This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/fivYcu6nQZSp5Jrxv67VFsqIBwM.roa
File:                     fivYcu6nQZSp5Jrxv67VFsqIBwM.roa (raw, json)
Hash identifier:          Y364jLq8OdyO+CrGTW9fF+X0mZMA+UlBXaj8IU/Zt3Q=
Subject key identifier:   7E:2B:D8:72:EE:A7:41:94:A9:E4:9A:F1:BF:AE:D5:16:CA:88:07:03
Certificate issuer:       /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Certificate serial:       36
Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/fivYcu6nQZSp5Jrxv67VFsqIBwM.roa
Signing time:             Wed 07 Jan 2026 08:50:41 +0000
ROA not before:           Wed 07 Jan 2026 08:50:41 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9609
IP address blocks:        2403:c780:a991::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
        Validity
            Not Before: Jan  7 08:50:41 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7E2BD872EEA74194A9E49AF1BFAED516CA880703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:27:45:98:cf:18:13:eb:bc:30:8e:2f:b9:
                    9a:30:f8:be:fe:c4:0d:d4:77:3e:a3:11:a0:4f:c9:
                    56:c1:5e:c2:47:3e:fe:0e:35:75:21:da:5f:d8:e4:
                    f6:b7:03:7b:5c:79:6e:2f:7b:c6:a5:82:42:6b:76:
                    4b:0e:78:32:a2:77:3a:d8:a7:af:58:af:6c:01:63:
                    27:3e:cf:b2:39:58:d7:a2:ae:41:ee:cd:17:5f:2c:
                    d3:2e:e5:39:f8:44:52:fb:cc:23:54:bf:de:94:cb:
                    35:59:a1:c6:4e:67:88:26:06:68:67:1e:25:62:f9:
                    cb:bb:3e:b5:f2:7a:a4:51:56:3c:5b:bd:b1:f3:e3:
                    68:2c:6e:32:55:fd:6e:b0:79:9e:d1:8b:7f:23:c6:
                    f2:9c:a4:1c:0f:db:3d:ee:2a:7f:c5:56:d5:33:0f:
                    01:fa:d5:4c:40:2b:bf:83:11:25:9b:b8:9d:77:e6:
                    f1:d1:80:c7:e5:70:b4:e4:86:04:6a:60:58:ba:3b:
                    86:86:46:89:5d:2b:9d:d0:a0:b2:ad:42:94:6c:f1:
                    81:62:09:ab:d0:46:eb:c8:83:4c:57:9d:85:a4:60:
                    82:85:4b:2c:c3:43:60:4e:1d:98:38:78:9b:64:9f:
                    01:f6:4e:c1:80:60:a9:90:54:73:64:a6:61:b1:30:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2B:D8:72:EE:A7:41:94:A9:E4:9A:F1:BF:AE:D5:16:CA:88:07:03
            X509v3 Authority Key Identifier:
                keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/fivYcu6nQZSp5Jrxv67VFsqIBwM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c780:a991::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:e0:df:71:6c:08:f3:fa:da:6e:e8:01:98:a9:7e:b9:3c:1b:
         76:cb:2d:25:6a:72:48:ab:d7:41:57:a5:36:b0:f8:18:b1:c3:
         e9:e9:dc:0b:4e:5a:30:ed:ac:42:e8:c2:c8:b0:f8:03:ee:aa:
         cc:e9:23:af:da:0b:4b:67:64:e5:9a:f4:db:1d:e7:5a:37:95:
         96:39:0e:c7:0a:60:41:f4:5a:90:6d:22:57:ee:73:a0:a9:4d:
         d8:71:42:0a:fc:7f:ba:1d:52:4b:a3:79:52:e3:7e:10:2b:cd:
         c2:39:c6:45:a6:75:ea:7b:e8:7c:bf:50:33:0d:05:4c:a7:98:
         98:07:ee:02:6d:15:bd:cd:cf:a4:2b:39:2e:52:25:6d:e4:4c:
         1b:dd:79:d6:d1:cc:1e:dd:92:dd:55:25:f1:63:e7:2d:b7:9c:
         73:c3:7f:dd:ed:67:ee:4a:a4:ac:4a:c1:a6:c8:bd:9b:79:30:
         40:f5:9f:b4:c6:f7:4f:a6:49:3b:03:f1:6d:4f:27:d8:9f:54:
         54:e4:6e:57:c7:0b:cf:4d:be:2b:af:f2:b3:ae:24:74:e3:2c:
         99:52:05:88:87:d7:02:ed:85:7c:44:1e:bd:4a:23:9b:9c:54:
         38:cb:31:0f:d1:c5:41:eb:54:9e:19:f7:24:87:e9:ac:7a:9f:
         29:1b:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:36 2026 by rpki-client