This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vzu3lg_xjuwxXme5lABuF2C79xw.roa
File:                     Vzu3lg_xjuwxXme5lABuF2C79xw.roa (raw, json)
Hash identifier:          qCMLhPZ0KBBiV7BJvDUTMBjbs1COffWmMukdzFO/55c=
Subject key identifier:   57:3B:B7:96:0F:F1:8E:EC:31:5E:67:B9:94:00:6E:17:60:BB:F7:1C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FF8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vzu3lg_xjuwxXme5lABuF2C79xw.roa
Signing time:             Thu 01 Jan 2026 01:35:44 +0000
ROA not before:           Thu 01 Jan 2026 01:35:44 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4088 (0xff8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:35:44 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=573BB7960FF18EEC315E67B994006E1760BBF71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:84:86:ff:75:31:14:b7:4c:29:00:dd:0e:
                    19:4f:f5:30:54:8a:d3:b8:a9:53:55:36:96:89:48:
                    af:32:15:0d:a5:47:34:19:7f:f4:68:72:00:cf:e3:
                    30:c9:2f:94:54:bf:e3:08:e2:6e:33:60:bd:76:2f:
                    91:64:ab:6b:9c:ef:8d:4c:b4:76:c9:13:3a:cf:4d:
                    9d:c9:9b:8d:97:9a:ca:3a:5b:00:07:fb:e8:64:18:
                    b6:c2:b1:b1:17:06:c0:b4:58:ef:31:18:c7:a7:12:
                    9f:af:e0:43:b4:5a:2e:d9:2f:75:f2:1d:1d:ec:e9:
                    f9:f5:bd:e3:73:d5:01:ce:50:35:d3:c8:56:00:a7:
                    c6:64:fd:a0:73:15:b7:dc:6c:2e:00:48:1d:73:cb:
                    e9:b3:3f:3c:74:9b:b9:3a:5d:ee:4b:63:5c:8f:aa:
                    cf:ed:60:17:cd:81:cf:f3:b7:19:90:2e:dd:a1:29:
                    37:37:fe:54:39:e3:8a:3c:be:ef:11:0f:33:d5:77:
                    4d:7a:fe:57:62:b0:68:0e:a7:fd:26:a3:10:a4:f4:
                    a2:78:9f:38:01:9e:b9:c0:f1:d1:7b:fa:e8:5f:f3:
                    ec:17:d4:6a:73:a0:82:9d:eb:81:74:25:d8:10:f5:
                    56:fd:a9:32:9a:fa:4c:88:b0:35:12:51:c3:90:c1:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:B7:96:0F:F1:8E:EC:31:5E:67:B9:94:00:6E:17:60:BB:F7:1C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vzu3lg_xjuwxXme5lABuF2C79xw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:31:a8:3f:24:4a:ac:73:07:02:65:7c:e4:b3:ef:a0:d1:99:
         0f:51:63:8a:72:dd:e9:74:02:3d:9c:60:b0:69:fd:3f:87:2e:
         6f:30:13:be:57:6b:cf:08:d9:f2:54:43:c7:a2:9e:75:ab:de:
         f4:cf:f6:35:78:5a:51:b3:85:3a:f3:4d:20:bc:73:f1:29:da:
         b8:30:28:e0:a9:1b:ee:e2:e4:ad:53:9e:d6:a7:64:74:a0:fe:
         82:89:ef:94:b4:76:62:15:df:9e:be:a0:72:39:ed:e7:21:0b:
         e3:2c:1e:72:47:bb:21:a2:eb:82:53:4a:93:b6:4e:68:52:1a:
         e8:de:4a:42:63:87:23:5b:56:ab:df:bf:16:45:3c:b3:7a:2c:
         35:b8:8f:1b:b5:3f:df:87:5f:f0:47:dd:4f:cf:d5:2c:80:c0:
         3a:b5:7b:a6:ad:2c:52:47:8c:ee:5f:09:40:b7:36:31:03:e2:
         fb:09:b1:62:fc:c4:cc:8f:e9:43:62:c9:45:ec:82:48:d1:24:
         2e:48:1f:2a:a9:57:f3:da:2a:51:f3:63:48:e6:7c:a4:9b:06:
         6c:60:1f:e6:59:f9:71:5f:fd:bd:b6:22:3d:3d:9a:dc:be:6c:
         7e:b6:28:b9:58:dd:a5:28:93:87:fe:57:4b:ab:3e:3c:b7:93:
         9f:f2:b3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:06:11 2026 by rpki-client