This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GFxZIj86QtwwcEsmUwSJ-E55dbY.roa
File:                     GFxZIj86QtwwcEsmUwSJ-E55dbY.roa (raw, json)
Hash identifier:          ST3UvzxYWI0cw7mnkdnNPFk+5uyOGywrDZSVhgfFMwI=
Subject key identifier:   18:5C:59:22:3F:3A:42:DC:30:70:4B:26:53:04:89:F8:4E:79:75:B6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1002
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GFxZIj86QtwwcEsmUwSJ-E55dbY.roa
Signing time:             Thu 01 Jan 2026 01:41:37 +0000
ROA not before:           Thu 01 Jan 2026 01:41:37 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4098 (0x1002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:37 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=185C59223F3A42DC30704B26530489F84E7975B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:31:c0:50:aa:b9:25:2a:1f:73:53:1d:ba:
                    f2:58:24:e3:e1:de:ca:7d:6d:bb:b3:f8:83:ac:19:
                    0b:30:d6:a4:e8:8c:c8:4b:b4:5d:5b:f4:0a:61:49:
                    00:64:cc:e6:6f:a8:ce:bf:3d:3b:32:10:b1:5c:8a:
                    91:84:2f:a5:cf:ba:cc:cc:b4:ed:d8:ba:38:48:af:
                    49:95:9c:64:d9:25:39:b8:a4:c2:da:bd:31:ad:bc:
                    01:c3:30:13:4a:fa:b8:1e:f1:88:58:20:26:81:87:
                    c6:dd:93:2b:f4:27:42:fc:0c:51:ee:45:25:d0:2c:
                    68:ce:f0:c4:5a:2f:56:72:b0:85:90:59:ac:08:96:
                    69:f2:d9:9a:0b:c3:4b:82:f8:a3:05:f9:38:a6:f1:
                    27:53:c1:ae:fa:28:f2:42:15:05:f7:93:d5:c8:d2:
                    e9:1c:11:21:32:99:7f:58:ae:d7:11:b4:5a:61:27:
                    41:4d:8a:2d:56:3f:39:60:03:bc:39:22:52:41:f1:
                    dc:db:54:65:92:7e:63:a1:74:1a:dc:1a:d7:37:86:
                    3a:0c:97:dc:c3:3f:e6:1b:3b:e5:da:82:46:3f:52:
                    c7:2e:9e:09:d3:48:36:61:06:ca:ca:b7:b0:9f:86:
                    d3:de:9b:c7:3b:a2:25:09:70:cc:11:7e:d5:d5:60:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5C:59:22:3F:3A:42:DC:30:70:4B:26:53:04:89:F8:4E:79:75:B6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GFxZIj86QtwwcEsmUwSJ-E55dbY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:af:8d:c0:52:b9:85:dc:16:e4:66:1e:92:69:f3:ac:8f:
         0c:f0:a6:5f:08:21:cb:1f:a9:f8:96:d0:47:7b:8e:f2:17:a6:
         f1:2d:53:cf:0a:4a:b3:6e:11:17:bd:22:dd:8c:e9:90:a7:cd:
         17:5b:10:ec:ca:89:aa:5e:93:3f:65:6e:a3:7a:b5:d2:b8:45:
         8d:cf:5c:20:82:2e:5a:85:1a:9b:38:cf:48:7f:67:01:3b:42:
         91:fe:a6:66:9f:56:57:96:35:72:9c:7b:4d:98:f2:03:d5:d2:
         d7:a5:ff:f7:b9:ea:86:8a:2f:df:c0:40:97:b5:6a:6c:38:7d:
         2c:cc:04:1f:15:00:f8:f0:73:eb:00:a1:40:f8:41:ff:63:b0:
         d9:51:95:61:a8:fe:fe:76:1b:47:8d:a1:2b:2b:14:89:0b:5d:
         5a:be:b1:be:30:7f:0b:55:c5:69:af:91:db:82:ed:03:bd:18:
         d4:96:d5:4e:55:06:53:24:88:45:37:87:e1:da:41:5c:1b:86:
         e1:fd:c2:27:5e:45:02:83:d8:55:f8:68:46:27:1b:42:8f:e4:
         53:5c:7c:3c:ee:d4:fc:98:d8:75:a6:e5:e7:2f:7e:bf:d5:b2:
         49:fb:a7:db:92:7a:7b:5d:ee:93:7f:32:e5:1a:31:44:8c:78:
         a9:9a:41:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:14 2026 by rpki-client