This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcGZIFQqPQyV-WP40aa3jrE1o_c.roa
File:                     LcGZIFQqPQyV-WP40aa3jrE1o_c.roa (raw, json)
Hash identifier:          QajFQB9wmmlTJBOMzElRWVwUWZWZ593EcfzvwPhHi0c=
Subject key identifier:   2D:C1:99:20:54:2A:3D:0C:95:F9:63:F8:D1:A6:B7:8E:B1:35:A3:F7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1037
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcGZIFQqPQyV-WP40aa3jrE1o_c.roa
Signing time:             Thu 01 Jan 2026 01:51:49 +0000
ROA not before:           Thu 01 Jan 2026 01:51:49 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4151 (0x1037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:51:49 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=2DC19920542A3D0C95F963F8D1A6B78EB135A3F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:d3:4b:b3:06:be:e1:a3:64:0c:1d:fd:42:
                    bf:6f:ec:0e:a6:63:a6:a2:7a:7e:c6:8d:c7:eb:68:
                    29:af:6b:e1:4f:cc:66:49:0e:f1:5e:43:9d:d4:7b:
                    ce:4d:7a:b2:9c:43:35:89:fc:65:c6:6e:2d:fe:ec:
                    03:97:02:1c:84:9e:66:eb:70:69:35:e6:dd:1b:5c:
                    53:82:45:e9:d5:ca:84:41:67:44:aa:14:c2:8d:4f:
                    c3:ee:a0:2a:a4:f4:b4:80:a3:f6:0e:c2:d9:92:63:
                    90:3f:30:a3:6e:8a:8c:62:06:bf:32:63:1d:ab:3a:
                    51:40:e6:26:72:93:5e:09:26:86:2f:f8:c8:cc:2a:
                    75:36:64:73:49:28:54:de:6f:73:70:62:9d:4f:0c:
                    e6:8a:fa:e8:54:40:ed:50:f2:2a:56:0c:cb:f3:12:
                    8c:da:78:ea:1e:fc:14:d5:af:5b:30:2a:ea:6f:69:
                    cd:24:2b:6d:52:fa:b9:7a:77:c7:49:4f:4e:f3:bf:
                    0c:4d:2c:21:80:79:a6:74:86:9e:69:90:0e:cf:0a:
                    b2:3d:23:d4:b7:ce:4d:cb:f5:34:40:8c:e9:b7:9e:
                    69:88:52:ec:c9:0b:f1:8f:a9:f5:21:c9:4f:ab:13:
                    13:63:f9:86:eb:3e:7d:5c:cb:dd:47:70:6e:32:c7:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C1:99:20:54:2A:3D:0C:95:F9:63:F8:D1:A6:B7:8E:B1:35:A3:F7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcGZIFQqPQyV-WP40aa3jrE1o_c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:c9:c9:7e:be:6e:4d:81:ae:29:71:5d:02:72:df:a1:d3:7f:
         4f:bc:19:b7:35:b7:7f:63:ea:ef:4e:14:a9:17:82:83:95:1e:
         97:2d:2a:d7:99:ce:84:ec:9b:ca:2d:b6:85:e8:e3:d1:54:d8:
         dc:1b:86:06:44:83:12:b1:44:6a:e8:fd:c7:3c:b1:d8:39:f1:
         a2:1c:ce:42:28:5c:ba:a8:8a:1a:3e:6c:d4:57:19:4d:59:0a:
         08:b8:73:60:99:c7:4e:9f:f4:b5:be:63:9b:c2:44:9b:57:9d:
         e1:2a:d9:93:aa:b1:14:2e:16:59:6a:0e:f0:d0:eb:b6:fd:c1:
         dd:87:a2:a3:b1:4c:de:a7:7a:94:51:d3:33:0e:b2:a0:6a:0a:
         67:d7:d0:b3:65:08:e3:cd:89:4c:7b:e8:9c:6d:40:e7:70:ea:
         5d:a9:5d:71:d6:f7:53:be:7d:69:19:c6:85:21:eb:1e:79:85:
         2b:15:2c:32:39:14:85:0e:2b:97:0a:23:8b:46:0e:ee:05:b6:
         3b:a9:d2:ea:8e:8d:ee:3d:39:b7:0e:d8:04:c1:a2:15:c8:ac:
         12:e5:be:1b:d1:b0:52:c9:b0:36:44:7d:c4:6d:12:56:0a:80:
         0a:cb:6e:aa:36:c4:ab:e5:60:7a:ac:2c:04:f4:96:13:d5:a7:
         a9:17:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:24 2026 by rpki-client