This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eAz1relzNizpMsUO37CCKu-Nz8k.roa
File:                     eAz1relzNizpMsUO37CCKu-Nz8k.roa (raw, json)
Hash identifier:          waZTL6E2/JAhe0cotrnO+tGui0KXU+ZMTtRJXpZtam0=
Subject key identifier:   78:0C:F5:AD:E9:73:36:2C:E9:32:C5:0E:DF:B0:82:2A:EF:8D:CF:C9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       102C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eAz1relzNizpMsUO37CCKu-Nz8k.roa
Signing time:             Thu 01 Jan 2026 01:46:20 +0000
ROA not before:           Thu 01 Jan 2026 01:46:20 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4140 (0x102c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:46:20 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=780CF5ADE973362CE932C50EDFB0822AEF8DCFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:94:40:2b:d2:62:94:ec:81:36:9a:fe:95:
                    95:8c:76:b0:18:fd:8e:a6:18:85:e5:a4:10:c3:98:
                    f5:9a:23:ab:28:e3:58:e3:a7:3b:10:5e:99:c1:39:
                    bd:4d:1b:cc:ea:0e:84:e0:ac:f5:d4:4f:b7:af:5f:
                    95:49:05:56:82:54:78:6b:dd:07:47:5e:29:12:13:
                    7f:ab:24:47:fd:2d:38:d4:66:49:1c:fe:ee:10:20:
                    3f:c5:6e:9f:42:cd:03:26:59:15:eb:a8:73:f5:e8:
                    fd:f8:09:43:5b:70:69:8b:d0:c3:8e:c5:ce:48:92:
                    48:b3:a5:13:a9:95:c5:44:37:17:23:35:61:8f:46:
                    9a:22:00:4a:14:48:57:be:05:4d:30:02:c0:04:a8:
                    65:ee:b1:3c:e3:60:79:6b:3c:15:73:1d:97:60:21:
                    dc:d1:c9:bf:b5:20:65:f0:c0:d7:a1:24:c1:74:cb:
                    fd:ba:f9:84:14:12:96:32:fb:e3:79:19:b9:71:46:
                    15:6a:e5:b8:bd:f1:35:55:fd:d8:2d:bc:31:c5:89:
                    ce:d4:f7:32:12:53:1e:7f:ad:b9:19:b5:a0:cc:6d:
                    d5:21:cc:5c:d5:80:7d:ac:06:3f:06:56:82:fb:93:
                    2e:6e:48:1e:cd:e8:74:27:35:c9:99:f5:37:60:70:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0C:F5:AD:E9:73:36:2C:E9:32:C5:0E:DF:B0:82:2A:EF:8D:CF:C9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eAz1relzNizpMsUO37CCKu-Nz8k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:a3:f7:e4:52:cd:94:5a:81:44:e3:1f:e5:cf:4e:ac:6e:57:
         b6:7c:e4:b5:71:b7:ba:44:bf:19:84:36:0a:ac:ce:84:dc:81:
         49:7f:98:59:ae:d1:e6:10:28:d3:a6:ee:ee:a6:32:c1:39:a1:
         fc:fb:e5:b2:43:57:56:f2:49:50:ef:b5:ee:4f:73:63:c3:6a:
         37:c9:a9:0c:24:fb:12:d4:23:13:f8:bb:50:13:bc:83:fb:28:
         61:d0:fe:e4:e0:6d:f5:d5:68:9b:04:5f:95:2c:bf:ed:c3:3f:
         c3:74:8b:4e:ea:cc:b9:66:69:40:40:03:df:da:a2:d2:90:e7:
         d3:44:fd:1a:52:47:06:3b:da:87:57:71:23:a6:63:5e:8a:a2:
         7e:42:9e:38:0b:d0:9e:5b:9a:29:66:43:20:28:96:5b:67:89:
         3b:95:6a:6c:5f:68:e1:ae:3b:bd:2a:92:70:b7:85:9a:21:25:
         1c:13:90:80:d5:4c:d4:7e:30:45:6e:37:36:e2:21:ce:e4:12:
         75:1e:86:9f:7e:da:20:4b:21:df:59:43:ce:b0:9b:aa:a3:93:
         43:da:c6:39:3f:67:e1:fd:a2:b6:9f:70:84:69:b0:31:96:63:
         c9:06:76:17:88:81:f8:bf:5e:e3:55:6c:4e:1c:95:77:4c:cc:
         54:fa:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:01:38 2026 by rpki-client