This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7hLk5F7wxZPt8d3s-OBpmJCwTD0.roa
File:                     7hLk5F7wxZPt8d3s-OBpmJCwTD0.roa (raw, json)
Hash identifier:          79xuVPdXHsLuIqQmpPV5yGJ/MpW7H5gicR8Ej/qy1vc=
Subject key identifier:   EE:12:E4:E4:5E:F0:C5:93:ED:F1:DD:EC:F8:E0:69:98:90:B0:4C:3D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1012
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7hLk5F7wxZPt8d3s-OBpmJCwTD0.roa
Signing time:             Thu 01 Jan 2026 01:41:46 +0000
ROA not before:           Thu 01 Jan 2026 01:41:46 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4114 (0x1012)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:46 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=EE12E4E45EF0C593EDF1DDECF8E0699890B04C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:6a:b3:90:f6:af:6e:16:d6:16:6a:d8:f4:
                    07:a2:8e:cc:80:6a:76:33:95:02:04:b5:1d:6f:ee:
                    f2:5a:d3:34:91:04:88:7e:ad:d9:50:47:43:a8:ef:
                    b5:5c:44:bc:88:62:e1:1d:de:e6:16:d3:2a:91:23:
                    2a:62:d3:7e:e0:97:2f:ea:0f:cf:86:ba:8f:b2:44:
                    dc:8c:a5:2b:af:23:a5:de:cd:0a:d1:ef:29:15:27:
                    ce:52:69:95:27:5e:ee:a1:5e:d7:7e:96:5f:23:39:
                    83:19:6c:cf:0b:4a:17:3a:b1:01:f9:39:d1:83:01:
                    64:b3:7e:ce:09:6d:16:6c:aa:b9:b1:38:c1:ad:fa:
                    71:60:80:59:ea:c8:95:0c:93:d4:9c:ef:50:e2:b6:
                    a2:3b:b8:2a:9b:a5:25:45:36:e3:c3:dc:69:fa:75:
                    44:fd:75:6e:99:19:5e:23:e0:74:90:23:0c:64:5e:
                    fc:7f:14:17:eb:ba:4c:97:5c:89:74:53:63:52:b5:
                    9e:a6:37:d5:ad:78:3d:55:81:fe:f8:c1:86:70:f4:
                    73:07:97:97:e8:ca:7e:2a:60:c7:5a:ce:1e:db:0b:
                    dd:c7:9d:51:fd:27:15:82:e6:cc:04:da:22:9d:5d:
                    96:47:15:df:07:be:40:f3:42:da:e4:31:d0:d4:46:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:E4:E4:5E:F0:C5:93:ED:F1:DD:EC:F8:E0:69:98:90:B0:4C:3D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7hLk5F7wxZPt8d3s-OBpmJCwTD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:07:6e:41:20:50:28:2a:11:1c:c2:96:f0:fe:56:13:75:97:
         58:33:82:8a:6a:d6:1c:0c:3a:03:33:81:f4:a4:ad:6f:d9:94:
         e1:b0:28:52:bb:d3:c1:14:7b:4c:ae:09:49:23:60:1b:7b:99:
         14:e9:b0:17:cc:d3:2c:40:e6:00:bc:f5:fe:b3:c1:66:1c:d4:
         48:78:7d:54:83:ec:20:ad:88:06:9b:9f:51:60:0f:c2:80:4a:
         c9:9b:3e:6c:45:37:54:62:88:01:db:c3:07:3c:47:55:94:ea:
         84:0b:be:1e:e2:8e:ca:cb:70:fa:cd:a9:17:9c:1b:83:43:f4:
         4d:b6:ca:ae:71:ba:d7:a9:49:b2:0c:2c:12:7f:ca:14:cd:eb:
         d5:dc:b7:67:e1:75:13:7c:d9:6e:3e:1b:6f:c0:5f:e1:c7:21:
         92:8c:84:0f:04:64:87:7a:84:74:31:a9:b6:5a:98:49:6a:64:
         df:a1:8f:90:e2:07:c5:0f:be:16:fb:00:72:42:b7:13:1c:97:
         28:8a:04:18:4f:5f:6a:cc:d1:ab:be:8c:ba:23:c1:ba:4e:ce:
         72:a4:50:80:c3:78:12:b5:e9:1e:85:7f:63:9b:c4:1a:8f:27:
         73:9f:aa:be:b7:b7:be:cd:28:04:15:7f:e8:13:74:1f:fa:08:
         ab:3b:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:01:28 2026 by rpki-client