This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CXu5J3R7BgyoO5m9A3j1NsVwWh0.roa
File:                     CXu5J3R7BgyoO5m9A3j1NsVwWh0.roa (raw, json)
Hash identifier:          f15w7DXggBOHUzo8ZVBxWpKMnU77ArRY8cVza4g8C9s=
Subject key identifier:   09:7B:B9:27:74:7B:06:0C:A8:3B:99:BD:03:78:F5:36:C5:70:5A:1D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1018
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CXu5J3R7BgyoO5m9A3j1NsVwWh0.roa
Signing time:             Thu 01 Jan 2026 01:46:08 +0000
ROA not before:           Thu 01 Jan 2026 01:46:08 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4120 (0x1018)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:46:08 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=097BB927747B060CA83B99BD0378F536C5705A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:c8:52:29:7c:42:3c:1f:bb:fc:aa:ce:1e:
                    6e:e7:aa:73:ab:15:a9:90:45:79:5b:4a:20:66:9d:
                    a7:30:dc:39:0e:f1:7f:f4:0c:29:74:46:28:c3:7b:
                    1b:98:6e:ec:cb:49:d7:c5:26:c5:ff:ec:a3:8f:70:
                    39:0e:2c:82:35:5b:85:48:eb:73:66:4f:61:fd:a4:
                    d4:5e:ac:d5:35:4f:ee:b0:c7:82:53:97:1a:42:99:
                    3d:8c:8a:44:9c:ec:c2:2e:8e:e0:57:ac:e4:22:87:
                    9b:f6:5e:8c:d0:26:b1:9a:7e:a3:2b:5f:27:a8:14:
                    fb:74:50:51:23:85:7a:9d:e0:11:bf:a2:aa:51:23:
                    7a:96:d3:29:86:9b:e8:f4:42:ff:1b:ac:98:31:ba:
                    63:ae:65:d8:f1:ac:51:0b:1b:ab:2a:38:2f:3a:b0:
                    cc:e9:85:83:44:1c:1a:15:78:84:36:b5:66:03:fd:
                    bb:6a:55:bb:0d:d1:ed:8a:d0:7c:03:d4:4a:74:93:
                    dc:f0:67:20:ec:e8:e6:c4:0e:ac:09:94:93:14:57:
                    a5:06:76:d7:54:02:6f:a5:36:87:59:23:6d:74:2c:
                    91:30:50:78:c8:15:99:02:98:44:a7:b9:ad:06:63:
                    10:92:82:90:d7:57:12:32:f0:27:d7:c2:c1:68:04:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7B:B9:27:74:7B:06:0C:A8:3B:99:BD:03:78:F5:36:C5:70:5A:1D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CXu5J3R7BgyoO5m9A3j1NsVwWh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:31:3d:44:ab:67:e3:bb:7b:8e:a0:d8:72:2a:75:b4:68:99:
         67:4a:5d:37:9c:1b:2f:54:96:cd:25:49:ce:8b:c4:c7:75:ea:
         2e:4f:1d:b8:48:4e:00:21:57:4b:a2:3b:ea:10:57:51:c4:5d:
         43:32:d4:de:eb:a6:3d:38:7a:e6:93:f8:87:dc:66:e3:72:cb:
         39:7d:58:b1:c4:cc:97:4a:86:06:2a:5d:a6:1e:b0:b8:0d:86:
         34:e2:e9:ff:e7:81:e7:88:30:68:e2:0e:74:34:cb:6b:19:0b:
         5b:48:14:b9:36:88:fc:87:4d:ed:56:64:14:3e:e5:a5:68:50:
         68:ff:4b:74:54:b2:00:2e:da:42:fb:bb:fb:37:29:9f:a1:19:
         c9:8e:61:fc:b4:9a:27:cc:e6:65:f1:fd:fc:1f:8a:50:dd:6b:
         bf:98:0f:ff:c9:9a:16:3a:2b:3b:45:27:55:a1:85:9f:ea:6a:
         99:1c:19:a4:81:c0:01:66:c5:60:87:dd:e6:da:08:7d:07:74:
         d0:b5:79:30:1f:b4:e4:cc:b7:ff:15:21:02:52:4b:de:e7:51:
         0d:25:cb:62:d2:3d:ba:53:7d:9a:5b:e7:62:00:48:2f:a3:85:
         57:dd:aa:54:f6:ae:d3:a7:d7:3c:42:99:4e:d4:d1:1d:b3:42:
         d3:44:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:10 2026 by rpki-client