This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5av-dQRtDzKKtxhJbH2lmNYFgdM.roa
File:                     5av-dQRtDzKKtxhJbH2lmNYFgdM.roa (raw, json)
Hash identifier:          9Njs7d4fivhV/pGKqm4rPwDTeQSFUZMIxiUPV9hPGVA=
Subject key identifier:   E5:AB:FE:75:04:6D:0F:32:8A:B7:18:49:6C:7D:A5:98:D6:05:81:D3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       100C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5av-dQRtDzKKtxhJbH2lmNYFgdM.roa
Signing time:             Thu 01 Jan 2026 01:41:43 +0000
ROA not before:           Thu 01 Jan 2026 01:41:43 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4108 (0x100c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:43 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=E5ABFE75046D0F328AB718496C7DA598D60581D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:45:4f:d7:94:2d:07:10:97:3e:14:ad:16:69:
                    ac:14:c5:f8:ce:7b:05:97:2f:6f:a9:dc:56:6f:d0:
                    2c:1e:ba:50:f0:ca:c2:38:3f:58:08:74:be:6d:1a:
                    56:d5:a5:87:d1:b3:a6:3b:11:72:49:46:80:79:39:
                    b9:07:fb:08:55:0d:24:43:fe:c5:ae:f4:f6:e2:cc:
                    73:50:f6:32:a2:5f:89:26:0b:8b:80:03:ff:c9:4e:
                    4a:06:ec:6d:43:17:6b:c0:15:36:9b:d8:24:2c:9d:
                    99:05:a8:f5:f3:47:11:45:be:74:fc:78:71:4d:d1:
                    04:d1:91:1b:17:15:e1:06:a1:c9:a2:2c:78:0b:35:
                    f5:14:24:ba:a4:8e:9e:be:8c:7f:a7:93:9e:79:20:
                    5c:db:78:92:17:d3:a0:32:8c:34:cc:ea:54:5b:c8:
                    d6:cd:de:aa:27:7f:bd:e9:cc:5a:d9:fe:9d:fb:89:
                    c9:ff:45:cc:4a:e4:97:5a:7e:a3:62:42:e2:04:cf:
                    ed:d4:24:9f:06:46:05:ff:6e:5e:d6:32:da:f3:08:
                    b8:c9:ad:58:1f:66:83:30:76:cd:b7:e4:aa:7a:f0:
                    97:f1:9a:11:b5:db:ea:a2:d7:72:7a:6d:f6:8c:67:
                    59:0f:c5:ca:42:5c:16:37:f4:a7:d7:02:f6:1d:cb:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AB:FE:75:04:6D:0F:32:8A:B7:18:49:6C:7D:A5:98:D6:05:81:D3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5av-dQRtDzKKtxhJbH2lmNYFgdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:ef:92:19:d8:57:44:e3:b4:d0:ec:cc:3d:29:21:81:b6:
         af:0a:7e:bb:8f:44:25:70:de:da:04:bc:0a:0c:1c:d9:95:0c:
         ad:95:13:1a:4c:1c:1d:7b:e2:3f:49:7a:f6:0a:f9:41:f3:a4:
         4f:02:5b:8c:31:16:5f:de:ed:e9:02:a0:3b:4a:7b:81:23:1b:
         29:c1:45:60:5f:d4:ff:3c:11:40:de:aa:14:23:39:9e:5f:70:
         66:29:b4:d2:f2:11:04:7b:12:7a:88:d3:9f:3a:db:27:80:da:
         13:4e:b5:7c:6b:98:26:4a:f9:35:95:ee:bf:e2:d0:9f:a5:27:
         c9:69:5f:89:9b:4f:4b:03:14:5a:26:f4:2d:ea:70:92:11:9f:
         94:0c:4f:6e:cc:4d:2c:71:d9:91:58:b8:19:e3:d9:2f:8f:36:
         6b:fc:ea:3c:9a:c6:bf:97:21:fc:29:14:69:7d:76:9b:96:64:
         c2:12:39:e4:01:88:9a:fa:a7:8a:30:3f:45:3b:37:ed:fd:4f:
         88:af:d4:74:2d:0b:3b:97:aa:2c:9c:5f:2a:3b:a5:ea:4d:9f:
         a4:5a:94:df:39:ec:36:a6:b2:b7:5a:ad:1d:aa:63:b3:41:07:
         aa:9c:b4:21:3f:00:9f:e5:fb:98:a8:8b:3d:90:e2:63:d5:c4:
         15:3a:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:37:23 2026 by rpki-client