This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/te8yy4W_KL4_mzK51O0Ehzln824.roa
File:                     te8yy4W_KL4_mzK51O0Ehzln824.roa (raw, json)
Hash identifier:          KhB+fENGG4pK5FnWGZQsmnb0/sIM2YhFmqLuEnSTZ18=
Subject key identifier:   B5:EF:32:CB:85:BF:28:BE:3F:9B:32:B9:D4:ED:04:87:39:67:F3:6E
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       6C
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/te8yy4W_KL4_mzK51O0Ehzln824.roa
Signing time:             Thu 01 Jan 2026 01:32:56 +0000
ROA not before:           Thu 01 Jan 2026 01:32:56 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7679
IP address blocks:        103.2.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan  1 01:32:56 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=B5EF32CB85BF28BE3F9B32B9D4ED04873967F36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:51:3f:93:5c:95:1b:e5:4d:0a:04:d0:5d:
                    9a:d7:d1:af:73:d7:35:2c:74:a4:16:a5:b1:e7:4a:
                    3a:41:ec:aa:64:84:6b:f4:88:80:b5:a0:3b:8d:43:
                    39:9f:fa:75:ff:bc:2c:7a:4c:4e:d2:31:bc:cf:aa:
                    04:bd:3f:fd:b9:f9:24:43:aa:96:c1:dc:65:69:95:
                    18:0a:98:24:a3:34:57:6d:53:e1:d5:58:e4:95:d9:
                    94:63:cb:1c:fb:5b:52:65:3f:12:b1:39:51:dc:4a:
                    cd:a8:98:9d:43:aa:3e:bc:d0:c6:86:f2:4c:ca:78:
                    d2:34:1c:35:26:7c:7f:23:72:60:9f:f5:a8:22:86:
                    63:77:b2:4a:28:61:2b:f5:10:63:2f:5b:d3:14:cc:
                    46:af:71:9b:3b:c9:8a:31:02:c5:0d:d5:70:0e:7a:
                    6e:14:0c:ff:1e:df:62:3f:a1:32:eb:67:13:80:5c:
                    2f:04:a2:77:e6:2f:5a:21:50:ee:aa:02:c0:8f:20:
                    20:34:50:c5:68:de:3f:b1:e9:39:0e:f2:d0:ac:f5:
                    2a:4f:6e:91:ed:c0:cc:51:ab:5d:59:79:d1:64:d6:
                    c9:34:ed:0f:30:3c:ef:d6:b5:32:fa:d8:60:95:4c:
                    fe:8e:c0:a8:43:3f:eb:36:31:93:fa:c7:47:ed:87:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:32:CB:85:BF:28:BE:3F:9B:32:B9:D4:ED:04:87:39:67:F3:6E
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/te8yy4W_KL4_mzK51O0Ehzln824.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:91:27:43:19:21:0e:7c:70:f6:25:ad:28:fc:9c:6e:19:66:
         35:96:13:b9:e5:1f:fb:9d:7f:f0:4d:c8:f6:12:d8:4b:c3:9a:
         6f:98:e3:c5:b1:ec:da:40:a6:bb:54:24:a6:71:de:1c:b4:3e:
         50:9b:5c:a0:f9:c2:81:dc:81:8e:8a:88:a7:5e:0f:c2:8b:ae:
         6c:fa:4e:40:eb:7d:86:b9:d8:a7:63:82:5e:3b:2f:f0:f5:34:
         63:b9:95:11:ee:86:51:8f:f3:88:29:34:9d:45:ae:e0:74:c4:
         31:6b:b3:c7:2c:ab:dc:53:81:95:e9:f0:72:ec:b2:35:00:0a:
         9d:da:c5:71:39:83:48:9f:1e:d9:a3:8e:61:90:c6:e4:ec:1b:
         b0:aa:bd:32:82:e8:ed:b0:b7:fc:a9:73:f3:87:d7:a8:b4:97:
         26:2c:5f:78:3b:2a:0d:c0:9d:9b:d4:7b:28:a7:6a:ab:40:1c:
         74:b5:62:86:06:f0:e7:7c:00:6a:f7:b7:54:53:c1:64:cc:17:
         de:49:1c:b4:9b:54:17:31:fe:7f:c9:d3:7a:e7:bf:ff:7e:d1:
         62:b8:d3:03:57:15:27:53:0e:05:ac:16:88:a1:b7:d9:99:e1:
         e1:90:ea:a9:9b:ba:e2:f2:51:b3:f9:7c:89:6a:bb:59:5d:26:
         a8:80:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:34 2026 by rpki-client