This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30191/wFrC9BlSeMgnRJDRNwXxH5GLYU8.roa
File:                     wFrC9BlSeMgnRJDRNwXxH5GLYU8.roa (raw, json)
Hash identifier:          njSXkB6jegMcbRxzjkLd5FGY6VOxlGrGID+eqkbfUcg=
Subject key identifier:   C0:5A:C2:F4:19:52:78:C8:27:44:90:D1:37:05:F1:1F:91:8B:61:4F
Certificate issuer:       /CN=4F28372369E482E49424ED39E244330E34EB40B0
Certificate serial:       5B
Authority key identifier: 4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/wFrC9BlSeMgnRJDRNwXxH5GLYU8.roa
Signing time:             Thu 01 Jan 2026 01:31:43 +0000
ROA not before:           Thu 01 Jan 2026 01:31:43 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7684
IP address blocks:        2401:2500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F28372369E482E49424ED39E244330E34EB40B0
        Validity
            Not Before: Jan  1 01:31:43 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=C05AC2F4195278C8274490D13705F11F918B614F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:7d:31:c9:43:6f:fb:bb:32:d3:4e:35:98:
                    ce:76:9c:06:1d:f1:48:cb:49:da:26:fe:3c:2d:3b:
                    a7:9a:4a:50:46:2f:60:3f:b3:cb:38:61:ce:b5:8d:
                    cb:fd:6c:5f:27:0c:0d:b5:1a:82:aa:ab:7c:46:d8:
                    c9:19:98:4b:5d:d7:ed:3e:62:29:2c:f3:fc:3a:15:
                    f1:b7:1e:eb:49:71:71:29:f3:43:6f:36:73:fb:4f:
                    7b:cc:4d:f2:f7:9c:e9:7d:a0:47:82:a6:0c:ef:64:
                    a1:ef:eb:35:6e:92:9f:f8:7a:54:6e:32:55:14:1b:
                    08:f4:9e:3b:4c:9a:6a:39:05:2a:4a:5a:97:a8:20:
                    de:4f:cb:97:ac:c5:c8:01:17:5b:df:36:22:7f:99:
                    9d:10:d3:ed:39:7e:41:ba:81:5b:83:05:5c:e6:fa:
                    cb:83:f9:ab:0b:e7:08:26:5a:2f:c4:89:8a:5b:4a:
                    18:60:22:96:e8:5b:3d:7f:75:80:f4:cd:d1:70:cd:
                    b6:fd:cb:e5:8c:07:66:a3:be:47:db:d9:eb:80:35:
                    d4:a5:57:3b:4e:ef:81:63:1e:83:41:84:94:e4:34:
                    e5:6c:66:57:47:1a:25:73:66:17:ba:1a:88:7d:db:
                    14:b3:bf:42:45:f9:7f:67:37:0f:23:b1:7e:c7:2b:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:C2:F4:19:52:78:C8:27:44:90:D1:37:05:F1:1F:91:8B:61:4F
            X509v3 Authority Key Identifier:
                keyid:4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/wFrC9BlSeMgnRJDRNwXxH5GLYU8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:90:ae:fd:43:b6:24:0a:17:f6:37:e8:56:77:90:03:54:c2:
         1b:0c:2e:a5:7a:89:1e:1d:76:8c:7f:4a:af:42:51:02:04:5a:
         61:91:f7:c3:94:35:fa:6f:de:ab:54:1a:4e:65:4f:fc:ff:96:
         82:f3:e9:aa:5b:eb:ee:74:f3:4c:69:8b:8a:1c:87:d5:2b:ee:
         ec:d8:2e:d0:d0:9d:79:65:c6:e4:a9:65:fd:86:68:6f:9c:d3:
         fd:f0:04:e1:0c:e5:23:75:26:92:93:22:d6:bd:e0:6e:2e:8a:
         c8:28:d5:79:c4:e5:4a:23:e8:8c:3a:a4:3a:17:ff:21:de:c8:
         a6:81:9f:85:0d:95:08:f1:9a:07:4a:df:1e:d1:aa:c5:47:f4:
         13:9c:e8:d8:a4:f5:ac:78:48:e6:92:c0:22:98:79:23:9d:22:
         15:ec:41:b3:9d:34:05:a9:92:37:5d:2a:ed:22:da:64:fd:fe:
         cb:c7:cc:f8:3e:9e:23:7d:38:67:ef:b5:51:5d:a0:5f:a7:56:
         65:a0:f1:ba:f5:34:59:51:6c:94:0c:40:01:60:57:dc:f0:5c:
         c8:54:28:aa:54:27:81:81:00:b7:f1:c6:c7:6f:b3:d7:ba:20:
         a1:cf:ed:75:78:c2:02:d4:39:08:ff:70:2e:b4:c5:6e:c4:3d:
         a0:d2:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:07:13 2026 by rpki-client