This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_o6oGQjbMhZ29_qA83DP7UBSmW8.roa
File:                     _o6oGQjbMhZ29_qA83DP7UBSmW8.roa (raw, json)
Hash identifier:          xW+fczrNnIo3O2AEZ86o2OKVR4MpxXhtJAtenvhXHLw=
Subject key identifier:   FE:8E:A8:19:08:DB:32:16:76:F7:FA:80:F3:70:CF:ED:40:52:99:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1042
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_o6oGQjbMhZ29_qA83DP7UBSmW8.roa
Signing time:             Thu 01 Jan 2026 01:51:55 +0000
ROA not before:           Thu 01 Jan 2026 01:51:55 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4162 (0x1042)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:51:55 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=FE8EA81908DB321676F7FA80F370CFED4052996F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:42:28:08:70:87:70:9d:35:c1:ef:b1:2b:
                    92:48:11:85:86:b7:95:63:9b:0c:ab:36:7c:5c:bb:
                    11:6f:1b:62:11:25:db:6f:ed:f5:d8:54:c3:42:36:
                    72:3f:5c:ad:19:79:88:cf:fa:cb:59:ca:55:6b:ae:
                    90:3c:ee:d0:8d:d9:1f:61:be:ea:65:0f:ab:19:73:
                    7d:c4:a8:80:64:cb:60:94:3e:06:6d:58:85:ff:93:
                    d7:35:4b:2a:81:86:1d:f0:41:d4:89:dd:c6:a1:f9:
                    30:1d:fc:48:5a:bd:db:d6:88:9e:2d:c6:f9:6f:6d:
                    6b:6d:59:03:e2:5c:c9:36:fe:a6:7d:22:b5:e8:89:
                    65:25:74:77:93:3b:ec:d2:d9:47:55:5f:89:86:e4:
                    26:00:74:8b:70:ac:7c:f8:91:45:89:fd:f7:16:22:
                    73:23:92:7c:1d:27:b6:01:f7:b7:ca:b6:fb:cf:67:
                    b9:df:89:8e:d3:e1:8e:a6:6a:b7:a5:73:96:4d:bf:
                    ab:3e:22:b9:65:a1:db:ab:97:75:25:db:64:22:1c:
                    b1:7d:ae:6f:80:d6:64:6b:7f:a7:66:90:79:75:4a:
                    7a:4c:b0:db:df:f2:a2:84:7c:95:c9:7f:0d:7f:d3:
                    0e:1d:3b:b5:b6:f8:ac:d1:04:21:a9:ca:12:ff:f2:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8E:A8:19:08:DB:32:16:76:F7:FA:80:F3:70:CF:ED:40:52:99:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_o6oGQjbMhZ29_qA83DP7UBSmW8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:03:15:d5:6a:40:f4:6f:00:e5:75:49:6e:73:b8:f9:b8:0a:
         8a:0c:56:80:f6:d1:0e:a6:ec:d1:c3:6f:bc:7e:99:1d:02:31:
         80:71:69:49:60:ea:de:21:fd:08:fb:65:fc:79:9a:d1:4a:1c:
         ad:89:23:66:0d:48:d9:26:4f:1b:9f:7a:8c:ea:c9:b0:c4:01:
         57:f7:34:50:e4:14:79:1c:a3:c1:63:ea:65:cd:a7:d4:8e:94:
         ed:f6:ef:9d:d1:a8:45:4c:f5:0b:99:61:2a:ee:02:78:91:a0:
         fa:49:ef:85:bf:c8:15:d5:b0:2b:d2:56:e0:16:2b:b4:dc:72:
         a6:61:55:43:20:ad:77:00:24:02:88:cd:9d:41:90:98:7b:b2:
         ea:71:be:e7:cc:10:2a:5a:06:13:fc:8e:4b:c7:76:fc:52:51:
         30:1b:cc:de:81:57:07:3f:bb:c1:fe:7f:79:af:b5:9e:94:2c:
         07:ed:56:28:f5:81:0a:80:d8:88:1e:bc:88:78:05:d8:6e:d8:
         7e:1e:17:5b:2c:1e:d2:9c:eb:43:bd:6f:8b:0d:06:22:ab:1d:
         cb:f9:b3:5c:29:c3:82:15:5d:44:26:77:6f:6f:ba:e2:4f:76:
         96:d6:c2:92:0a:77:bc:4a:3a:f0:9c:48:db:60:9a:10:70:1b:
         90:83:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:05 2026 by rpki-client