This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMgEsszycZtJrhEp2pS50QfWHeM.roa
File:                     MMgEsszycZtJrhEp2pS50QfWHeM.roa (raw, json)
Hash identifier:          JqawG+mnjnjN1JcH53W9YBGjvoaDKeebYpm3LQMJgyY=
Subject key identifier:   30:C8:04:B2:CC:F2:71:9B:49:AE:11:29:DA:94:B9:D1:07:D6:1D:E3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       103A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMgEsszycZtJrhEp2pS50QfWHeM.roa
Signing time:             Thu 01 Jan 2026 01:51:50 +0000
ROA not before:           Thu 01 Jan 2026 01:51:50 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4154 (0x103a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:51:50 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=30C804B2CCF2719B49AE1129DA94B9D107D61DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:4d:53:8f:29:dd:36:ae:43:1a:c9:08:d7:
                    3c:12:55:e2:d5:00:5a:c6:c6:12:79:1f:1f:cb:e7:
                    b3:2a:f1:48:e2:80:30:3e:df:48:4f:e3:40:3d:be:
                    ce:0b:8d:0b:fc:f4:ed:f3:c4:cb:a6:30:cd:42:5f:
                    aa:8b:19:00:9b:32:8c:eb:d3:d9:d7:01:28:cd:df:
                    f5:6f:5f:c7:a9:e2:68:30:10:2e:0c:cb:24:16:df:
                    5b:d5:dd:4a:05:86:ab:dd:d9:90:8d:63:20:5e:d4:
                    35:f4:03:c7:89:fc:22:33:ef:2c:99:96:e4:c1:8c:
                    ed:01:fa:48:56:01:f3:f8:ef:b8:04:c0:c0:63:6a:
                    a5:8f:ca:7c:5f:63:8b:3a:37:76:56:55:77:6a:3b:
                    f4:68:22:eb:77:63:bb:ce:09:0d:5c:32:ca:a3:d7:
                    de:88:96:6e:a6:e4:cf:6d:c3:1d:c2:60:25:4c:0c:
                    00:f7:0f:cd:b2:1a:2a:f4:b7:93:69:93:a2:3c:44:
                    c2:82:7c:ca:ec:d5:20:88:ba:54:73:95:68:35:88:
                    93:15:ec:0e:90:f8:34:4c:9c:bd:ba:dc:60:3b:41:
                    8e:13:be:38:91:7e:38:d7:0d:4f:72:70:8c:b3:d2:
                    d7:f2:dd:2c:37:d9:33:5d:cd:ff:fd:9a:c6:ca:e9:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:04:B2:CC:F2:71:9B:49:AE:11:29:DA:94:B9:D1:07:D6:1D:E3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMgEsszycZtJrhEp2pS50QfWHeM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6e:a1:74:47:ac:06:75:ad:78:24:51:5c:ad:6a:00:d8:0c:
         50:8a:76:6c:67:7d:8c:80:d5:d6:78:c9:03:93:21:9b:ae:37:
         d0:de:98:59:d3:f0:fb:fb:c2:3f:c1:8f:46:38:a2:ab:09:78:
         a9:4f:e8:4f:f5:75:be:4c:14:46:08:b3:d3:e9:62:75:22:8a:
         af:2a:3d:67:f8:f7:21:49:38:ef:30:93:56:37:d1:0d:69:77:
         88:84:2f:ba:b1:76:69:19:db:12:8f:ac:85:25:19:20:b3:e6:
         46:35:f1:91:6c:ea:b8:72:87:35:28:f3:68:b8:81:6c:0a:0e:
         7d:0e:a5:7a:e3:be:a9:08:2e:8e:b9:90:46:cb:76:48:20:82:
         e1:70:2e:21:2e:25:a7:e3:c1:40:77:f5:06:1b:10:6e:b8:14:
         ba:b1:d2:37:d1:b3:9c:a4:0b:ad:b3:ce:c1:9c:23:d1:d6:b8:
         9d:f3:a2:9e:0f:e4:52:9c:f5:eb:43:7c:bc:a6:f3:4d:9b:63:
         d2:48:e7:94:3b:de:dd:d6:1a:0f:10:f7:6a:93:70:40:8c:a2:
         13:e9:d3:2c:28:28:b6:fc:ad:4e:1a:95:a1:e7:92:38:07:a7:
         ac:b9:7a:ba:88:08:77:73:66:25:c8:20:ab:2c:db:c7:38:41:
         55:c1:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:51 2026 by rpki-client