This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/p8CO1kYeDFTaEp5O-gXWTp7yquA.roa
File:                     p8CO1kYeDFTaEp5O-gXWTp7yquA.roa (raw, json)
Hash identifier:          3GMw361dMgp4MPKSQLqPiYU1XISrSGM+plrj/bCGt2E=
Subject key identifier:   A7:C0:8E:D6:46:1E:0C:54:DA:12:9E:4E:FA:05:D6:4E:9E:F2:AA:E0
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       6F
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/p8CO1kYeDFTaEp5O-gXWTp7yquA.roa
Signing time:             Thu 01 Jan 2026 01:30:33 +0000
ROA not before:           Thu 01 Jan 2026 01:30:33 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9607
IP address blocks:        2001:370::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Jan  1 01:30:33 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=A7C08ED6461E0C54DA129E4EFA05D64E9EF2AAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:4b:c3:2c:8e:db:4e:78:f3:b2:11:d9:28:
                    3d:0f:61:78:04:b2:01:c2:ce:66:7c:79:ea:7a:ba:
                    a2:e9:8a:88:44:ef:cb:47:86:df:5b:a6:a1:b6:09:
                    9a:4f:50:31:8f:e1:60:34:9b:d6:2a:a0:3e:4c:7b:
                    61:9b:22:1d:fa:fc:0e:f4:a8:a8:91:22:00:88:38:
                    1e:a0:f8:6a:b1:d0:43:6e:19:82:7f:86:90:91:9b:
                    25:37:dd:2d:fe:c0:20:28:23:37:d4:24:46:92:2f:
                    cf:c2:cc:71:e0:89:37:ec:ea:70:1b:09:fe:87:57:
                    f2:2c:35:4b:46:0e:f0:82:a5:47:61:40:0f:91:66:
                    0f:34:c6:72:1a:4e:ff:ec:73:d2:76:9d:99:2c:b7:
                    67:ed:e3:9a:71:45:23:dc:9c:d8:6c:5a:fd:40:86:
                    99:1f:9e:90:80:1d:e3:9e:bc:9c:9e:93:15:fc:5f:
                    19:06:e9:fe:7b:0b:dd:43:b8:3c:7a:22:bf:e4:6f:
                    14:ce:cd:ad:41:b7:41:85:0c:f2:a2:cf:5b:66:fb:
                    7c:53:a1:59:7c:66:03:e9:dd:54:c5:c9:37:7a:2d:
                    53:6b:1d:cd:a3:3e:32:c2:3f:ad:36:57:81:08:3c:
                    b9:55:da:ba:42:70:f8:2f:53:05:65:d0:0e:28:f1:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C0:8E:D6:46:1E:0C:54:DA:12:9E:4E:FA:05:D6:4E:9E:F2:AA:E0
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/p8CO1kYeDFTaEp5O-gXWTp7yquA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:370::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:fe:fc:dc:5a:87:99:26:2c:a3:41:3f:26:81:95:48:8c:ef:
         05:31:2c:30:bc:00:65:e4:bf:65:ed:c7:ff:e4:d3:7d:7b:26:
         96:59:3b:f8:d3:a4:f9:9b:1b:cb:c4:8c:ab:46:8b:ab:9e:1c:
         fd:4a:40:a5:7b:0d:21:d7:d8:da:52:8f:0e:b0:98:20:de:ed:
         4b:98:79:ca:bf:fc:7f:20:1b:21:70:76:b6:03:e1:da:88:50:
         99:42:ce:29:23:2f:11:e6:de:76:45:b5:ea:ab:d0:7e:d8:09:
         cd:f2:e9:3e:ce:0e:5a:82:f1:7b:d0:c7:c8:9a:33:66:3a:88:
         ce:70:15:a2:2f:c5:c7:98:ce:5c:2f:b8:40:32:d4:41:2f:68:
         3e:24:f5:0f:cc:df:1e:1a:08:d1:d1:8d:52:56:bc:3d:fe:87:
         09:a6:1c:2f:91:09:46:43:98:da:88:f8:00:bd:3a:cb:ef:6d:
         70:e7:9d:ec:bb:e5:4a:02:e3:de:14:0b:4b:b1:3d:b2:96:d0:
         d5:37:de:94:c5:bd:c7:3e:a2:99:b1:47:c1:9b:56:74:48:3e:
         8a:89:ac:d1:e5:8e:f9:a4:aa:e2:06:de:7b:fd:c5:04:a6:14:
         c8:d0:2f:12:c3:78:f2:9c:ef:46:e2:7f:94:b5:bc:2b:c3:0e:
         48:21:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:37:24 2026 by rpki-client