This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TTZXzMZ0tO1K2pdK2z5Q6e8MH84.roa
File:                     TTZXzMZ0tO1K2pdK2z5Q6e8MH84.roa (raw, json)
Hash identifier:          45oO/OCgfDq8ogbS0Ud37w8j0bPK9XzSSyhm9Gr4YwU=
Subject key identifier:   4D:36:57:CC:C6:74:B4:ED:4A:DA:97:4A:DB:3E:50:E9:EF:0C:1F:CE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1030
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TTZXzMZ0tO1K2pdK2z5Q6e8MH84.roa
Signing time:             Thu 01 Jan 2026 01:51:45 +0000
ROA not before:           Thu 01 Jan 2026 01:51:45 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4144 (0x1030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:51:45 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4D3657CCC674B4ED4ADA974ADB3E50E9EF0C1FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:31:73:d5:14:ac:b7:f4:bf:53:e0:94:fc:94:
                    d3:32:af:fc:08:6c:4d:c5:0d:d5:b9:e1:3a:64:17:
                    a1:7e:d4:20:1f:b4:e3:d9:89:3b:5e:1f:83:61:37:
                    81:10:84:17:9e:98:e7:c2:41:90:77:e4:95:cc:de:
                    8f:46:71:eb:9c:82:cc:b4:9f:ad:ec:2f:2d:57:ab:
                    d4:df:85:72:6b:56:62:6e:9e:00:ea:61:a4:1c:a4:
                    07:62:74:57:eb:4a:8b:9b:b0:83:23:af:09:64:50:
                    ef:a9:41:ad:04:66:a7:66:5b:e2:e2:d8:b9:99:15:
                    ba:94:56:e2:08:4b:d1:37:90:97:2f:07:d7:80:e6:
                    b1:41:53:76:e3:73:56:58:ec:af:8b:a1:3c:45:2b:
                    45:33:8f:89:65:f8:4b:60:af:a5:05:b5:af:95:a0:
                    12:cf:02:cb:66:53:d6:56:d1:2f:10:58:84:74:73:
                    cd:24:2c:98:8f:db:35:c7:29:e0:bd:5f:a8:15:4e:
                    01:7c:c5:47:63:f7:c9:f4:90:3f:83:c4:64:7c:27:
                    e5:d1:e7:c6:7e:6e:3a:ab:16:43:a7:63:85:e8:66:
                    9c:66:7e:f0:94:1f:ec:48:c8:1c:3a:2e:bb:a9:de:
                    34:7b:88:df:38:c1:d2:5b:91:f7:e9:70:76:64:2f:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:36:57:CC:C6:74:B4:ED:4A:DA:97:4A:DB:3E:50:E9:EF:0C:1F:CE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TTZXzMZ0tO1K2pdK2z5Q6e8MH84.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:38:9a:ac:a3:ea:39:b4:83:53:64:bf:37:d6:8a:4e:33:
         72:5a:2d:de:67:a5:78:a1:bd:61:5a:92:8a:a3:c3:d8:21:35:
         85:bb:d5:f3:ad:2f:1e:33:c4:cf:a8:8f:33:72:48:07:2d:1b:
         ba:5b:c1:93:88:30:3f:72:67:2d:38:95:b5:00:8d:dc:b6:9a:
         1a:59:29:48:70:8c:20:8c:07:b2:42:77:27:d2:e1:01:b4:95:
         0f:d6:ce:78:aa:9d:0a:b2:6c:09:c6:ad:46:e2:8c:ea:f4:8f:
         c9:02:12:63:3d:4d:6d:df:d1:f2:e3:e3:ab:06:19:69:bf:d3:
         71:29:dc:3a:99:96:e4:c5:37:1c:b6:1a:26:44:e4:49:03:5d:
         bf:e1:2d:1e:f9:2d:4d:c9:af:01:7c:81:73:10:8e:29:69:8b:
         7d:f5:e1:f3:88:1b:a4:3f:e4:03:8a:73:76:bb:87:9b:e1:61:
         29:58:a0:71:7c:c7:19:bd:f8:a5:cd:1b:93:c9:75:39:73:a1:
         f6:b1:c8:96:11:f3:68:fc:88:91:41:45:ef:7c:28:c4:24:87:
         c2:ee:1a:0d:c1:ee:1c:04:ad:85:dc:d9:5c:15:bb:3e:b2:06:
         18:1c:b9:13:10:12:9c:43:99:3d:0a:c2:00:98:d4:4f:d0:83:
         be:8f:b5:5e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAxMDEw
MTUxNDVaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREMzY1N0NDQzY3NEI0
RUQ0QURBOTc0QURCM0U1MEU5RUYwQzFGQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4MXPVFKy39L9T4JT8lNMyr/wIbE3FDdW54TpkF6F+1CAftOPZ
iTteH4NhN4EQhBeemOfCQZB35JXM3o9Gceucgsy0n63sLy1Xq9TfhXJrVmJungDq
YaQcpAdidFfrSoubsIMjrwlkUO+pQa0EZqdmW+Li2LmZFbqUVuIIS9E3kJcvB9eA
5rFBU3bjc1ZY7K+LoTxFK0Uzj4ll+Etgr6UFta+VoBLPAstmU9ZW0S8QWIR0c80k
LJiP2zXHKeC9X6gVTgF8xUdj98n0kD+DxGR8J+XR58Z+bjqrFkOnY4XoZpxmfvCU
H+xIyBw6Lrup3jR7iN84wdJbkffpcHZkL20PAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTTZXzMZ0tO1K2pdK2z5Q6e8MH84wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1RUWlh6TVowdE8xSzJwZEsyejVRNmU4TUg4NC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYXgwDQYJKoZIhvcNAQELBQADggEBAJRvOJqso+o5tINTZL831opOM3Ja
Ld5npXihvWFakoqjw9ghNYW71fOtLx4zxM+ojzNySActG7pbwZOIMD9yZy04lbUA
jdy2mhpZKUhwjCCMB7JCdyfS4QG0lQ/WzniqnQqybAnGrUbijOr0j8kCEmM9TW3f
0fLj46sGGWm/03Ep3DqZluTFNxy2GiZE5EkDXb/hLR75LU3JrwF8gXMQjilpi331
4fOIG6Q/5AOKc3a7h5vhYSlYoHF8xxm9+KXNG5PJdTlzofaxyJYR82j8iJFBRe98
KMQkh8LuGg3B7hwErYXc2VwVuz6yBhgcuRMQEpxDmT0KwgCY1E/Qg76PtV4=
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:11 2026 by rpki-client