This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/WSMFoJ4a_8OhG1CK2MpBxMUyYaU.roa
File:                     WSMFoJ4a_8OhG1CK2MpBxMUyYaU.roa (raw, json)
Hash identifier:          XvDVaOHOJgf5dTMW3q2kvZTdHM79BdRccrhqcZkrRno=
Subject key identifier:   59:23:05:A0:9E:1A:FF:C3:A1:1B:50:8A:D8:CA:41:C4:C5:32:61:A5
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       67
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/WSMFoJ4a_8OhG1CK2MpBxMUyYaU.roa
Signing time:             Thu 01 Jan 2026 01:32:52 +0000
ROA not before:           Thu 01 Jan 2026 01:32:52 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7679
IP address blocks:        49.156.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan  1 01:32:52 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=592305A09E1AFFC3A11B508AD8CA41C4C53261A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:2d:37:39:aa:a4:50:7e:8e:c4:20:36:b9:
                    44:5d:58:c0:ed:65:0f:0e:32:c2:89:cc:9c:e5:ee:
                    04:98:1e:0c:8a:1d:a0:88:21:50:bd:cd:59:60:04:
                    9e:f8:65:82:5e:13:26:17:98:b4:c0:5e:c7:e2:2b:
                    cf:82:fa:e3:af:91:c5:55:3e:b1:f1:05:e7:4a:1d:
                    59:cd:46:b9:42:32:50:7d:e8:18:36:38:88:35:f6:
                    a4:85:92:95:1c:62:8f:d8:22:46:98:45:77:0a:35:
                    d7:fc:15:5f:46:c4:15:24:b5:50:ab:28:cd:95:4a:
                    1b:f2:c8:ee:6a:bf:cc:f0:e5:79:a2:c6:14:fe:26:
                    d9:7f:55:96:24:e4:19:d8:64:d2:44:67:34:4f:e5:
                    ce:77:24:38:f1:24:16:94:2d:6f:6b:3b:ef:78:d4:
                    b9:fb:01:91:1e:3a:34:b6:86:b3:17:1a:64:7a:49:
                    8f:43:83:2a:4b:b0:0d:08:24:b1:ca:ee:01:f2:d7:
                    e2:8b:3f:23:0d:53:07:74:3e:f4:c6:37:ad:d7:a8:
                    ed:c1:77:ab:09:98:53:23:35:77:95:47:4d:09:d8:
                    8e:5b:d3:e3:f1:b9:41:1a:34:2b:0c:a8:09:1e:42:
                    be:08:79:fa:c2:7b:4b:5a:3b:7b:5e:d4:e5:3a:5e:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:23:05:A0:9E:1A:FF:C3:A1:1B:50:8A:D8:CA:41:C4:C5:32:61:A5
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/WSMFoJ4a_8OhG1CK2MpBxMUyYaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:9d:ee:12:93:10:b7:b5:41:15:c0:96:c1:9d:a5:77:38:40:
         96:92:6b:8e:1c:a1:f0:92:eb:88:6a:ab:70:6b:d1:24:58:de:
         73:64:90:91:bf:e0:c4:05:26:74:7d:68:a5:5e:b1:9d:50:b6:
         00:16:1c:36:76:ad:2f:65:40:59:22:1d:ab:8e:06:9d:53:57:
         1f:e9:de:c2:f1:e5:61:fa:15:f4:5f:7c:41:1d:6d:35:c9:c4:
         79:5a:02:11:ba:41:72:62:6f:a9:3a:a9:b3:ea:80:c8:2f:2b:
         00:b2:84:ce:df:65:b8:18:bc:51:7d:75:cc:28:ac:17:a1:1e:
         30:cc:9a:65:42:ba:8f:a9:ce:c6:e7:51:3a:72:e0:f4:c8:ff:
         6a:e5:21:7e:30:07:cb:af:cb:16:8e:74:7b:2b:87:b5:63:67:
         b5:88:fc:0f:60:3d:18:27:71:74:f3:af:0a:cc:c4:c1:7c:2f:
         73:08:b2:72:eb:94:00:44:35:20:d3:aa:5d:52:00:94:bc:0b:
         dd:ee:3d:eb:5d:bb:39:c4:72:09:c1:00:f7:bc:9a:0e:93:9f:
         95:e4:dc:63:fd:de:fa:78:91:6f:5d:34:db:ab:a6:13:1c:86:
         6d:4b:df:c5:cb:f1:5d:14:d8:95:61:14:b3:78:e5:06:6b:11:
         b8:3f:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:41 2026 by rpki-client