This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/8U6Prv_UJhVi4cM1v75CmZOCt6A.roa
File:                     8U6Prv_UJhVi4cM1v75CmZOCt6A.roa (raw, json)
Hash identifier:          uZusP0GscsM8aa3FQeoLiRvbGex1Q76xXg8aP8uljo4=
Subject key identifier:   F1:4E:8F:AE:FF:D4:26:15:62:E1:C3:35:BF:BE:42:99:93:82:B7:A0
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       69
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/8U6Prv_UJhVi4cM1v75CmZOCt6A.roa
Signing time:             Thu 01 Jan 2026 01:32:53 +0000
ROA not before:           Thu 01 Jan 2026 01:32:53 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7679
IP address blocks:        58.3.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan  1 01:32:53 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F14E8FAEFFD4261562E1C335BFBE42999382B7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:f5:c6:2b:ed:e7:34:98:c5:83:96:66:0d:
                    77:cc:a2:b8:09:dc:10:ab:63:c1:bd:32:12:63:cf:
                    99:4b:0a:ff:78:ee:e1:72:ed:bd:c7:88:5d:56:0e:
                    c4:c2:9d:ed:be:23:10:00:cb:1f:bf:25:c9:b1:1a:
                    a5:7f:4e:30:7c:54:a5:e3:23:90:ee:be:06:61:8a:
                    3d:10:b9:61:9a:1c:d2:76:c3:e5:a2:ca:43:f3:b4:
                    de:b0:2d:a9:ad:ec:c2:f3:38:da:c5:89:5f:48:ed:
                    d7:ea:ec:e0:83:29:aa:a4:e6:ab:1c:04:f8:a0:75:
                    bd:15:5f:4b:1b:ba:9c:bd:84:a7:f2:3a:80:60:7e:
                    bd:57:00:b7:3d:67:a2:8a:0e:db:35:a2:4e:a5:a8:
                    f1:85:2a:33:e5:c6:02:bb:a8:3f:bf:60:3b:68:48:
                    fc:9f:af:db:7a:bd:cb:fd:35:c7:f1:c1:fd:15:e7:
                    f7:63:1f:cf:76:e3:d0:27:59:2e:ea:21:14:db:e1:
                    a0:4f:7a:32:e9:ee:83:50:ff:60:62:af:b3:ff:a3:
                    a2:38:6a:17:8e:73:cb:44:e7:d4:31:3b:64:89:68:
                    88:2e:4c:08:f9:36:76:97:a4:53:e8:bc:c9:bc:ca:
                    b3:c1:fc:4b:ab:fd:99:f6:92:d1:f3:2f:f3:c6:3c:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4E:8F:AE:FF:D4:26:15:62:E1:C3:35:BF:BE:42:99:93:82:B7:A0
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/8U6Prv_UJhVi4cM1v75CmZOCt6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.3.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9f:55:93:2e:57:df:81:3c:71:1e:b3:cc:45:b2:51:c3:22:45:
         18:1c:33:51:e1:56:e3:b5:6e:75:48:45:fc:e0:c4:6d:9d:f8:
         e0:c3:27:d6:b5:8b:51:55:8e:2e:33:b9:ec:66:00:ff:f6:86:
         24:31:d1:9f:15:45:b9:ed:69:b5:2b:69:12:0c:d2:08:fb:6b:
         56:0a:e2:42:b0:26:82:cb:82:80:94:9f:5c:89:f3:e7:94:aa:
         1a:7d:88:7f:9e:07:43:58:63:c5:21:a3:5e:36:97:c6:6a:b5:
         71:73:78:f0:25:0d:5e:19:18:b3:53:df:19:98:a5:d5:8a:e0:
         5c:09:27:00:1a:53:e2:9b:49:dd:30:f8:3a:7d:b2:3c:71:4c:
         53:15:f4:12:a3:76:ca:bd:9c:9b:9d:7b:ba:f4:12:db:2f:ae:
         bb:08:73:c9:d2:da:a2:3f:9b:0a:1a:d2:48:f4:27:00:fc:78:
         5d:34:4c:d8:53:ed:b5:ad:49:77:47:89:a6:50:81:79:2a:43:
         99:d4:4a:26:bc:e2:56:4b:38:4f:21:00:1d:a8:a5:5f:e2:c1:
         e1:50:a2:42:4f:1d:43:b6:18:60:a1:e0:4d:16:71:95:35:98:
         37:f9:84:ef:f9:04:44:5e:5d:34:a0:da:e3:55:b7:53:6b:c6:
         3b:f5:e9:3d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE
OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI2MDEwMTAx
MzI1M1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRjE0RThGQUVGRkQ0MjYx
NTYyRTFDMzM1QkZCRTQyOTk5MzgyQjdBMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9i9cYr7ec0mMWDlmYNd8yiuAncEKtjwb0yEmPPmUsK/3ju4XLt
vceIXVYOxMKd7b4jEADLH78lybEapX9OMHxUpeMjkO6+BmGKPRC5YZoc0nbD5aLK
Q/O03rAtqa3swvM42sWJX0jt1+rs4IMpqqTmqxwE+KB1vRVfSxu6nL2Ep/I6gGB+
vVcAtz1noooO2zWiTqWo8YUqM+XGAruoP79gO2hI/J+v23q9y/01x/HB/RXn92Mf
z3bj0CdZLuohFNvhoE96Munug1D/YGKvs/+jojhqF45zy0Tn1DE7ZIloiC5MCPk2
dpekU+i8ybzKs8H8S6v9mfaS0fMv88Y83a8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTxTo+u/9QmFWLhwzW/vkKZk4K3oDAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA
n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY
THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDkvOFU2UHJ2X1VKaFZpNGNNMXY3NUNtWk9DdDZBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBzoDgDANBgkqhkiG9w0BAQsFAAOCAQEAn1WTLlffgTxxHrPMRbJRwyJFGBwz
UeFW47VudUhF/ODEbZ344MMn1rWLUVWOLjO57GYA//aGJDHRnxVFue1ptStpEgzS
CPtrVgriQrAmgsuCgJSfXInz55SqGn2If54HQ1hjxSGjXjaXxmq1cXN48CUNXhkY
s1PfGZil1YrgXAknABpT4ptJ3TD4On2yPHFMUxX0EqN2yr2cm517uvQS2y+uuwhz
ydLaoj+bChrSSPQnAPx4XTRM2FPtta1Jd0eJplCBeSpDmdRKJrziVks4TyEAHail
X+LB4VCiQk8dQ7YYYKHgTRZxlTWYN/mE7/kERF5dNKDa41W3U2vGO/XpPQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:01:37 2026 by rpki-client