This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pbf1XI0AbzH0EwEUTaJ7um2cUpc.roa
File:                     Pbf1XI0AbzH0EwEUTaJ7um2cUpc.roa (raw, json)
Hash identifier:          4WYgjIUSymjKWVVvIgVtm1irsmLMO6icIaRFbqqo9Ew=
Subject key identifier:   3D:B7:F5:5C:8D:00:6F:31:F4:13:01:14:4D:A2:7B:BA:6D:9C:52:97
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1044
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pbf1XI0AbzH0EwEUTaJ7um2cUpc.roa
Signing time:             Thu 01 Jan 2026 01:51:58 +0000
ROA not before:           Thu 01 Jan 2026 01:51:58 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4164 (0x1044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:51:58 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3DB7F55C8D006F31F41301144DA27BBA6D9C5297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:f3:88:ea:e6:be:ac:a8:40:22:e2:78:ca:
                    18:ba:4d:a9:68:7c:5e:fa:81:7d:c8:20:a5:1c:a9:
                    5f:59:82:82:c2:fa:ac:97:6e:cc:aa:22:c2:c7:a5:
                    19:73:87:c2:47:f4:e3:66:e3:43:4b:9d:94:f6:3d:
                    be:8a:8c:bc:54:30:b3:b8:58:2a:18:47:5b:9c:70:
                    e9:27:57:cf:e7:bd:77:2c:8c:ea:cb:86:b6:9e:ec:
                    a7:d1:70:e4:c4:0d:f8:98:c4:a0:9e:b8:32:6a:0f:
                    0b:cc:1e:6c:4b:42:68:f9:25:f3:b3:f9:6c:81:84:
                    1e:27:9e:46:ed:e4:74:74:15:46:0e:84:d9:83:70:
                    08:25:25:85:80:5d:0b:4a:75:a4:8c:b1:f1:d4:de:
                    d1:13:46:ba:08:bf:16:c6:be:ab:16:0c:d7:1d:8a:
                    be:69:1e:d3:9a:54:f1:ad:21:73:cb:92:92:bd:af:
                    06:f9:13:04:75:f0:12:b9:37:5d:79:f5:64:29:34:
                    f1:68:77:f0:90:e3:3f:c4:53:e0:af:3f:eb:11:8b:
                    e7:53:41:ef:15:08:c5:ec:9d:cd:a6:ae:c1:ad:c2:
                    ac:27:10:e8:74:b9:a8:22:22:94:da:50:4f:cc:d5:
                    42:88:07:1e:c2:ce:5a:b4:46:2a:9a:31:f8:4e:4a:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:F5:5C:8D:00:6F:31:F4:13:01:14:4D:A2:7B:BA:6D:9C:52:97
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pbf1XI0AbzH0EwEUTaJ7um2cUpc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:7e:68:7a:91:a1:70:0e:a6:e3:ab:58:b9:11:76:1e:ce:
         1a:59:a5:6d:de:af:07:2a:25:93:51:24:d1:b1:8a:ef:0b:22:
         01:50:f9:52:c3:07:98:f2:03:4f:f0:bf:34:f6:7a:d4:bc:15:
         59:51:16:58:b0:09:ad:95:fa:ac:05:f0:31:f9:14:99:68:23:
         98:9f:4b:e3:84:10:d4:7d:a4:ef:ff:49:ab:04:dc:f1:50:f9:
         48:06:3a:b4:b1:f5:62:5f:32:4a:8b:db:89:09:5c:10:a7:7f:
         93:6f:b9:07:2c:c9:e8:b0:0b:09:fd:81:c2:fc:18:eb:8d:c7:
         06:eb:2a:98:7a:e2:04:19:8e:95:1d:ef:22:a6:74:5b:a4:68:
         f7:88:db:aa:8d:04:0d:94:99:bb:19:73:13:09:2e:fd:5b:8b:
         98:25:e7:af:32:52:49:63:c9:d2:2c:8b:9e:fb:f6:b2:55:8b:
         40:36:4f:1e:3c:39:12:d4:93:5f:94:76:0f:95:99:e3:b7:ef:
         41:2b:cf:2d:bc:07:9c:70:57:26:ae:71:1b:53:47:7c:4c:09:
         8b:fd:c9:91:79:49:65:62:5e:d5:1b:44:d0:34:8c:69:17:8f:
         7d:33:08:b7:ad:98:89:1d:c9:28:4e:f6:59:ee:50:5e:77:e1:
         32:e1:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:05 2026 by rpki-client