This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UakSpsYQ6EkeLd06AKpmK2Q6cbo.roa
File:                     UakSpsYQ6EkeLd06AKpmK2Q6cbo.roa (raw, json)
Hash identifier:          Md1AUxgc/gZZ0ZwmySUH/mxm3lK0QVxWuX122ZzE7i0=
Subject key identifier:   51:A9:12:A6:C6:10:E8:49:1E:2D:DD:3A:00:AA:66:2B:64:3A:71:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       100F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UakSpsYQ6EkeLd06AKpmK2Q6cbo.roa
Signing time:             Thu 01 Jan 2026 01:41:45 +0000
ROA not before:           Thu 01 Jan 2026 01:41:45 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4111 (0x100f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:45 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=51A912A6C610E8491E2DDD3A00AA662B643A71BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:47:69:f8:6d:df:6b:a6:13:96:1b:43:e3:
                    00:42:fa:aa:0c:16:b0:be:42:3a:bd:d5:5f:af:7c:
                    b0:b6:30:55:88:cd:71:04:10:4f:2e:ec:b2:83:5b:
                    5e:a2:e9:1e:4b:ee:7a:59:4b:16:3f:0d:71:52:ad:
                    62:d7:e4:10:02:54:11:05:a5:fa:28:3f:4b:60:31:
                    aa:5f:06:2b:09:d1:a6:43:73:3e:85:79:2c:c9:b2:
                    50:4e:af:9e:ea:91:cf:a0:05:9b:ff:d2:f0:28:7a:
                    28:d9:57:f7:c9:82:13:91:83:37:8c:ee:cf:d0:ae:
                    a5:8c:7f:e4:06:a6:da:0b:72:b0:62:83:5c:f0:11:
                    00:47:41:d4:6b:5d:bd:83:7a:cf:66:e0:58:18:c7:
                    7a:55:c1:92:8d:55:17:90:d2:ac:27:e1:b4:58:4b:
                    d2:95:d2:5c:77:28:8b:86:76:cf:f8:30:91:91:9c:
                    ed:af:06:bd:c8:45:8c:01:8f:6f:44:19:5d:dc:12:
                    bf:ab:39:41:a5:29:f4:c4:9f:d3:91:cb:5c:77:c2:
                    ad:e9:0d:ed:da:b3:8f:06:56:76:9f:62:da:ef:44:
                    58:cc:5e:0d:35:63:d8:c2:b7:96:8e:ae:5e:bb:7a:
                    74:0e:63:86:9f:74:c8:f3:43:dc:9f:21:c3:ab:97:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:12:A6:C6:10:E8:49:1E:2D:DD:3A:00:AA:66:2B:64:3A:71:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UakSpsYQ6EkeLd06AKpmK2Q6cbo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:69:47:e5:e7:d3:f4:a7:7b:39:5a:e9:14:a2:6e:f8:c0:17:
         80:a9:9c:3a:3c:a5:3a:a6:dd:c4:8d:bc:1d:c7:c5:f4:44:0d:
         77:31:bd:93:b0:99:88:07:0a:e9:9b:30:da:7f:48:69:1f:33:
         68:84:e4:2d:54:4e:ff:1e:27:15:ad:7d:0f:69:ab:c5:24:a0:
         90:3f:4b:68:ac:51:0c:96:b0:3f:08:9c:86:14:d6:f9:b1:80:
         c9:99:90:df:31:34:1a:a7:08:23:49:0e:3f:75:99:6e:3d:55:
         6a:0d:21:e6:c6:c2:a5:25:f1:ea:5f:fc:17:58:bc:2b:75:3b:
         2d:ae:41:33:f7:38:88:e3:e7:4d:4b:c8:4d:33:00:33:cf:ff:
         56:4b:3b:bc:c5:8a:f4:13:73:e8:15:b5:73:0f:17:d5:48:53:
         a0:3c:6e:40:33:ed:d8:63:27:ff:7b:de:38:15:4a:a6:25:c5:
         d6:34:ec:4b:72:c6:cf:f7:01:4b:85:eb:4b:fa:88:05:45:86:
         77:1a:5a:fb:0f:5e:09:bf:9a:ae:8d:0e:df:7b:d3:b1:b4:c7:
         7e:a3:e1:ab:1f:b5:70:67:01:9a:0a:84:60:ed:b4:15:d0:8c:
         3b:2d:13:7a:2a:fc:65:25:cf:8b:bd:e6:97:72:7f:f2:45:d6:
         ef:6c:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:38 2026 by rpki-client