This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/WSQs2ez_rMwd44fGA6YiwcqpXe0.roa
File:                     WSQs2ez_rMwd44fGA6YiwcqpXe0.roa (raw, json)
Hash identifier:          H6qh6YzxP96jheXvlJQUuOSB4Z3PksDySrD9ml4y09s=
Subject key identifier:   59:24:2C:D9:EC:FF:AC:CC:1D:E3:87:C6:03:A6:22:C1:CA:A9:5D:ED
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       86
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/WSQs2ez_rMwd44fGA6YiwcqpXe0.roa
Signing time:             Thu 01 Jan 2026 01:39:43 +0000
ROA not before:           Thu 01 Jan 2026 01:39:43 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7679
IP address blocks:        218.219.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan  1 01:39:43 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=59242CD9ECFFACCC1DE387C603A622C1CAA95DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:45:9e:35:1a:d1:6d:49:dc:10:05:12:9a:
                    c8:d6:7c:95:47:e8:bb:c9:32:d4:f6:97:37:98:33:
                    1a:32:f4:6a:c1:a9:d0:86:91:4e:60:61:94:c5:fa:
                    f5:27:f2:b8:42:06:92:9f:31:f4:36:62:86:0b:cf:
                    09:3e:28:d1:cb:01:d2:88:ba:c4:de:41:5d:bf:79:
                    c7:cc:d4:1e:1f:fc:f9:1f:b3:9a:6d:50:e0:e6:d0:
                    e6:30:f7:f2:2b:f2:fc:ba:0c:ef:9b:16:64:79:b0:
                    1e:68:1c:99:e9:6d:47:92:bc:2c:c1:88:2d:e1:cf:
                    f2:86:7b:6c:f5:af:51:f1:d6:f4:7f:f4:41:dd:9b:
                    05:14:00:63:93:48:6c:1e:44:2c:c5:cc:ae:66:7e:
                    e3:3c:11:89:5a:3a:2c:66:db:87:d2:98:48:33:14:
                    bd:c3:72:f1:75:2c:cd:50:5c:d1:18:d7:55:e6:62:
                    a4:8d:db:8e:90:6f:17:b1:a1:e6:a2:19:66:33:ea:
                    3b:a1:fd:2c:f4:ab:93:6f:ea:a7:0b:d3:96:32:4b:
                    c1:0a:fb:07:07:c4:8b:c3:06:87:e2:0b:80:5a:ae:
                    9b:dd:0c:55:49:e0:85:37:17:f9:2d:6e:f6:59:b1:
                    82:61:e5:76:29:44:33:64:f1:ac:53:6e:ff:8b:fe:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:2C:D9:EC:FF:AC:CC:1D:E3:87:C6:03:A6:22:C1:CA:A9:5D:ED
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/WSQs2ez_rMwd44fGA6YiwcqpXe0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:27:23:2e:13:14:0f:f6:66:3f:86:73:0a:0a:13:94:9b:
         bb:19:1c:98:d5:1a:8d:0c:a9:90:fa:a9:b8:e1:d0:1f:6e:65:
         c3:7e:8f:7f:93:7f:6a:67:1e:d4:bd:17:4f:4d:44:86:be:54:
         11:e2:96:85:6b:1f:f8:d4:56:cc:d3:51:0d:f5:a3:1a:ee:05:
         61:ee:80:85:69:8d:e0:e6:d5:2a:5f:8e:b5:dd:3d:6c:79:7a:
         90:72:c2:4a:2d:03:be:16:a0:f6:5c:f2:f5:a5:07:7a:05:b2:
         04:fc:a5:0a:06:e5:ee:d4:8f:48:a9:dc:d5:ca:6b:ed:c2:5e:
         2d:4b:81:91:09:9b:b5:4a:14:6c:73:d9:1a:97:4c:10:c4:48:
         5f:13:38:9c:b6:20:78:6b:70:de:be:63:13:1a:b5:d4:d5:ad:
         7e:5f:6e:8e:8f:b8:5d:3d:0d:85:eb:d6:68:89:f6:f0:35:09:
         f6:ac:3d:44:ef:ba:24:ec:a7:f1:24:5a:59:9f:ed:5f:ad:31:
         d4:9f:40:8f:8d:4b:b8:ad:9d:6f:ce:04:2c:a0:4d:af:83:1d:
         9f:10:04:97:c7:50:88:2e:ae:0e:b8:91:62:ce:66:2e:f0:2a:
         0b:af:c0:07:38:38:f5:d2:49:f3:3a:39:38:51:6c:88:99:86:
         79:f3:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:00:48 2026 by rpki-client