This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFf8lrkZGep9wyaT39lTc4425vQ.roa
File:                     SFf8lrkZGep9wyaT39lTc4425vQ.roa (raw, json)
Hash identifier:          /OgzSFap9SpsOgj/65foP80Gjo8OjJQa11yqQ2nBUDM=
Subject key identifier:   48:57:FC:96:B9:19:19:EA:7D:C3:26:93:DF:D9:53:73:8E:36:E6:F4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FE8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFf8lrkZGep9wyaT39lTc4425vQ.roa
Signing time:             Thu 01 Jan 2026 01:35:34 +0000
ROA not before:           Thu 01 Jan 2026 01:35:34 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4072 (0xfe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:35:34 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4857FC96B91919EA7DC32693DFD953738E36E6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:8b:a5:c1:4c:c5:63:fa:11:f2:d6:e8:96:
                    ec:23:27:f5:94:0c:36:16:1c:c2:1a:9c:2b:b7:7e:
                    aa:fb:45:82:bd:ff:dd:12:8c:f7:fe:3d:e9:c9:29:
                    99:58:e3:eb:09:fb:14:46:e6:af:fa:53:8b:94:46:
                    3d:d4:5c:ec:64:c4:81:fb:02:15:51:ee:6f:05:2c:
                    fe:f3:2a:4a:0c:4c:aa:8d:5f:74:27:9f:09:cc:ee:
                    70:fc:f8:8f:29:3a:8b:61:0a:f2:0f:85:67:6e:18:
                    50:a0:40:b7:02:0e:4a:38:23:95:35:98:f1:7e:a5:
                    b3:a7:68:73:26:34:eb:65:ed:ae:a2:39:08:ae:09:
                    a0:4b:b5:dc:14:68:2d:19:3e:0b:57:a7:f0:47:85:
                    29:a8:fe:c6:a3:c6:7a:c4:11:de:a3:21:36:72:a5:
                    4c:25:08:1c:a5:11:54:08:ee:7c:49:0f:13:a7:45:
                    e9:c9:40:57:c9:91:a1:11:c5:d2:2b:8f:d5:a8:5d:
                    f7:b8:91:d3:3d:ff:97:36:bd:4f:db:08:6b:18:de:
                    6e:60:d9:c8:cd:f7:25:8b:6a:1f:a0:2e:c2:de:e4:
                    4d:08:90:eb:de:48:93:d8:4e:ec:79:96:74:37:35:
                    88:38:3a:05:5e:1d:48:d1:44:87:8d:13:34:ba:32:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:57:FC:96:B9:19:19:EA:7D:C3:26:93:DF:D9:53:73:8E:36:E6:F4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFf8lrkZGep9wyaT39lTc4425vQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:d2:2c:55:bf:fd:2f:14:43:25:0e:a3:31:64:5e:74:36:
         f9:c8:08:0e:86:c2:39:e4:11:eb:16:4b:d3:08:af:43:be:32:
         14:68:7c:e2:ba:29:44:82:e0:2c:5e:af:fd:90:8f:17:b1:09:
         7e:aa:8b:b0:e0:54:90:ba:3d:23:69:b0:21:a0:88:7b:be:19:
         bd:45:b9:81:f2:78:eb:29:f5:6d:ef:91:ca:6d:c1:54:b7:2e:
         c0:7d:58:86:ad:e7:ea:b8:be:36:bf:4c:12:49:61:e0:e7:fd:
         e6:79:0d:a5:46:08:34:74:80:9a:6c:32:b7:a9:4c:4b:db:8c:
         16:b0:1d:a2:a9:c5:69:37:1b:0d:9e:fe:4b:84:ed:fd:c2:92:
         23:f9:31:7d:6b:71:4d:ff:b7:e2:d7:17:29:3a:75:16:d8:68:
         4f:3b:cb:75:d8:a0:1f:85:47:9d:e6:6f:cc:8b:23:44:4a:b5:
         39:b4:1d:1b:4a:03:28:cb:cc:05:1f:46:94:c9:64:37:c1:19:
         c0:10:2f:9a:d5:7e:05:29:7a:4a:af:b2:dc:ee:e1:21:20:13:
         8e:dc:6e:7f:91:21:ba:a4:fe:fd:5b:2b:b6:32:43:3f:ec:47:
         2b:07:de:65:c0:45:6f:0d:cf:a1:40:87:3c:5d:cc:7a:07:be:
         c6:58:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:46 2026 by rpki-client