This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2mi_xpaN_vMoDrRmowkvB9y0Kpk.roa
File:                     2mi_xpaN_vMoDrRmowkvB9y0Kpk.roa (raw, json)
Hash identifier:          iL/vE5OjKs0eiHCsefI5hjBwU0OLdzFeiYx/9Mu1Ljk=
Subject key identifier:   DA:68:BF:C6:96:8D:FE:F3:28:0E:B4:66:A3:09:2F:07:DC:B4:2A:99
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1046
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2mi_xpaN_vMoDrRmowkvB9y0Kpk.roa
Signing time:             Thu 01 Jan 2026 01:56:12 +0000
ROA not before:           Thu 01 Jan 2026 01:56:12 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4166 (0x1046)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:56:12 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=DA68BFC6968DFEF3280EB466A3092F07DCB42A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:30:3b:2f:e5:09:5a:93:ff:26:00:d5:6a:
                    ac:0d:f8:1e:48:ad:21:73:79:63:96:37:8f:6f:56:
                    70:21:3d:2d:28:4e:49:99:b7:48:16:e3:2b:07:d0:
                    0a:cd:dd:88:d4:0b:d7:73:b7:3a:29:8c:6e:51:ef:
                    85:8b:77:f3:76:b2:fb:18:05:09:5d:03:ee:48:16:
                    44:7a:b3:8c:09:76:d4:f5:fe:6a:12:59:4b:a2:b9:
                    c8:e6:8c:bd:aa:dc:22:5f:e9:c9:bd:10:fe:a1:fc:
                    68:6a:1a:71:dd:90:9b:00:70:1e:8f:5a:d9:f1:6a:
                    55:49:20:04:07:bb:de:f4:6b:14:79:9b:49:d1:b0:
                    94:e5:4e:95:b6:da:b6:0c:c6:2c:8b:40:e3:97:b4:
                    38:fa:97:66:0b:a2:20:87:22:9f:3d:4e:2f:cc:38:
                    db:e3:7e:8a:63:9a:97:d8:fd:f1:eb:c5:a2:59:cb:
                    c8:fd:01:e0:c7:6b:66:54:a0:1a:b9:c0:c6:c5:3c:
                    02:65:1b:59:05:72:25:e9:10:7f:d1:0a:06:b6:20:
                    dd:82:67:26:bd:17:8a:6a:d2:54:d7:de:82:d3:ec:
                    bd:6f:fd:90:4b:e9:9a:46:f4:dc:bc:c6:35:b7:fe:
                    3e:dd:1d:4f:29:7e:3b:a1:4e:dc:c2:e4:fb:d8:4a:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:BF:C6:96:8D:FE:F3:28:0E:B4:66:A3:09:2F:07:DC:B4:2A:99
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2mi_xpaN_vMoDrRmowkvB9y0Kpk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:a9:ea:fc:2f:ec:0a:2c:9c:24:c9:b2:01:ab:84:6a:ca:51:
         eb:6b:52:41:a9:b1:2f:f4:b4:0b:90:2c:ad:5d:9b:18:3d:57:
         2a:d3:eb:1c:98:8b:74:d9:dc:b2:2d:07:ef:ed:91:5f:94:21:
         a1:1a:43:36:94:95:b5:be:2f:86:22:0a:c4:32:d3:fe:72:92:
         c2:c4:03:e1:c2:12:2b:4c:9d:dd:1a:e4:06:ba:11:41:c2:f7:
         03:94:cd:ee:c9:61:80:7b:5c:ab:19:51:1d:1a:18:81:1a:43:
         6e:74:de:6c:5e:f0:91:69:1f:3c:46:c7:42:aa:1b:79:08:67:
         e5:30:b7:8d:20:4e:19:bb:c7:b5:89:db:79:37:3b:9a:71:37:
         1d:61:a7:6e:e8:7f:8b:87:2b:32:62:0a:9f:8a:37:1a:3c:b0:
         85:61:29:90:77:c8:42:1d:ef:a8:be:74:31:a5:00:5e:7d:bc:
         c4:09:a5:5e:b8:d6:4f:83:0b:34:26:ea:5b:cc:05:f6:3a:15:
         9d:28:8e:e4:d0:ee:26:bd:f0:7b:8e:e3:00:a9:ba:8a:77:c7:
         c9:c8:2d:13:d8:f9:ae:b6:67:9d:d9:0d:1c:26:df:db:90:ab:
         26:f9:fb:ba:c9:11:c6:27:bc:94:3a:79:55:51:e8:ff:cd:2b:
         75:45:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:03:41 2026 by rpki-client