This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30058/evkYmGGkLP64lA4hYBE2gDBSgk8.roa
File:                     evkYmGGkLP64lA4hYBE2gDBSgk8.roa (raw, json)
Hash identifier:          K71rAR5bbLTLygd8IUA3I5NsODEjF5n+cdLIXRE2pQk=
Subject key identifier:   7A:F9:18:98:61:A4:2C:FE:B8:94:0E:21:60:11:36:80:30:52:82:4F
Certificate issuer:       /CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Certificate serial:       63
Authority key identifier: A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/evkYmGGkLP64lA4hYBE2gDBSgk8.roa
Signing time:             Thu 01 Jan 2026 01:29:54 +0000
ROA not before:           Thu 01 Jan 2026 01:29:54 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     18126
IP address blocks:        2001:f58::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
        Validity
            Not Before: Jan  1 01:29:54 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7AF9189861A42CFEB8940E21601136803052824F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:b1:64:ad:ca:29:b6:35:5c:0c:67:6b:e9:
                    da:19:12:de:89:2b:e6:ef:d2:78:c5:f0:b6:f1:b7:
                    a4:7e:fb:0e:6f:7c:c1:e8:d6:2d:c1:e3:89:bb:cf:
                    fb:ab:e1:b9:23:e4:08:27:a2:7b:bf:b9:2d:42:59:
                    4f:23:33:cb:cc:6a:53:70:35:a4:38:42:b1:14:fd:
                    da:a3:ef:a3:06:e9:9d:af:94:1c:3c:63:e7:55:5c:
                    25:75:03:2e:63:08:f6:05:14:dd:49:74:1f:f2:a6:
                    b0:db:e6:78:44:56:72:f3:3a:eb:30:09:f3:36:a6:
                    53:70:fb:3b:fa:23:da:bd:3f:e6:b5:d4:d0:87:37:
                    4b:16:3d:69:4b:dd:61:05:c6:b8:62:ea:d2:59:7d:
                    7d:19:40:fb:e2:f6:6e:48:0c:1a:38:d3:cf:f1:16:
                    4e:ed:0c:0a:30:d9:a1:c8:ec:8f:47:b9:df:90:6a:
                    8d:25:02:74:02:3b:d4:60:0f:ba:db:7b:77:a6:5b:
                    b6:36:92:97:1d:c2:97:54:2d:10:eb:c2:0c:d5:af:
                    3a:f5:22:e1:57:67:47:e9:0a:98:3f:da:82:0a:54:
                    61:84:08:9d:cb:76:3f:e9:a7:76:b4:05:0d:c3:aa:
                    15:d4:ee:47:56:ff:e6:db:18:d6:df:72:16:a0:f5:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F9:18:98:61:A4:2C:FE:B8:94:0E:21:60:11:36:80:30:52:82:4F
            X509v3 Authority Key Identifier:
                keyid:A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/evkYmGGkLP64lA4hYBE2gDBSgk8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f58::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:e9:a9:6a:a3:3c:67:31:e2:99:90:7d:9e:c6:e6:f2:80:
         dc:48:87:68:48:b2:93:cb:5d:37:be:13:70:60:ff:fa:1b:fd:
         7c:cf:3e:1a:d5:6a:b9:ec:c1:0e:8d:5c:3e:54:a4:53:34:46:
         cc:b1:54:12:fa:1e:0f:71:78:1e:f6:50:95:49:0f:39:0a:1a:
         b7:25:95:ac:5e:b1:36:20:39:3a:24:14:af:1d:fb:f2:0e:15:
         c3:f0:a8:72:73:f0:87:f2:51:7b:61:f3:51:7a:f6:d3:6c:ee:
         d8:2d:85:d5:57:c5:e7:16:73:14:03:5b:88:81:1d:2c:29:16:
         a1:0e:12:8b:17:aa:b7:b3:17:ed:66:30:10:f7:73:27:e7:6f:
         42:4e:e2:51:86:15:4d:61:b6:68:c2:70:dc:34:f5:20:b5:2e:
         11:5e:41:be:6a:1a:f6:8c:f7:27:b3:14:eb:49:60:99:eb:e5:
         aa:43:a8:bc:41:5d:c3:be:bf:e2:85:ad:0e:32:2b:18:f9:6d:
         03:2c:f3:ca:1b:23:90:11:80:89:63:1f:ec:7e:14:b5:6e:72:
         56:7e:41:14:5d:2c:8e:66:a7:db:83:cd:8c:d4:b4:48:05:71:
         2d:03:ff:90:d5:24:92:72:0e:f6:9f:b3:5b:07:dc:69:b3:d8:
         b2:33:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:00:21 2026 by rpki-client