This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8pFT0BSC5892X4BeGejJKaW5JM.roa
File:                     b8pFT0BSC5892X4BeGejJKaW5JM.roa (raw, json)
Hash identifier:          M4M6dFcW0lNkxCUULDXXRavVI2shUSqXNM74GfweeQM=
Subject key identifier:   6F:CA:45:4F:40:52:0B:9F:3D:D9:7E:01:78:67:A3:24:A6:96:E4:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FF1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8pFT0BSC5892X4BeGejJKaW5JM.roa
Signing time:             Thu 01 Jan 2026 01:35:39 +0000
ROA not before:           Thu 01 Jan 2026 01:35:39 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4081 (0xff1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:35:39 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=6FCA454F40520B9F3DD97E017867A324A696E493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:b9:ab:62:25:4a:5c:42:6d:80:42:8b:16:
                    20:7e:86:35:a6:b5:ba:f6:a0:ba:42:6e:e9:e2:86:
                    88:5e:a4:cd:1a:45:76:95:07:18:2b:0a:b6:d1:52:
                    79:2b:19:00:80:45:05:92:6b:63:0b:f9:1d:c0:c6:
                    48:92:38:95:bb:4d:89:6f:b0:08:98:48:a3:1e:38:
                    ca:c2:2e:44:87:3d:c8:9f:81:9b:4a:d0:77:45:ff:
                    8f:1c:8f:25:43:bd:02:f8:87:2c:11:56:19:0d:ff:
                    c0:4e:9a:c7:25:60:a5:d9:46:dc:2a:b7:ea:da:a6:
                    4d:c9:65:df:fe:c5:9b:b4:06:2d:12:bb:48:4b:69:
                    64:56:18:63:b6:66:f5:cf:68:72:56:29:fa:6b:ff:
                    e2:a7:df:d0:e2:79:0a:f1:cb:a6:c0:0f:6c:c6:6b:
                    36:6d:c7:1f:b6:5f:77:8f:61:1b:c3:1e:43:ee:0c:
                    fb:c9:05:7c:0d:26:1c:9d:a0:33:ca:5d:84:7c:55:
                    db:a1:59:77:6e:33:8c:9c:c3:b1:4a:61:2e:f6:dd:
                    0b:50:11:79:d4:2f:e5:d8:63:6e:e2:7a:59:d0:ad:
                    66:a1:02:41:c9:0b:6e:81:74:f3:52:07:e0:a6:6a:
                    22:2d:02:44:79:cc:f0:a0:76:fc:cd:ec:c1:9a:a5:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CA:45:4F:40:52:0B:9F:3D:D9:7E:01:78:67:A3:24:A6:96:E4:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b8pFT0BSC5892X4BeGejJKaW5JM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:ba:cf:57:4b:04:ce:98:48:a1:75:bd:05:a6:fc:b1:7d:16:
         22:55:81:c0:53:8e:7b:37:59:b8:1e:6c:37:a7:e8:df:52:df:
         81:a9:2a:6f:36:7e:c3:cc:19:dc:22:78:77:91:1d:0c:3a:9c:
         77:6f:68:63:ac:b7:3c:74:9e:6b:d3:30:7b:b8:1f:dc:d7:0e:
         5b:08:5b:91:c8:d0:22:39:47:1e:54:44:7b:dd:68:89:27:61:
         29:f3:5d:44:2e:94:f7:70:cc:af:46:2d:f1:36:9b:cc:9c:43:
         1a:ed:9b:8a:83:8b:40:f0:a2:8d:a2:f3:99:ab:b4:89:80:43:
         cd:23:a3:5b:f8:b8:85:47:1d:36:d8:81:97:82:72:a3:d8:a5:
         13:e8:8a:97:47:1d:7d:97:83:4f:76:39:7e:97:6f:2b:ed:a0:
         67:94:11:53:43:ef:51:48:2d:24:d1:71:5e:1c:0b:f1:d3:12:
         95:d5:8b:54:36:ea:cb:d8:1d:da:a0:d7:ad:03:47:fd:03:40:
         f6:ac:fc:e2:f2:72:db:88:24:4b:3e:62:46:82:e3:97:db:3d:
         09:18:25:f5:ee:b8:40:ab:68:92:8d:96:67:48:a3:f9:36:92:
         f1:08:56:cf:ad:32:d8:53:4c:11:94:49:1b:89:95:5a:d0:ae:
         bf:35:34:4a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAxMDEw
MTM1MzlaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZGQ0E0NTRGNDA1MjBC
OUYzREQ5N0UwMTc4NjdBMzI0QTY5NkU0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/wLmrYiVKXEJtgEKLFiB+hjWmtbr2oLpCbunihohepM0aRXaV
BxgrCrbRUnkrGQCARQWSa2ML+R3AxkiSOJW7TYlvsAiYSKMeOMrCLkSHPcifgZtK
0HdF/48cjyVDvQL4hywRVhkN/8BOmsclYKXZRtwqt+rapk3JZd/+xZu0Bi0Su0hL
aWRWGGO2ZvXPaHJWKfpr/+Kn39DieQrxy6bAD2zGazZtxx+2X3ePYRvDHkPuDPvJ
BXwNJhydoDPKXYR8VduhWXduM4ycw7FKYS723QtQEXnUL+XYY27ielnQrWahAkHJ
C26BdPNSB+CmaiItAkR5zPCgdvzN7MGapUNfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUb8pFT0BSC5892X4BeGejJKaW5JMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2I4cEZUMEJTQzU4OTJYNEJlR2VqSkthVzVKTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABSwswDQYJKoZIhvcNAQELBQADggEBAMK6z1dLBM6YSKF1vQWm/LF9FiJV
gcBTjns3WbgebDen6N9S34GpKm82fsPMGdwieHeRHQw6nHdvaGOstzx0nmvTMHu4
H9zXDlsIW5HI0CI5Rx5URHvdaIknYSnzXUQulPdwzK9GLfE2m8ycQxrtm4qDi0Dw
oo2i85mrtImAQ80jo1v4uIVHHTbYgZeCcqPYpRPoipdHHX2Xg092OX6XbyvtoGeU
EVND71FILSTRcV4cC/HTEpXVi1Q26svYHdqg160DR/0DQPas/OLyctuIJEs+YkaC
45fbPQkYJfXuuECraJKNlmdIo/k2kvEIVs+tMthTTBGUSRuJlVrQrr81NEo=
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:01:39 2026 by rpki-client