This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q-XeS3jnlr25EVXzQfpH_eZlYtg.roa
File:                     q-XeS3jnlr25EVXzQfpH_eZlYtg.roa (raw, json)
Hash identifier:          hq+mi4r/9XTrwOtTlDQ2UUXP/WUVqfrDQrWep8FXzQ0=
Subject key identifier:   AB:E5:DE:4B:78:E7:96:BD:B9:11:55:F3:41:FA:47:FD:E6:65:62:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1010
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q-XeS3jnlr25EVXzQfpH_eZlYtg.roa
Signing time:             Thu 01 Jan 2026 01:41:46 +0000
ROA not before:           Thu 01 Jan 2026 01:41:46 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4112 (0x1010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:46 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=ABE5DE4B78E796BDB91155F341FA47FDE66562D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:d3:c7:c1:18:58:1b:34:42:fe:7e:ef:74:
                    74:c7:7d:6b:51:c8:c9:12:7f:32:10:23:95:ad:f7:
                    5a:eb:bf:c0:06:ea:a6:dd:e1:e0:56:84:ee:8d:1c:
                    60:06:49:1d:eb:e4:eb:4e:25:5a:82:94:8a:4e:e3:
                    60:4f:ab:d4:2b:66:8a:a8:66:d6:1d:4c:df:2a:10:
                    4a:3d:3d:69:3f:fa:fc:3e:42:3c:e1:3a:1f:05:51:
                    4c:a9:34:dc:df:02:f2:7e:79:3c:6b:ad:66:b6:1b:
                    ff:7d:ba:21:c1:75:22:b9:9c:a9:b3:46:1d:1f:1e:
                    5c:fc:b4:b8:e4:c5:18:e1:f7:2a:1f:61:87:b6:a8:
                    bc:76:58:37:99:a2:73:4c:b3:36:90:ec:31:66:06:
                    04:61:18:19:cc:b4:bf:ad:0d:75:81:ca:d5:60:ad:
                    68:f4:dc:81:7d:33:4c:4b:38:27:68:b0:15:dc:32:
                    2f:9e:5a:0b:0e:a1:e7:fd:18:3d:c0:5d:78:dd:be:
                    18:fc:1b:22:c4:61:b0:51:6d:93:ee:8a:fd:93:bf:
                    68:ab:60:10:89:b6:b2:c5:18:fa:bf:89:84:52:40:
                    c7:71:9a:b6:1a:64:49:14:4e:3e:79:26:f3:b7:83:
                    8c:53:79:8d:b8:2a:1f:4e:e2:be:f0:39:dd:36:5d:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E5:DE:4B:78:E7:96:BD:B9:11:55:F3:41:FA:47:FD:E6:65:62:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q-XeS3jnlr25EVXzQfpH_eZlYtg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:14:ad:2e:00:74:fc:81:9e:ef:fd:00:43:18:96:85:2b:
         74:fe:7c:45:2f:20:08:8d:a7:8b:2e:b9:40:d3:6e:9a:89:4e:
         25:fa:12:ce:fe:d7:c6:f3:88:2c:75:b4:ea:ce:56:c4:89:ac:
         be:00:a9:5b:3b:54:cb:b8:75:43:46:5c:bd:0c:bc:cb:a1:99:
         c5:2d:06:1f:ff:7a:c4:80:e2:da:b5:bc:f3:b5:aa:51:a7:67:
         51:81:db:d2:7b:ab:4e:4f:28:f7:ed:97:55:73:53:e4:3c:db:
         9a:68:c8:4c:58:60:81:40:ae:24:26:d3:4c:5e:38:b5:70:82:
         a4:ce:e1:32:3f:cb:16:eb:21:15:a2:7c:29:5e:91:70:2d:fe:
         4b:8c:8d:a1:b8:25:3e:b8:72:4b:4a:b2:bb:26:e2:56:74:be:
         98:1c:a0:92:2d:51:e8:75:7e:25:03:08:07:c5:cb:ba:db:1b:
         51:dc:a6:bd:08:b6:cf:ff:eb:4f:90:60:a4:4f:99:c8:53:3b:
         be:8c:7c:b4:a4:59:fb:fb:3b:39:12:95:dc:d0:1f:22:08:b9:
         79:46:12:82:34:f7:e0:66:d1:d5:f3:73:1a:d7:e1:97:e9:06:
         fc:d3:fc:a0:5d:bd:5d:8f:a1:74:c8:d5:17:d6:6c:c5:34:d0:
         b4:b2:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:37:36 2026 by rpki-client