This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YAw8lpvohXKiN5YNCYN4rQ_Spsc.roa
File:                     YAw8lpvohXKiN5YNCYN4rQ_Spsc.roa (raw, json)
Hash identifier:          DUglcV2YrT8EMjvxE59JM+wQ89WhgICIccK2owHi6II=
Subject key identifier:   60:0C:3C:96:9B:E8:85:72:A2:37:96:0D:09:83:78:AD:0F:D2:A6:C7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FFA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YAw8lpvohXKiN5YNCYN4rQ_Spsc.roa
Signing time:             Thu 01 Jan 2026 01:35:45 +0000
ROA not before:           Thu 01 Jan 2026 01:35:45 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4090 (0xffa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:35:45 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=600C3C969BE88572A237960D098378AD0FD2A6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:31:ee:fa:c5:16:99:3b:37:f6:92:5f:ea:
                    0f:5e:d7:0d:6e:0e:02:c0:91:14:2b:7c:ed:69:c7:
                    b7:ae:7f:da:84:40:bc:64:74:f3:7d:09:eb:1f:3b:
                    ae:b8:18:46:16:a0:6d:d4:4b:a9:0d:a9:96:af:1c:
                    34:b9:08:28:1b:a0:59:cc:0c:9c:65:2e:da:84:0f:
                    c9:03:e8:59:34:92:6d:91:b5:00:ea:87:72:72:ed:
                    74:a0:05:32:37:82:df:e8:49:b2:ca:c4:16:c2:7d:
                    e3:50:79:ff:44:16:59:1b:6b:07:b0:94:98:10:07:
                    74:17:9b:78:c3:f4:ce:d2:8b:6f:f2:fb:0f:34:ba:
                    e2:58:e1:6a:9c:ab:00:0e:48:c1:0c:a8:9b:05:c8:
                    65:7e:4e:37:47:89:6b:99:75:32:92:c1:4d:00:54:
                    30:59:3f:15:3d:dd:8c:80:03:81:09:d8:05:9a:a1:
                    70:74:2e:33:6e:75:e0:74:ea:fd:54:6b:f6:bc:21:
                    f3:de:f0:91:b0:3c:40:db:8e:35:50:c3:a0:46:7e:
                    84:a0:4f:46:d8:e9:b0:4c:2c:e0:e4:71:28:9f:58:
                    13:00:8c:05:9d:1d:a3:eb:c2:46:98:d4:94:fb:55:
                    ac:78:b2:a5:c8:43:3c:ee:61:a9:4e:38:2c:13:8f:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:3C:96:9B:E8:85:72:A2:37:96:0D:09:83:78:AD:0F:D2:A6:C7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YAw8lpvohXKiN5YNCYN4rQ_Spsc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:18:6c:a8:40:f9:53:be:b4:9d:57:5c:d9:a5:1e:a0:65:
         50:a7:51:61:02:b3:36:9e:85:96:2a:bb:dc:61:f7:3b:6e:8a:
         e2:43:a4:66:5d:58:ba:27:b7:5a:6e:9e:38:fb:cf:11:d7:b3:
         f5:94:c8:98:ee:d9:4c:c4:90:6b:ef:9a:6c:43:6e:92:d9:01:
         82:86:03:3b:1c:b6:d1:1b:60:fc:3e:ca:fc:04:a6:f7:3b:76:
         c0:65:4e:21:a6:6b:ec:37:eb:cd:66:95:ab:28:08:d9:91:c2:
         f0:94:4c:4e:c6:d2:58:f4:82:c7:ca:00:84:66:e7:5b:5c:e0:
         60:a6:99:45:e4:56:fd:aa:06:38:04:99:fb:47:db:9c:66:11:
         b3:7a:b5:70:dd:34:28:91:00:a1:42:65:a0:82:20:f9:8e:0d:
         93:d0:51:04:62:a5:34:04:2a:6f:b6:58:49:b6:a0:cf:f3:68:
         18:df:79:d1:69:6c:32:51:ca:59:d4:91:35:bd:35:1a:97:14:
         0b:04:cd:6c:0a:fe:ee:9e:11:6c:cf:fb:b6:d8:82:58:44:cb:
         75:fa:9b:97:39:8c:44:2b:0b:83:aa:34:ae:03:89:21:c5:bf:
         10:d0:30:45:99:ec:76:fc:1f:3e:b5:6b:53:5e:5a:f5:b4:08:
         c2:13:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:54 2026 by rpki-client