This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qqbVHHG53M8W27rppUvqzAjSEMU.roa
File:                     qqbVHHG53M8W27rppUvqzAjSEMU.roa (raw, json)
Hash identifier:          fex/wr0aOdoxWy1NiexxZifTqyJ2xlQX2UVb8C/qKZk=
Subject key identifier:   AA:A6:D5:1C:71:B9:DC:CF:16:DB:BA:E9:A5:4B:EA:CC:08:D2:10:C5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       100A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qqbVHHG53M8W27rppUvqzAjSEMU.roa
Signing time:             Thu 01 Jan 2026 01:41:42 +0000
ROA not before:           Thu 01 Jan 2026 01:41:42 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4106 (0x100a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:42 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=AAA6D51C71B9DCCF16DBBAE9A54BEACC08D210C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:92:63:89:d3:80:6c:98:a2:65:0d:53:9b:
                    ea:d7:22:8c:4a:d3:c8:5d:0f:23:14:4b:6e:75:1b:
                    96:22:01:d0:34:21:9e:87:f9:a6:6b:fb:9c:72:c6:
                    9c:4e:04:12:a7:15:a2:75:c4:8a:b4:b7:40:80:80:
                    4f:e5:5e:45:12:d1:f0:f4:cf:a6:b5:18:c0:fc:7f:
                    4f:14:50:db:5c:4c:70:68:95:83:da:25:ff:2a:f9:
                    fc:a4:eb:f4:d2:76:2a:13:52:f5:82:cb:76:df:95:
                    a1:7e:59:ac:51:d2:d3:a0:9b:4f:42:99:f7:f2:d2:
                    49:17:a5:26:dd:f6:25:a5:72:53:3b:85:47:2a:e4:
                    47:fe:78:60:4f:44:e2:ec:58:2d:82:51:db:d1:13:
                    35:1a:df:b9:6d:31:41:d1:2a:01:6d:76:45:2c:46:
                    4a:0b:e3:2b:54:34:c8:7c:c6:2d:ff:84:bb:64:4a:
                    c9:97:92:0e:dc:f4:24:c9:08:ec:9c:18:7f:11:df:
                    be:db:96:c4:bc:d5:80:b4:b6:a9:c8:1a:38:7a:a5:
                    cf:59:31:7e:5b:2e:26:e8:8f:06:e3:8e:d7:b8:16:
                    4c:48:3b:ee:3a:04:b7:31:e8:3f:5b:dd:f8:b7:ae:
                    16:07:2a:8a:f4:19:d0:5d:cb:69:14:3a:0b:5a:af:
                    da:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:D5:1C:71:B9:DC:CF:16:DB:BA:E9:A5:4B:EA:CC:08:D2:10:C5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qqbVHHG53M8W27rppUvqzAjSEMU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:44:8f:16:80:6e:45:6a:2e:be:e8:da:91:39:7a:6a:ad:
         23:94:89:5b:4f:b7:5a:ca:a7:2e:44:91:80:2e:fd:07:f2:06:
         58:10:73:e6:af:bf:8a:5e:bb:b2:f6:78:c9:c3:d1:0f:72:30:
         5e:3f:7b:cb:02:79:47:c5:7f:8d:c4:40:ba:b7:e4:56:f6:ec:
         d7:e6:8d:f5:55:18:4b:c6:c7:0c:36:72:ae:e1:1d:26:39:fb:
         82:2c:f5:78:5f:66:5d:fd:f2:78:45:15:c4:d5:30:6c:f0:28:
         e9:da:ea:71:07:e4:0a:9c:a6:37:fb:41:c7:36:28:d2:d9:c9:
         1d:5a:20:59:09:20:c2:52:f3:04:b8:57:30:bd:4e:07:14:2d:
         b9:63:37:f8:8e:93:88:19:7c:86:92:3d:ad:59:c4:f8:89:91:
         dd:aa:5a:ab:ea:60:9a:78:69:ec:04:ba:05:7d:70:da:07:fb:
         fe:d7:56:db:a1:af:09:76:d4:56:35:b1:09:3e:89:c9:67:ea:
         a4:70:fd:ef:a5:5b:69:03:08:00:87:15:18:f0:30:22:94:21:
         46:50:1e:c5:33:bd:9d:40:f9:b2:b3:12:d3:92:d2:22:ee:82:
         63:91:80:7d:f2:b6:85:73:95:2a:b8:45:c1:09:95:4e:72:ba:
         84:af:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:00 2026 by rpki-client