This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_NwDNfWt9S6m1wiQCAX8mcSnSmA.roa
File:                     _NwDNfWt9S6m1wiQCAX8mcSnSmA.roa (raw, json)
Hash identifier:          ksPZvl9d9Bp1rtXtPYQKU6kEwLbMZ3QU+u9tvW8/O18=
Subject key identifier:   FC:DC:03:35:F5:AD:F5:2E:A6:D7:08:90:08:05:FC:99:C4:A7:4A:60
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1019
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_NwDNfWt9S6m1wiQCAX8mcSnSmA.roa
Signing time:             Thu 01 Jan 2026 01:46:08 +0000
ROA not before:           Thu 01 Jan 2026 01:46:08 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4121 (0x1019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:46:08 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=FCDC0335F5ADF52EA6D708900805FC99C4A74A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:9a:46:ec:f3:db:1d:36:e7:70:9c:75:25:
                    7f:52:31:93:a1:0d:7b:cf:ac:15:a6:84:cf:84:02:
                    1f:99:cb:ff:dc:93:3c:f2:a3:30:a5:dd:a1:9b:a9:
                    ec:d5:b7:d6:1b:95:9f:fa:c5:0d:cd:af:d6:7b:5e:
                    91:95:04:52:8f:6f:f1:02:f6:a1:d4:79:7f:a8:08:
                    23:89:f1:43:ff:a3:8e:0e:f4:2a:28:0d:96:44:29:
                    4d:ae:00:da:93:ea:85:47:be:65:9a:1e:f8:9d:7e:
                    7c:29:19:d7:c9:bb:62:af:8d:ef:7f:21:1e:ef:c5:
                    65:85:dc:fe:f0:83:f7:61:ea:65:d9:bd:5d:cb:87:
                    55:38:42:dd:a8:6b:5f:38:3e:54:72:f4:7d:72:e5:
                    6f:60:48:f0:5b:2d:27:66:f7:f6:7c:4e:10:fe:7e:
                    17:fa:b3:d6:6f:d4:a3:97:68:7a:ad:fe:18:63:84:
                    0d:af:49:1e:06:4a:de:e8:90:af:61:e4:23:bf:1e:
                    2a:ce:9c:c7:7d:c3:15:ca:90:8f:07:72:34:a6:1f:
                    a5:67:76:97:84:6e:6b:e3:72:de:fe:3f:95:76:d0:
                    98:d4:a5:c6:11:b6:14:e9:31:1f:45:f1:a8:aa:c0:
                    c7:4f:22:e8:66:92:a7:a5:0a:89:d9:49:89:1a:7c:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DC:03:35:F5:AD:F5:2E:A6:D7:08:90:08:05:FC:99:C4:A7:4A:60
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_NwDNfWt9S6m1wiQCAX8mcSnSmA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:b2:51:b0:f7:b0:3b:97:b5:a1:aa:50:64:a2:71:7b:c7:49:
         fd:7b:c8:ba:90:7d:d2:16:2e:30:43:18:0a:d2:05:0b:c9:21:
         ba:cb:77:b8:20:e1:8a:78:aa:b2:2b:7e:9e:71:26:89:ba:86:
         77:10:02:c8:58:d1:67:5b:15:72:af:7f:14:eb:f1:87:c1:7a:
         fb:48:52:f3:2f:65:fe:13:48:33:59:93:81:87:22:b7:74:9c:
         1a:2d:b4:95:44:ab:3f:aa:5b:7b:ba:4a:2c:cc:69:24:8e:77:
         27:27:40:16:ef:54:11:e9:a8:0d:cc:7e:87:9b:06:44:18:d3:
         25:a5:9e:b4:d9:34:1e:37:77:f8:22:b6:b4:0c:a3:4e:80:61:
         0b:43:67:2e:3b:5c:3a:6e:de:44:41:91:8c:08:a1:be:8e:6a:
         fe:7c:bf:54:ed:f7:f6:85:b2:75:2e:d0:15:c7:94:bc:97:fd:
         eb:19:2d:6f:00:14:2f:9c:d2:32:5d:d5:09:cc:17:e1:3d:7e:
         5f:98:02:16:ea:7e:54:a2:17:ff:0e:6d:f5:a3:6a:e3:14:dc:
         26:c8:0c:4f:87:2a:71:73:c9:0f:c5:b9:4b:fa:55:bc:7e:ed:
         bf:dd:56:02:f3:b6:69:08:28:d3:f0:83:83:e6:01:1a:93:20:
         a2:14:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:11 2026 by rpki-client