This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Kkodp2zi1AfOICovsYE6L_OJyFw.roa
File:                     Kkodp2zi1AfOICovsYE6L_OJyFw.roa (raw, json)
Hash identifier:          X0YpBzHCO12b2BCKwaW8KjxrogecLuyGoUL0AjIgV10=
Subject key identifier:   2A:4A:1D:A7:6C:E2:D4:07:CE:20:2A:2F:B1:81:3A:2F:F3:89:C8:5C
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       70
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Kkodp2zi1AfOICovsYE6L_OJyFw.roa
Signing time:             Thu 01 Jan 2026 01:32:58 +0000
ROA not before:           Thu 01 Jan 2026 01:32:58 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7679
IP address blocks:        116.94.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan  1 01:32:58 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=2A4A1DA76CE2D407CE202A2FB1813A2FF389C85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:a7:c4:db:b1:0a:e7:f8:c8:77:5c:d3:91:
                    c6:0b:27:31:85:48:e9:31:39:89:ab:7d:69:18:24:
                    c8:50:3b:35:cc:ba:f7:e3:e9:41:7d:32:a1:d7:aa:
                    5f:39:85:5d:3e:4e:c6:63:db:1a:cb:ce:24:89:df:
                    05:0d:85:de:1e:cf:8e:7e:8f:83:59:05:87:43:4c:
                    b6:0e:2a:1a:29:a9:ef:d0:5c:8f:e9:9f:02:0b:33:
                    e3:90:bf:34:81:10:5a:c2:45:ba:e9:77:05:13:4a:
                    11:1c:2b:75:35:c9:8c:11:b2:c0:6f:47:02:8e:69:
                    cf:cf:38:fe:3d:21:eb:c2:bf:1d:7b:19:8c:18:04:
                    6f:dc:31:de:5a:05:ba:f6:24:63:16:41:1b:03:98:
                    c4:a4:40:53:bf:40:4b:88:ab:bc:a1:9a:97:2e:f6:
                    3c:79:67:f6:97:f5:85:7a:2a:d0:07:81:4a:0b:76:
                    09:b2:62:ce:55:fb:1e:37:31:ae:4a:5f:01:ab:c5:
                    76:10:2e:12:29:57:b7:0c:89:10:a6:b6:10:05:d3:
                    08:8f:9b:e1:18:53:28:9d:58:b9:00:6f:40:40:eb:
                    33:57:52:07:d6:f3:b5:fd:f4:8a:45:89:69:e4:08:
                    9a:30:9b:9b:cd:3a:f2:56:0b:fe:e7:e0:7f:21:86:
                    55:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4A:1D:A7:6C:E2:D4:07:CE:20:2A:2F:B1:81:3A:2F:F3:89:C8:5C
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Kkodp2zi1AfOICovsYE6L_OJyFw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:dd:97:fe:d6:e3:ef:82:cd:34:65:d4:a8:94:2b:14:2e:
         ed:1e:4b:78:c9:f1:52:0a:84:55:ca:74:07:3c:51:2e:59:70:
         1e:75:5d:76:59:b1:ac:a6:ab:fd:73:11:55:04:a0:ee:69:66:
         8b:d2:b5:6b:7c:c2:32:0c:02:4c:0a:c3:c4:82:c6:6d:a2:c0:
         96:64:fb:07:39:9c:34:9c:23:2b:12:f4:e1:3c:c0:b0:0c:75:
         39:3b:ab:61:e9:35:22:76:72:7e:b5:12:e4:84:70:f9:64:7a:
         f0:16:24:29:63:d9:52:6a:11:96:a4:06:6e:c6:e6:04:8d:9b:
         b8:0a:e2:eb:a4:56:80:6e:5b:28:95:9d:87:2c:96:60:41:75:
         55:bc:f8:5d:4e:8c:df:f2:aa:22:60:aa:a4:65:c6:73:fa:c4:
         1c:f3:d7:15:01:9e:8e:25:2b:25:9c:a0:74:4b:07:3d:b8:5f:
         18:ea:09:58:6f:5b:b7:e3:82:35:2c:13:03:5e:1d:e0:fd:b2:
         0e:fa:db:a8:c4:17:77:d3:14:d8:8e:bd:35:f5:ae:7e:61:4c:
         2f:5d:60:af:87:af:da:4e:b4:ea:dd:69:8d:91:6d:ef:67:9a:
         bf:1c:57:8d:d2:81:b9:2b:f6:6c:ce:ce:d7:b8:30:07:2d:1f:
         43:e1:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:37:33 2026 by rpki-client