This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8AIuKaXrpdIRKnYtK3PLft-hYU.roa
File:                     b8AIuKaXrpdIRKnYtK3PLft-hYU.roa (raw, json)
Hash identifier:          Zg7peioQ0WxRag0zNMmJXGcbvsLj/2kENke3n/AA5dU=
Subject key identifier:   6F:C0:08:B8:A6:97:AE:97:48:44:A9:D8:B4:AD:CF:2D:FB:7E:85:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1021
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8AIuKaXrpdIRKnYtK3PLft-hYU.roa
Signing time:             Thu 01 Jan 2026 01:46:13 +0000
ROA not before:           Thu 01 Jan 2026 01:46:13 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4129 (0x1021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:46:13 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=6FC008B8A697AE974844A9D8B4ADCF2DFB7E8585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:91:bd:75:fe:fd:ab:c0:4e:1d:b1:db:5f:
                    6f:4c:2b:b1:61:c5:a5:e2:e1:dd:c0:6f:d1:04:23:
                    e0:24:c3:0c:b7:4c:02:f9:33:16:ab:90:60:67:b5:
                    c9:cf:fa:dc:21:e6:b1:a2:b7:8a:2c:6e:35:84:d0:
                    05:ec:4f:8d:6c:c7:ab:16:a8:58:22:ed:27:87:42:
                    83:6b:a2:0e:7c:ff:7d:00:1c:53:fc:d1:1a:68:0c:
                    ea:ef:af:64:e9:bf:4b:5f:fc:6d:79:2c:4c:f7:88:
                    12:84:09:ea:d4:ed:36:e3:0c:e4:7c:d4:b9:f1:15:
                    08:d6:bd:8c:a1:be:be:3d:51:73:68:26:ec:e1:81:
                    df:72:8c:be:29:8e:6f:b9:2c:13:2a:50:f4:34:71:
                    d5:2c:54:7f:43:ce:3e:d1:e5:ae:20:b9:5f:52:0d:
                    99:ff:67:b4:d8:e1:56:6f:c1:c7:ff:3b:8e:40:7c:
                    88:2b:41:6e:58:e6:6d:1e:88:71:6d:e7:28:82:b9:
                    7a:eb:5e:a4:7a:30:88:a5:22:75:1c:9f:d7:71:98:
                    bd:ec:ee:5f:83:66:e4:ca:ef:b9:8d:ca:10:1b:05:
                    14:9a:2e:70:94:9c:d7:09:94:be:e5:4e:6c:94:83:
                    30:b6:23:2d:82:44:d1:22:5d:e8:45:11:82:37:4d:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C0:08:B8:A6:97:AE:97:48:44:A9:D8:B4:AD:CF:2D:FB:7E:85:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8AIuKaXrpdIRKnYtK3PLft-hYU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:b1:9d:7e:13:79:19:03:66:d7:78:e6:e0:b1:df:dd:43:aa:
         60:ef:c5:c3:89:fa:25:ac:d5:93:22:19:2e:ba:ee:91:cc:1e:
         85:7f:65:ad:d5:77:40:8b:05:74:b4:69:82:b8:38:a0:7b:f2:
         c2:be:9d:49:74:80:23:97:c6:e4:50:9c:48:c9:7b:11:3a:d5:
         30:82:a8:f5:b2:ca:ff:81:12:83:be:cb:07:c0:0d:75:19:5c:
         da:50:5e:04:06:7e:22:87:6a:9a:68:ed:eb:cc:ca:7b:dd:21:
         c7:69:fa:01:46:a2:59:14:80:42:20:86:fe:5c:52:81:49:62:
         51:7f:ec:42:f2:82:87:9f:d4:c8:b6:b4:4c:e8:06:85:d3:ed:
         7b:18:2d:90:52:1a:8e:21:b9:99:94:58:c7:c8:dd:8a:87:2a:
         5b:e9:a7:32:a9:2c:77:61:29:5c:0b:f3:6d:bc:94:be:2d:1e:
         2d:d2:ee:fe:86:84:0b:35:c1:84:9c:6e:b7:ed:56:91:5a:5c:
         18:d6:7b:66:af:50:ab:08:ef:44:c3:5c:ae:73:00:8f:65:21:
         ba:b4:90:37:67:0c:97:1d:95:3b:b2:0c:ed:60:76:c2:4e:16:
         15:6d:86:b4:0a:88:24:d5:9f:ce:21:42:91:a4:ec:06:0c:2d:
         54:5e:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:58 2026 by rpki-client