This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WPHSXQlFXn6ZuvjSlT7K4W5iOkY.roa
File:                     WPHSXQlFXn6ZuvjSlT7K4W5iOkY.roa (raw, json)
Hash identifier:          xmfNeor/TBSXkNkst28jQqJZ7BMeruHtNA41DM4mkyQ=
Subject key identifier:   58:F1:D2:5D:09:45:5E:7E:99:BA:F8:D2:95:3E:CA:E1:6E:62:3A:46
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1001
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WPHSXQlFXn6ZuvjSlT7K4W5iOkY.roa
Signing time:             Thu 01 Jan 2026 01:41:36 +0000
ROA not before:           Thu 01 Jan 2026 01:41:36 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4097 (0x1001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:36 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=58F1D25D09455E7E99BAF8D2953ECAE16E623A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:9d:25:a2:65:e1:92:ff:c5:25:da:c8:ff:
                    ad:15:70:e9:d8:51:b6:fe:f3:f0:db:f1:85:b0:fd:
                    38:16:34:2f:c7:54:c9:12:f1:6c:55:89:6f:90:51:
                    a5:3f:37:f8:3b:71:56:21:f9:1b:ed:39:6b:1b:63:
                    9a:2c:10:aa:7e:be:8d:5c:bd:29:6d:7d:b7:84:76:
                    6c:b5:a3:b1:fd:91:d1:09:00:e8:60:11:4b:af:91:
                    3f:ab:84:9b:54:2f:f0:90:53:64:3b:b7:c2:7f:94:
                    b5:75:75:1d:56:72:b0:31:2a:7e:6e:9a:b2:b0:5b:
                    84:13:4b:91:c9:32:eb:bd:16:82:da:21:17:d6:33:
                    fa:a0:38:e6:fd:57:7b:05:1f:f1:6e:b6:b4:37:ac:
                    ee:b2:cb:8f:9a:0b:a0:2d:9f:0c:37:de:11:09:f1:
                    28:35:63:28:f3:76:c6:72:c9:39:a9:80:4f:88:b0:
                    8b:79:be:9a:b9:97:a8:b6:28:93:e6:aa:8f:5b:85:
                    fe:a1:c2:cd:0f:ad:d6:aa:81:45:8e:e0:d4:ba:6c:
                    76:3c:da:ab:4f:9c:35:3e:01:ff:29:b6:16:69:99:
                    a6:18:81:47:9b:ab:92:aa:8a:b4:a7:3f:b9:24:92:
                    ab:23:83:c7:b7:11:e1:60:38:70:45:6c:b8:ae:b5:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:D2:5D:09:45:5E:7E:99:BA:F8:D2:95:3E:CA:E1:6E:62:3A:46
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WPHSXQlFXn6ZuvjSlT7K4W5iOkY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:35:1a:87:72:44:14:23:22:69:0c:2e:32:c8:5b:17:97:
         dd:29:40:85:71:6c:f0:d7:82:22:fa:88:b1:00:7e:29:82:33:
         c1:5d:fa:fb:e0:d1:a4:d7:98:b9:cb:8e:7d:f2:c4:52:77:d5:
         20:80:5b:0e:ca:89:a2:48:44:f7:9d:71:da:49:09:36:9e:85:
         70:02:eb:f1:4d:15:d3:62:8d:c9:94:1e:40:7e:bd:38:66:31:
         77:55:ac:c0:31:9a:09:78:bf:fc:5d:e0:7c:5a:8d:c3:21:4e:
         42:fa:9c:d1:79:9f:72:d4:d3:f1:16:04:3c:79:15:ee:10:20:
         d0:76:b9:cd:eb:15:af:0a:b0:0e:33:ba:21:4a:4d:b7:c1:8e:
         3e:7d:68:f8:60:cb:ac:d0:64:93:b9:a0:b0:05:12:81:ca:89:
         58:55:12:ce:34:60:fc:56:01:f3:55:76:ca:03:ac:9c:e4:1e:
         0e:cb:a4:4b:27:34:70:b0:c0:ee:1b:7a:ff:46:cd:f4:62:8e:
         5c:b9:d2:e0:fc:fe:87:1e:be:1c:56:fc:31:d0:b8:b0:dc:9d:
         cc:b1:3a:14:93:88:fc:06:d4:81:0b:a9:b1:95:42:13:1b:4c:
         3e:ab:75:dd:f7:33:56:3e:78:dc:82:97:16:a2:03:c2:f5:63:
         30:87:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:58 2026 by rpki-client