This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eOOSsTvZh_T-qZkAt6FVMU3JFQU.roa
File:                     eOOSsTvZh_T-qZkAt6FVMU3JFQU.roa (raw, json)
Hash identifier:          REmgxX3dD6n1DD8gck3DQgXkbwJNdMbAmBF1ehQhUqk=
Subject key identifier:   78:E3:92:B1:3B:D9:87:F4:FE:A9:99:00:B7:A1:55:31:4D:C9:15:05
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       101F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eOOSsTvZh_T-qZkAt6FVMU3JFQU.roa
Signing time:             Thu 01 Jan 2026 01:46:11 +0000
ROA not before:           Thu 01 Jan 2026 01:46:11 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4127 (0x101f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:46:11 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=78E392B13BD987F4FEA99900B7A155314DC91505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:ec:77:28:f0:49:5a:5d:45:19:d8:39:58:
                    4c:13:2b:f3:1b:a0:91:d7:b7:2e:17:a4:49:ff:0c:
                    8e:8e:14:c7:85:aa:5a:85:d6:77:c7:62:ef:37:a3:
                    46:6c:aa:f1:c1:5e:3e:ea:0b:f0:14:26:9c:77:ef:
                    ee:33:82:37:8d:d0:f3:28:36:01:75:65:00:32:1f:
                    6d:0f:fa:b0:dd:53:d5:3c:3d:9c:13:29:89:57:de:
                    65:94:39:f1:6f:2a:cf:b9:dc:8f:7b:62:5a:c8:d7:
                    d9:ce:86:9c:db:8f:81:ff:27:38:9e:20:68:79:b6:
                    33:b0:43:37:ac:18:a0:19:15:ef:97:71:9f:d8:b7:
                    f8:b7:78:aa:5c:85:17:62:23:2e:a3:52:42:01:36:
                    a3:de:b5:4d:1a:72:87:34:42:ab:13:29:f1:25:8f:
                    4a:a1:e2:f2:4c:bf:6e:2a:20:72:f6:a0:b5:c2:06:
                    96:fd:cc:8e:35:01:23:e5:6c:05:71:a4:32:f5:b3:
                    e3:1a:9c:58:c1:dc:d7:35:08:a2:3c:ea:4e:00:79:
                    2f:bd:6d:05:95:19:b8:43:c0:8d:6f:88:4f:75:19:
                    9e:90:32:ca:e6:ef:9f:84:a1:c6:e1:c1:dd:4b:45:
                    3d:03:31:c3:0e:36:95:70:e4:05:8c:7c:5e:78:a3:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E3:92:B1:3B:D9:87:F4:FE:A9:99:00:B7:A1:55:31:4D:C9:15:05
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eOOSsTvZh_T-qZkAt6FVMU3JFQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:ec:32:77:11:c8:13:70:90:01:17:de:a2:29:b1:9c:13:
         55:b9:04:87:9a:35:53:79:06:26:b8:40:ab:b7:96:91:1b:89:
         bf:c9:9b:86:6d:a7:7e:3a:4d:05:72:c0:d2:f4:17:0c:b7:32:
         d4:0f:b3:58:f0:f6:f6:f7:7d:f4:0b:a9:7c:a3:d0:97:f1:fa:
         f4:8d:b4:7c:29:7e:78:0f:ad:82:e7:d8:4a:6b:c0:38:21:c6:
         8c:d3:84:a7:6e:df:43:eb:f5:24:22:4b:d5:17:04:0c:67:78:
         99:d7:b9:9b:43:95:88:89:5c:0a:6e:fa:1a:0e:f6:a2:b5:b8:
         c3:3f:91:67:42:3a:e7:2a:ad:ec:e4:b2:f7:74:a2:bb:54:7e:
         7b:c1:2f:46:50:1e:66:cf:3f:5b:d9:a3:c2:f1:20:1f:68:75:
         cf:4e:73:43:6f:01:88:7a:5c:57:d0:61:17:94:34:32:20:55:
         6f:42:85:64:e0:1c:0d:40:10:84:9a:e1:df:f3:fa:87:54:21:
         3a:5f:b3:f9:64:e9:58:db:3d:99:32:9d:4e:52:4e:94:5e:6a:
         71:30:7a:77:90:04:65:ef:46:b6:e6:30:91:11:95:01:8b:a5:
         3d:75:7f:28:c1:48:b5:1b:7b:26:bc:d0:86:12:9f:31:d9:f4:
         21:b8:11:8e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAxMDEw
MTQ2MTFaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc4RTM5MkIxM0JEOTg3
RjRGRUE5OTkwMEI3QTE1NTMxNERDOTE1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBnux3KPBJWl1FGdg5WEwTK/MboJHXty4XpEn/DI6OFMeFqlqF
1nfHYu83o0ZsqvHBXj7qC/AUJpx37+4zgjeN0PMoNgF1ZQAyH20P+rDdU9U8PZwT
KYlX3mWUOfFvKs+53I97YlrI19nOhpzbj4H/JzieIGh5tjOwQzesGKAZFe+XcZ/Y
t/i3eKpchRdiIy6jUkIBNqPetU0acoc0QqsTKfElj0qh4vJMv24qIHL2oLXCBpb9
zI41ASPlbAVxpDL1s+ManFjB3Nc1CKI86k4AeS+9bQWVGbhDwI1viE91GZ6QMsrm
75+Eocbhwd1LRT0DMcMONpVw5AWMfF54o8PBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUeOOSsTvZh/T+qZkAt6FVMU3JFQUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2VPT1NzVHZaaF9ULXFaa0F0NkZWTVUzSkZRVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABQlowDQYJKoZIhvcNAQELBQADggEBAK+g7DJ3EcgTcJABF96iKbGcE1W5
BIeaNVN5Bia4QKu3lpEbib/Jm4Ztp346TQVywNL0Fwy3MtQPs1jw9vb3ffQLqXyj
0Jfx+vSNtHwpfngPrYLn2EprwDghxozThKdu30Pr9SQiS9UXBAxneJnXuZtDlYiJ
XApu+hoO9qK1uMM/kWdCOucqrezksvd0ortUfnvBL0ZQHmbPP1vZo8LxIB9odc9O
c0NvAYh6XFfQYReUNDIgVW9ChWTgHA1AEISa4d/z+odUITpfs/lk6VjbPZkynU5S
TpReanEweneQBGXvRrbmMJERlQGLpT11fyjBSLUbeya80IYSnzHZ9CG4EY4=
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:01:28 2026 by rpki-client