This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AmWC8p4LS_j-5h6FuRp-0Z2XiC8.roa
File:                     AmWC8p4LS_j-5h6FuRp-0Z2XiC8.roa (raw, json)
Hash identifier:          9IjasXDd2Bh1buJhJW5L30oFYYX585FFXwal+Fv0trc=
Subject key identifier:   02:65:82:F2:9E:0B:4B:F8:FE:E6:1E:85:B9:1A:7E:D1:9D:97:88:2F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1000
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AmWC8p4LS_j-5h6FuRp-0Z2XiC8.roa
Signing time:             Thu 01 Jan 2026 01:41:35 +0000
ROA not before:           Thu 01 Jan 2026 01:41:35 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4096 (0x1000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:35 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=026582F29E0B4BF8FEE61E85B91A7ED19D97882F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:61:12:fc:66:f9:d5:a8:74:64:68:06:f5:
                    90:d3:1c:dc:06:4a:88:71:c4:81:91:f3:8e:c6:74:
                    b9:1e:14:1c:1f:2b:8f:f8:b9:7a:81:eb:0f:31:57:
                    34:7e:53:cc:3c:55:c4:8a:ec:fa:c7:ba:43:d2:f8:
                    37:f2:e8:17:e9:17:9d:8e:a7:55:9d:47:38:f0:3a:
                    34:a9:fb:8c:af:15:b9:3d:2d:fb:83:2b:00:31:a6:
                    13:aa:55:f5:b6:85:fa:d2:70:71:69:0a:37:34:0c:
                    2d:53:3e:7d:25:b6:4e:6a:ba:b3:3c:ce:13:86:e2:
                    6c:2f:c3:e6:48:39:0c:fa:27:81:78:b6:15:93:5a:
                    45:90:9c:da:25:7c:1e:db:50:c1:91:3e:a1:01:42:
                    21:f1:d7:e5:90:f8:aa:9e:41:35:c4:fc:23:e4:1d:
                    f9:52:75:67:5c:70:38:8f:03:47:e3:35:1a:ab:80:
                    b9:4c:bc:07:3c:3d:6a:0d:e5:30:29:13:d7:1a:79:
                    0b:b3:24:60:09:01:cc:02:16:d1:da:b8:ab:3d:38:
                    69:bf:a9:ad:b9:da:4a:3c:4f:95:5f:a0:23:33:65:
                    70:19:e7:31:9d:8f:50:fb:ee:e7:e0:cf:09:cc:dc:
                    64:fa:2f:ce:e2:6e:df:7c:2f:ff:f9:f5:ac:ce:5a:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:65:82:F2:9E:0B:4B:F8:FE:E6:1E:85:B9:1A:7E:D1:9D:97:88:2F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AmWC8p4LS_j-5h6FuRp-0Z2XiC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:00:17:87:50:a0:34:a0:99:31:a2:e3:91:34:f9:28:e1:c3:
         38:9b:fb:65:d4:4f:34:7b:7d:80:10:6b:dd:71:c3:85:80:d2:
         98:7f:29:a5:e5:6f:8f:68:02:6d:00:fc:b5:8e:4f:fd:1d:9d:
         14:d5:60:93:b3:3c:e6:4f:ea:1f:5a:3c:ab:95:b3:d0:17:3d:
         ae:1e:fc:ea:dd:ba:8c:b6:1a:fc:28:ec:e3:d5:03:df:f2:0e:
         c6:55:4a:89:81:53:6b:e7:68:5e:16:56:b3:76:9c:16:69:c6:
         f1:98:8a:3d:20:c1:65:63:63:ec:8d:d2:3d:07:b7:f5:39:b2:
         70:cb:20:ff:a5:84:71:c6:49:b0:ec:08:e9:7f:e5:71:9b:90:
         e6:fd:08:06:11:08:c7:69:ea:cd:c4:e3:17:73:30:4e:cb:72:
         aa:5d:ca:b5:47:2d:ca:10:73:c0:f9:48:c4:1c:d7:9a:26:f7:
         71:a4:ea:b8:a6:50:8c:20:a2:ec:29:e9:a3:d7:43:ce:83:1c:
         bc:12:3d:82:7d:35:8f:f3:35:3e:6b:55:79:4c:75:76:b5:fe:
         84:28:9c:b1:95:ec:0e:cb:13:b6:88:80:52:8e:ba:80:89:c0:
         0d:ad:38:7c:81:2a:7c:d2:80:92:ab:4f:50:cc:be:b9:97:d3:
         91:35:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:01:32 2026 by rpki-client