This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VpRZNf-rnYyh5VBiol1aL6IKw7U.roa
File:                     VpRZNf-rnYyh5VBiol1aL6IKw7U.roa (raw, json)
Hash identifier:          CsnHUiMqFb3hciTdhpJVYKg4+odB7cG5UdCO3Ig5Qmg=
Subject key identifier:   56:94:59:35:FF:AB:9D:8C:A1:E5:50:62:A2:5D:5A:2F:A2:0A:C3:B5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FF9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VpRZNf-rnYyh5VBiol1aL6IKw7U.roa
Signing time:             Thu 01 Jan 2026 01:35:45 +0000
ROA not before:           Thu 01 Jan 2026 01:35:45 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4089 (0xff9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:35:45 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=56945935FFAB9D8CA1E55062A25D5A2FA20AC3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:a4:aa:c8:72:cb:c2:59:92:d6:90:db:9d:
                    53:2c:82:e3:6b:a9:83:30:32:1a:11:74:ff:2e:cb:
                    ad:81:12:7f:ba:d6:ae:16:46:8b:2a:9d:41:7d:0e:
                    6f:72:7c:f3:d3:f7:f0:3e:99:60:58:28:d4:11:f6:
                    93:ed:16:4a:ec:d7:ef:1c:87:b1:7d:24:1e:ce:2f:
                    cb:db:f2:bb:8b:5d:59:97:8c:99:b8:df:13:3e:2e:
                    65:9e:10:da:4a:90:51:8d:ae:b3:85:56:ca:09:72:
                    1e:de:a3:b2:fe:2f:32:39:93:15:66:bd:92:10:ad:
                    25:97:c8:f3:13:08:3b:69:2f:dc:a0:50:9c:44:17:
                    dd:e0:80:64:86:ad:65:92:68:2d:5a:d8:88:5d:96:
                    99:7f:cd:33:bc:d1:d7:16:1d:be:6f:d9:c3:6c:cd:
                    ee:68:e2:f8:52:4e:77:74:8e:75:7a:01:ec:c2:6b:
                    59:9f:94:a6:e4:3f:f3:c8:2e:25:de:f3:42:da:32:
                    78:20:17:e9:71:87:d7:86:1d:fe:5b:76:91:cf:6d:
                    78:8b:2b:26:03:2b:50:9f:21:ba:6c:38:c1:ee:90:
                    db:ac:f7:b9:33:8d:41:ff:a1:45:11:ec:99:67:7e:
                    a2:f1:dd:b0:fa:5f:a0:4c:2e:95:f0:58:a0:3b:ba:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:94:59:35:FF:AB:9D:8C:A1:E5:50:62:A2:5D:5A:2F:A2:0A:C3:B5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VpRZNf-rnYyh5VBiol1aL6IKw7U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:24:41:1a:8d:e6:5a:ba:45:a9:3c:77:94:20:d6:be:88:07:
         d5:30:88:6c:e6:f5:e0:9d:c8:4a:13:da:2e:28:d5:5d:e4:a0:
         18:f1:1c:42:60:89:4e:5f:86:db:39:e1:df:b8:ff:2b:f6:bd:
         be:9c:7d:6c:95:70:02:46:8b:62:f2:45:df:08:5d:fb:60:3b:
         64:b3:bb:d0:b6:35:1e:da:c9:1e:b2:71:b1:1a:92:91:fb:4d:
         51:46:63:6b:c2:87:17:87:90:91:99:9b:19:2c:ac:29:16:28:
         57:87:36:6c:98:6e:1d:1b:29:2a:41:ce:ff:d5:87:00:1a:89:
         e1:eb:a3:e1:d0:0d:c5:85:2c:5e:af:23:be:02:de:cf:fd:b7:
         8b:f7:54:37:50:cc:e1:06:14:8e:97:c2:c8:78:c2:1b:77:33:
         50:3e:9f:9c:8f:6e:35:95:10:5b:9a:48:4d:69:7d:11:79:e7:
         78:71:76:b0:0d:ac:6d:af:bd:4e:39:6a:3c:7b:4a:8e:e3:90:
         c2:b6:d1:ae:77:69:88:93:d8:4b:ca:33:a0:11:f0:d8:59:8b:
         94:59:f9:59:08:2c:44:ec:e8:9d:de:f4:2c:2d:10:a3:b8:48:
         d2:52:85:19:1e:9b:f5:0d:f4:35:05:61:ba:0e:c3:11:e1:e8:
         21:cf:88:37
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICD/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAxMDEw
MTM1NDVaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU2OTQ1OTM1RkZBQjlE
OENBMUU1NTA2MkEyNUQ1QTJGQTIwQUMzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtZKSqyHLLwlmS1pDbnVMsguNrqYMwMhoRdP8uy62BEn+61q4W
RosqnUF9Dm9yfPPT9/A+mWBYKNQR9pPtFkrs1+8ch7F9JB7OL8vb8ruLXVmXjJm4
3xM+LmWeENpKkFGNrrOFVsoJch7eo7L+LzI5kxVmvZIQrSWXyPMTCDtpL9ygUJxE
F93ggGSGrWWSaC1a2Ihdlpl/zTO80dcWHb5v2cNsze5o4vhSTnd0jnV6AezCa1mf
lKbkP/PILiXe80LaMnggF+lxh9eGHf5bdpHPbXiLKyYDK1CfIbpsOMHukNus97kz
jUH/oUUR7JlnfqLx3bD6X6BMLpXwWKA7un5PAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVpRZNf+rnYyh5VBiol1aL6IKw7UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1ZwUlpOZi1ybll5aDVWQmlvbDFhTDZJS3c3VS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYWowDQYJKoZIhvcNAQELBQADggEBAHgkQRqN5lq6Rak8d5Qg1r6IB9Uw
iGzm9eCdyEoT2i4o1V3koBjxHEJgiU5fhts54d+4/yv2vb6cfWyVcAJGi2LyRd8I
XftgO2Szu9C2NR7ayR6ycbEakpH7TVFGY2vChxeHkJGZmxksrCkWKFeHNmyYbh0b
KSpBzv/VhwAaieHro+HQDcWFLF6vI74C3s/9t4v3VDdQzOEGFI6Xwsh4wht3M1A+
n5yPbjWVEFuaSE1pfRF553hxdrANrG2vvU45ajx7So7jkMK20a53aYiT2EvKM6AR
8NhZi5RZ+VkILETs6J3e9CwtEKO4SNJShRkem/UN9DUFYboOwxHh6CHPiDc=
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:58 2026 by rpki-client