This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s_b3xlsIsoFGErFgJSLSvQ1C6q0.roa
File:                     s_b3xlsIsoFGErFgJSLSvQ1C6q0.roa (raw, json)
Hash identifier:          isrGfskEpxs68gVXWqEk4WYHYrPiXSe3elu37RY+y38=
Subject key identifier:   B3:F6:F7:C6:5B:08:B2:81:46:12:B1:60:25:22:D2:BD:0D:42:EA:AD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1005
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s_b3xlsIsoFGErFgJSLSvQ1C6q0.roa
Signing time:             Thu 01 Jan 2026 01:41:39 +0000
ROA not before:           Thu 01 Jan 2026 01:41:39 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4101 (0x1005)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:41:39 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=B3F6F7C65B08B2814612B1602522D2BD0D42EAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:7c:d4:5e:9e:e4:0b:bd:dc:ed:2e:4a:a8:
                    9c:84:ef:73:74:4a:57:16:52:6f:b8:be:06:5b:bc:
                    10:41:ed:a2:5e:7b:c0:ab:85:0a:fc:13:2d:86:c6:
                    57:2a:02:11:62:f1:1c:17:6f:9f:06:0b:d9:48:0b:
                    03:a5:5d:30:d0:1e:fa:6d:05:52:2c:7c:d7:e6:77:
                    c0:1e:67:cc:b0:8d:e1:a1:a6:a5:b5:e2:d1:c9:38:
                    92:c4:38:bf:c8:00:e3:88:e3:f8:44:fc:8e:a8:4a:
                    05:ad:9d:9f:c9:cd:f1:7f:0f:04:16:35:37:96:2a:
                    44:b7:ac:49:61:bb:63:05:72:63:97:d5:8e:ed:ef:
                    b2:3e:1a:b1:d9:35:fd:ba:57:74:e2:97:4f:6e:29:
                    be:f5:68:43:6f:79:0a:59:54:83:76:89:84:a8:6a:
                    a6:a2:23:21:d4:aa:d3:85:fa:e4:17:22:52:aa:28:
                    32:ce:97:18:4d:e4:a1:5d:da:da:68:91:db:5e:f2:
                    11:c0:31:a4:b8:04:30:20:dd:f3:47:6f:6b:50:e7:
                    30:75:e7:95:73:38:35:24:b2:ff:db:17:f0:82:b3:
                    cd:e3:ca:b8:4a:17:30:cc:21:78:00:93:d9:27:8d:
                    7a:a0:c3:53:a0:c1:a1:ce:d2:e7:31:7e:d2:f5:d5:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F6:F7:C6:5B:08:B2:81:46:12:B1:60:25:22:D2:BD:0D:42:EA:AD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s_b3xlsIsoFGErFgJSLSvQ1C6q0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:51:17:db:38:34:36:ae:63:41:b3:a6:a9:3e:d9:4f:3f:
         ec:c3:cc:47:f3:c0:88:0a:b6:44:ac:9e:68:32:05:ed:58:5b:
         56:ad:b2:32:35:f9:cd:7a:1a:29:2b:5f:d8:b2:8c:42:5a:58:
         34:07:13:b2:11:0d:1d:bc:8e:df:0d:79:6d:14:3f:95:d9:83:
         82:19:8c:21:c1:2e:e4:5a:0d:bc:ea:43:e4:74:f0:c0:69:84:
         89:d4:c1:b6:bb:3d:1f:ae:00:be:b2:a0:bd:1d:7f:e7:05:f1:
         78:bc:25:04:00:5c:19:0c:c2:a1:eb:d6:6e:90:46:c2:f0:be:
         33:aa:4e:49:5c:fc:19:1e:78:91:2b:fe:3c:dc:1e:ef:64:45:
         0c:5b:5c:80:f4:e5:c4:bc:7a:d3:9e:49:72:97:43:17:8b:79:
         f2:33:97:86:5e:19:91:eb:0b:bb:d4:bc:33:58:19:a1:e5:f5:
         7f:5b:4d:30:00:5e:56:77:1b:3a:75:9c:8c:09:29:8e:69:1c:
         62:ec:57:0f:a7:ce:89:45:f6:82:c3:4b:7c:bf:c2:61:50:f6:
         48:40:cf:49:68:d0:17:d2:cf:33:b0:7e:40:f7:c4:8f:6f:f9:
         60:24:e5:ba:b4:00:8a:99:c9:cc:80:c0:be:5d:a6:c7:9f:72:
         f6:18:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:01:34 2026 by rpki-client