This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/6Wa5Le5Gnwcjcpg1KAQkOLVE79o.roa
File:                     6Wa5Le5Gnwcjcpg1KAQkOLVE79o.roa (raw, json)
Hash identifier:          1EvC2PUcXEEsZf7QaQfF/pMcCcO3Dyq6suCscpOg9nQ=
Subject key identifier:   E9:66:B9:2D:EE:46:9F:07:23:72:98:35:28:04:24:38:B5:44:EF:DA
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       87
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/6Wa5Le5Gnwcjcpg1KAQkOLVE79o.roa
Signing time:             Thu 01 Jan 2026 01:39:43 +0000
ROA not before:           Thu 01 Jan 2026 01:39:43 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7679
IP address blocks:        218.40.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan  1 01:39:43 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=E966B92DEE469F072372983528042438B544EFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:91:68:f9:d5:d4:6f:72:0e:3a:27:d2:cc:
                    c3:ed:66:b9:5f:64:3f:2e:85:47:dd:ab:b2:fc:9c:
                    f0:7e:ba:5a:f6:8c:58:5c:aa:a7:cf:6a:38:36:77:
                    4b:47:d2:40:23:87:4a:2d:5b:9b:6c:5a:25:3c:b0:
                    7f:ad:dc:84:e8:b9:cc:47:98:8b:e8:dc:d3:72:cd:
                    3e:b0:f7:87:bb:c1:f7:ac:0c:eb:bc:cb:b2:55:24:
                    05:80:59:a5:78:b3:85:1d:99:73:7b:f1:ff:88:db:
                    bc:f6:1f:09:90:95:8d:47:e4:9a:a8:1a:e5:52:0c:
                    83:21:cf:77:a1:df:c8:02:ea:43:f9:a4:f8:e4:66:
                    d6:24:cd:9c:b1:ea:6e:5a:83:8f:36:a8:8e:62:6f:
                    a6:25:e4:a5:8a:2b:c3:ea:6e:e1:68:f6:c8:16:44:
                    f7:98:dd:cf:79:ea:34:98:22:1f:7c:4e:db:d8:da:
                    ca:82:16:54:d5:dc:cd:03:e8:7b:31:7c:0c:bf:2a:
                    ab:f1:b7:27:bd:57:e5:79:2a:8a:34:ad:81:57:2f:
                    f7:2c:40:82:f0:41:a2:08:c3:91:e7:7d:c6:d3:52:
                    fc:4f:66:76:53:5a:ee:64:6d:4d:78:26:a8:82:dd:
                    f6:9e:a8:34:ed:88:cf:fa:d7:29:32:c1:39:3c:d1:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:B9:2D:EE:46:9F:07:23:72:98:35:28:04:24:38:B5:44:EF:DA
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/6Wa5Le5Gnwcjcpg1KAQkOLVE79o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:84:d3:a8:f2:8d:81:d1:0f:50:0b:a2:53:89:4a:e6:d4:1b:
         0a:b4:31:6a:f6:60:b9:53:f7:07:78:4b:8d:c9:39:ea:9c:00:
         98:1d:b1:b7:ad:e0:c7:9d:a3:9b:40:37:a6:4c:e8:a5:1a:f0:
         d8:fc:b0:c9:1d:29:3a:26:31:04:b4:1a:60:1f:16:95:58:e2:
         bd:e2:12:e8:30:7e:7d:e3:5a:52:24:19:84:5e:27:b7:f7:d7:
         56:34:2f:ae:5f:d8:5d:e8:43:16:6d:2e:b2:00:ed:ad:75:d0:
         df:c0:4f:67:f7:37:0e:80:3d:e2:ad:fc:20:52:74:d5:6d:56:
         56:94:e1:89:0f:87:60:29:17:56:b9:36:42:b8:5a:3a:00:43:
         75:bc:d7:cf:0f:19:c8:99:61:79:ef:1a:4c:a3:c4:4e:cf:8d:
         27:18:0b:36:48:01:3e:b6:2e:95:d0:3e:23:b2:52:b5:c4:e9:
         60:5e:fd:0c:a6:a3:41:1d:d0:19:66:30:5a:cd:5c:dd:22:85:
         2d:3b:44:78:e2:a5:79:46:97:31:ce:0f:15:07:d9:23:59:f8:
         bd:c2:48:cf:af:a8:e0:e3:03:50:3d:08:97:bf:c5:87:ed:77:
         74:69:9c:b5:e8:d2:0f:90:3b:76:1f:36:02:05:bd:71:71:25:
         0c:c5:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:57 2026 by rpki-client