSz0BpGdj8JbhjEvvXhZiTeLvP
ZvJIjb8nj9REgvfasRJTTpsbcHOG+nnIWM4MqGVmlh2tg7+SaCa+wqC5KS9JKETW
+Bbmqoqht06TeD0xSDJIk0SFIL37PSzJJ3wYgCN8E30Yzbs+EZ23A0T+Kg4o98I=
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:00:48 2026 by rpki-client