This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/8StdLscRUcS4pDqNLXAhffV1Jtg.roa
File:                     8StdLscRUcS4pDqNLXAhffV1Jtg.roa (raw, json)
Hash identifier:          ttmUBeFzyT1xx3vDhQqICdGqKQgQLlkvyX4iexmk8JQ=
Subject key identifier:   F1:2B:5D:2E:C7:11:51:C4:B8:A4:3A:8D:2D:70:21:7D:F5:75:26:D8
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       7B
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/8StdLscRUcS4pDqNLXAhffV1Jtg.roa
Signing time:             Thu 01 Jan 2026 01:32:05 +0000
ROA not before:           Thu 01 Jan 2026 01:32:05 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9370
IP address blocks:        2001:e40::/30 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: Jan  1 01:32:05 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F12B5D2EC71151C4B8A43A8D2D70217DF57526D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:b6:bb:28:73:74:a0:9a:8b:7e:1f:28:20:
                    05:27:b8:ec:d5:68:15:eb:2c:2e:25:f8:12:8e:e3:
                    db:82:6d:1c:7e:3e:13:3e:55:36:2d:fe:3e:ae:e5:
                    94:80:71:cc:b5:ee:a9:57:10:3f:ae:bc:49:25:49:
                    ce:48:71:b7:66:63:0e:dd:1a:ca:61:e8:31:18:82:
                    75:8c:b4:e4:d8:b8:ff:12:74:46:1a:63:dc:80:00:
                    5f:b1:a5:38:14:af:a0:98:72:67:3b:0c:1d:54:a4:
                    9d:4a:ca:47:d6:9e:83:e5:04:f9:e8:52:57:fa:26:
                    cb:c3:58:4a:6b:3d:64:9d:1e:94:8b:bf:bf:64:d3:
                    a8:39:30:fb:04:df:c3:1a:f1:12:74:e5:88:fa:bc:
                    83:2b:50:a4:b3:e7:e4:d8:13:82:69:da:4a:df:93:
                    74:b8:97:2a:c2:dc:f9:c7:57:d6:71:0d:79:f8:45:
                    6f:61:62:92:73:12:be:5f:f9:e8:3a:8f:c3:ff:ee:
                    e7:86:da:3d:28:45:9e:7a:db:ce:85:86:6f:e4:a9:
                    19:6e:ec:e2:29:a2:53:36:e1:73:e3:1d:5f:32:af:
                    fd:e5:75:40:3b:33:c0:b0:fd:63:70:16:ca:d3:b4:
                    96:35:36:c7:3e:f5:97:e0:0c:a8:46:f7:e9:56:2c:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:5D:2E:C7:11:51:C4:B8:A4:3A:8D:2D:70:21:7D:F5:75:26:D8
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/8StdLscRUcS4pDqNLXAhffV1Jtg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e40::/30

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:36:64:ea:b3:4f:51:45:ae:0d:4d:8d:2d:5e:39:b5:40:
         75:2d:ce:84:2a:df:2b:05:f4:56:bd:66:82:b7:74:76:20:ea:
         af:74:02:b2:9d:01:59:cb:d1:ea:c9:b7:ce:96:52:15:40:89:
         4a:85:f5:76:61:72:a6:10:36:a0:8b:16:4b:49:23:94:90:1b:
         58:be:ca:21:7e:87:c9:a2:a3:54:79:79:73:8b:05:38:86:64:
         ac:84:8d:67:98:6a:8f:bd:1f:02:60:a7:3b:8c:41:13:d4:c0:
         7c:71:1e:92:2c:7d:66:38:30:19:cd:92:8b:06:e0:d2:13:b3:
         b4:2b:02:48:f7:b8:b8:f7:e4:23:98:67:ad:d7:94:88:79:1c:
         c2:4f:31:72:2d:63:14:5a:c4:cf:7f:1f:2a:c9:2e:52:e1:59:
         5e:82:08:10:b8:7d:14:31:d3:c5:40:85:71:ea:65:4f:57:3f:
         62:1d:b5:8a:1d:64:00:d6:19:46:57:d9:d8:aa:9e:b9:da:0f:
         bb:0e:25:64:a0:31:5d:eb:62:43:d9:b6:17:6a:65:83:b7:d5:
         62:a1:54:14:ca:32:e3:8f:54:1d:0e:60:c5:1f:f3:88:ec:75:
         63:87:cc:f4:07:77:40:6b:75:ab:20:7b:a4:a1:72:c6:a0:c3:
         d2:d6:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:54:16 2026 by rpki-client