This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30328/JcH3iEwA0JBLt5odgvM5KLzvcN4.roa
File:                     JcH3iEwA0JBLt5odgvM5KLzvcN4.roa (raw, json)
Hash identifier:          HI/Zqi0TNN59I+SPEPbFU1cvuV3sqFH6/0qOE/a2FT4=
Subject key identifier:   25:C1:F7:88:4C:00:D0:90:4B:B7:9A:1D:82:F3:39:28:BC:EF:70:DE
Certificate issuer:       /CN=EC8FAEFF6265C5305CE92E2683671B3066E1004B
Certificate serial:       13
Authority key identifier: EC:8F:AE:FF:62:65:C5:30:5C:E9:2E:26:83:67:1B:30:66:E1:00:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7I-u_2JlxTBc6S4mg2cbMGbhAEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/JcH3iEwA0JBLt5odgvM5KLzvcN4.roa
Signing time:             Wed 14 Jan 2026 07:19:35 +0000
ROA not before:           Wed 14 Jan 2026 07:19:35 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     17529
IP address blocks:        2001:3b0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/7I-u_2JlxTBc6S4mg2cbMGbhAEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/7I-u_2JlxTBc6S4mg2cbMGbhAEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7I-u_2JlxTBc6S4mg2cbMGbhAEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC8FAEFF6265C5305CE92E2683671B3066E1004B
        Validity
            Not Before: Jan 14 07:19:35 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=25C1F7884C00D0904BB79A1D82F33928BCEF70DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:57:48:a2:d8:01:28:39:a6:5e:f0:18:94:
                    66:89:a1:2a:dd:62:35:e1:e8:32:d7:20:65:86:c2:
                    d7:2b:d5:d9:0c:d5:00:0c:c4:09:d4:76:5b:d7:1e:
                    e2:c5:8a:18:6c:e2:76:f3:31:f5:7f:53:da:95:bd:
                    95:a3:e5:bf:ab:bf:06:a3:b3:25:58:10:03:c3:12:
                    87:2e:6d:10:09:9f:29:56:b1:4b:4c:d7:84:00:fd:
                    5b:51:99:e8:b6:ec:8c:90:84:50:d6:a1:a7:33:bd:
                    67:11:64:73:b9:62:ee:82:85:29:e5:ce:3c:eb:7e:
                    24:be:35:75:f0:d0:d8:1a:07:98:21:c9:a6:60:f5:
                    a3:02:6d:17:64:f5:0e:b8:39:49:cc:2c:fb:f4:8d:
                    af:70:e4:a3:69:84:53:8c:94:e5:ea:33:09:c0:95:
                    0b:21:75:1c:5c:07:d5:9c:43:33:72:f6:93:34:f6:
                    ae:ed:35:d8:96:2e:5b:b7:64:3b:68:64:4d:13:be:
                    be:d9:32:ac:93:c9:65:41:67:38:cd:e4:51:fb:c2:
                    da:57:ba:20:70:8f:b3:5c:ac:e7:2a:bb:73:6b:d1:
                    a9:4b:67:c8:d4:4f:90:38:8e:4f:c7:e3:64:6b:68:
                    36:10:18:e5:76:0e:53:dd:fc:30:33:d9:24:f8:68:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C1:F7:88:4C:00:D0:90:4B:B7:9A:1D:82:F3:39:28:BC:EF:70:DE
            X509v3 Authority Key Identifier:
                keyid:EC:8F:AE:FF:62:65:C5:30:5C:E9:2E:26:83:67:1B:30:66:E1:00:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/7I-u_2JlxTBc6S4mg2cbMGbhAEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7I-u_2JlxTBc6S4mg2cbMGbhAEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/JcH3iEwA0JBLt5odgvM5KLzvcN4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:9b:12:c7:af:7c:a8:f4:b2:cc:3a:d5:f5:97:65:97:62:
         02:37:d6:44:b7:8d:49:3d:77:53:f8:f2:02:dc:32:93:3d:96:
         95:41:93:99:0a:e5:5a:ea:1a:01:36:04:a9:33:9f:cd:f1:bb:
         26:80:c1:e6:f7:ef:e0:be:3b:44:95:b9:6a:7d:9e:42:31:d0:
         d3:37:01:75:01:86:54:09:18:1f:3f:13:5e:c2:88:61:17:64:
         4d:46:8b:64:42:7d:2e:5a:f3:e7:07:eb:90:4c:1e:c1:cd:aa:
         d1:0f:92:52:8c:2c:83:21:84:2d:f2:29:14:7b:94:cb:b3:68:
         41:dc:ee:99:04:68:dc:ed:ba:d2:49:c8:99:d6:3e:b3:b7:b7:
         a5:57:d6:ea:cd:fe:ba:94:21:20:fd:85:8a:18:61:68:00:7e:
         bf:2d:79:74:0d:a4:f0:c4:f1:8f:96:39:fb:f7:d9:ee:cd:a8:
         23:7c:f4:53:64:9a:a4:16:b0:5c:df:c6:d8:0c:e1:e8:81:82:
         72:d2:29:48:69:2c:0a:05:d2:52:49:fb:25:cc:48:7a:9a:18:
         26:e6:8a:2a:bb:51:be:89:9d:7c:f7:f1:7a:6b:6e:13:40:21:
         e6:78:38:dc:88:ee:41:2a:7a:2a:d5:14:ab:c9:73:26:ed:8c:
         ea:97:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:00 2026 by rpki-client