This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZKul2kFy6wPOm8QyI-kUSmCCWI.roa
File:                     9ZKul2kFy6wPOm8QyI-kUSmCCWI.roa (raw, json)
Hash identifier:          /Zqj0qIvWrlwnxEAPaMsSXghNJu9yb2Jsj2Wj483gD0=
Subject key identifier:   F5:92:AE:97:69:05:CB:AC:0F:3A:6F:10:C8:8F:A4:51:29:82:09:62
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1040
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZKul2kFy6wPOm8QyI-kUSmCCWI.roa
Signing time:             Thu 01 Jan 2026 01:51:54 +0000
ROA not before:           Thu 01 Jan 2026 01:51:54 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4160 (0x1040)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:51:54 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F592AE976905CBAC0F3A6F10C88FA45129820962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:38:3b:c4:59:78:0e:cd:e4:cb:d8:ec:7f:
                    68:ba:fd:62:8d:9e:75:e8:07:f5:42:92:5a:44:ba:
                    19:b8:34:a6:2d:f6:ab:a2:c0:8e:c8:c9:ef:b6:ac:
                    c6:76:8d:cb:e2:8a:d0:05:71:9e:e6:f4:bc:fc:d6:
                    02:0a:da:30:0b:1e:f4:b2:57:c7:42:eb:a9:1c:2b:
                    4f:f1:7e:f2:d6:18:89:51:b4:93:2e:b8:b3:37:37:
                    58:15:ea:e0:06:23:ff:eb:9f:05:8b:f2:36:0d:12:
                    52:2e:9e:33:7e:06:c0:5f:ea:a7:06:bd:b7:76:e1:
                    3d:39:3f:e1:15:e8:86:e0:75:06:5d:03:e6:11:86:
                    11:7e:22:e6:49:23:db:24:56:f8:78:3b:53:a8:b1:
                    d0:51:ba:e8:89:ba:61:68:14:dd:b1:b4:34:b2:13:
                    a3:b7:73:92:0b:be:49:e7:d1:14:50:a8:ec:6a:8c:
                    28:a0:eb:05:8d:f0:37:60:8e:cf:ae:65:fd:c9:16:
                    17:35:11:46:0b:c9:aa:3c:f6:ce:1b:cc:3c:1c:39:
                    9c:15:ce:a4:29:69:1c:f7:fd:01:45:f3:eb:8e:5a:
                    f6:e2:99:e2:6f:6a:02:7c:b0:8b:e2:b3:10:45:7a:
                    3b:de:26:da:f0:8f:11:f3:8e:f7:87:41:b4:de:cd:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:92:AE:97:69:05:CB:AC:0F:3A:6F:10:C8:8F:A4:51:29:82:09:62
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZKul2kFy6wPOm8QyI-kUSmCCWI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:e1:1c:13:5a:a3:ed:be:36:9b:e6:91:9b:43:d2:59:07:1d:
         53:6c:b0:3c:6d:67:6a:70:18:f2:f3:89:7b:2a:6f:ff:ef:0f:
         15:27:27:40:02:95:a6:a4:79:29:7d:5a:2a:97:d9:4d:15:7b:
         18:83:60:46:1a:94:2c:f0:6a:89:0f:ad:34:02:9e:7d:81:10:
         d7:50:10:3b:c3:e2:0d:39:b6:d1:00:9d:c8:12:8b:1e:01:90:
         78:66:52:91:e8:e8:e9:65:9b:79:95:31:41:37:0a:44:7c:b4:
         e7:f6:a5:ea:3f:de:2b:6d:da:34:a9:b6:91:de:e0:69:ed:83:
         82:14:57:d3:7b:1b:35:da:30:24:da:32:aa:03:ff:1c:77:bc:
         01:56:37:ac:8f:fe:f0:b6:d2:fa:23:d1:3a:de:d0:d6:07:5d:
         aa:11:a1:24:15:de:6b:7e:19:7d:0b:95:fe:7f:41:e1:e0:f6:
         71:bd:cd:43:cf:86:22:19:47:92:3d:ed:4c:c8:8e:d9:aa:cf:
         d5:9a:76:e9:65:96:84:bb:a3:44:fb:a9:20:22:49:6e:36:f3:
         ed:95:69:dc:ee:2c:01:ec:ba:95:ff:41:f4:2f:2f:f5:81:8c:
         ff:7f:b2:3e:66:e3:74:9a:9e:c6:73:ff:21:11:28:da:f6:8c:
         f9:9b:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:06 2026 by rpki-client