This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RjjC-W1d6OdYy_nC421eitqcE5o.roa
File:                     RjjC-W1d6OdYy_nC421eitqcE5o.roa (raw, json)
Hash identifier:          A33e/Mzl7BK/zodSf8bKQT1SfelOH9MtxFaKGUWpPR4=
Subject key identifier:   46:38:C2:F9:6D:5D:E8:E7:58:CB:F9:C2:E3:6D:5E:8A:DA:9C:13:9A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1009
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RjjC-W1d6OdYy_nC421eitqcE5o.roa
Signing time:             Thu 01 Jan 2026 01:41:42 +0000
ROA not before:           Thu 01 Jan 2026 01:41:42 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4105 (0x1009)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:42 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4638C2F96D5DE8E758CBF9C2E36D5E8ADA9C139A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:0c:1d:2b:1f:72:59:29:64:e7:23:77:63:
                    7d:ef:23:00:d2:ef:e2:75:dc:09:ac:c2:2b:95:9e:
                    9c:03:d0:13:95:26:0e:42:ed:71:01:99:5d:9d:f9:
                    d3:1f:e7:96:3d:e7:b7:95:23:3c:fa:32:1d:8b:f7:
                    aa:6c:0b:aa:6e:ae:31:f1:3b:6f:39:3d:28:0a:a8:
                    54:93:d8:97:d7:06:57:e4:30:e9:51:9c:ac:0f:14:
                    42:5b:e9:ab:65:f3:53:6b:88:6e:7b:71:1f:fb:fd:
                    9c:a7:d0:89:b7:b8:32:a4:93:ba:0a:0b:75:80:0f:
                    31:31:fc:20:bd:be:ce:66:c0:d8:10:66:27:db:28:
                    a6:4b:90:11:0d:a6:1b:0f:a9:21:8f:20:c5:a2:3f:
                    f1:1e:d4:a9:2a:1e:91:d7:15:b6:81:7d:2e:10:4b:
                    e2:07:08:4e:af:ae:dc:85:09:65:cd:b5:be:0a:c4:
                    dd:01:91:d4:64:5d:1d:34:a9:44:ca:7d:c0:42:ad:
                    2d:f1:27:5a:5c:8f:54:72:68:84:e5:1c:f0:bd:12:
                    7d:ad:7d:c9:bd:af:c6:38:30:f7:6f:cd:6b:9f:a6:
                    92:3e:74:ee:68:98:21:67:80:77:2f:14:3c:75:16:
                    65:dd:06:6b:48:3a:f8:b3:e9:c2:de:43:59:33:3a:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:38:C2:F9:6D:5D:E8:E7:58:CB:F9:C2:E3:6D:5E:8A:DA:9C:13:9A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RjjC-W1d6OdYy_nC421eitqcE5o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:7b:f9:e1:06:e1:7b:09:38:b5:58:f4:e6:2f:61:f5:8c:3e:
         32:59:43:6a:22:e0:e5:30:10:91:c5:eb:2e:ca:56:60:7c:d2:
         b4:b2:f9:5e:18:59:8c:f3:c6:76:a1:19:78:a3:18:16:d8:44:
         3d:4e:f7:e8:0c:8b:ec:ed:f4:ef:ed:f3:bc:93:9f:9e:86:c3:
         1c:bb:4d:90:d9:7a:53:2b:b8:29:0b:8a:9f:ee:5c:3a:46:ec:
         da:16:6e:0a:12:1e:db:6f:9c:5e:c4:4c:6c:51:47:1e:50:1e:
         af:15:c8:d7:91:9a:40:a2:7b:fd:6d:9d:77:a8:ed:bc:f4:13:
         f3:a4:d9:1e:1f:04:5e:09:76:87:fe:c6:9b:d3:35:85:7e:15:
         d1:47:c8:26:4e:ec:f3:52:27:a2:b6:6d:5d:76:85:22:08:69:
         61:d4:96:c0:64:6e:7d:d1:62:3f:54:d0:8a:db:08:8a:e7:41:
         a8:84:3a:7d:6b:c2:f2:e0:6e:15:29:09:25:1e:c2:56:27:ea:
         71:c1:bf:87:16:fe:c3:da:a1:ec:60:e1:04:b8:5f:e6:fa:9b:
         45:2b:c4:c6:94:17:4c:d3:ac:86:89:0d:2d:ba:be:00:a2:c9:
         76:ce:60:30:b3:e0:7f:a4:ea:63:c0:b4:fa:a3:8d:fc:df:b0:
         7c:39:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:37:22 2026 by rpki-client