This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t3mtwvQ9RqWh50Eaut-IQ1CWkI4.roa
File:                     t3mtwvQ9RqWh50Eaut-IQ1CWkI4.roa (raw, json)
Hash identifier:          LfvYy3EXITtD+/Vikso+2bMcIy7fMo5gISVfTLpViHI=
Subject key identifier:   B7:79:AD:C2:F4:3D:46:A5:A1:E7:41:1A:BA:DF:88:43:50:96:90:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1049
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t3mtwvQ9RqWh50Eaut-IQ1CWkI4.roa
Signing time:             Thu 01 Jan 2026 01:56:13 +0000
ROA not before:           Thu 01 Jan 2026 01:56:13 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4169 (0x1049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:56:13 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=B779ADC2F43D46A5A1E7411ABADF88435096908E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:21:8b:37:73:c4:dc:35:e1:9b:90:cc:57:
                    95:23:93:71:4b:18:61:21:63:c6:dc:2c:3b:39:44:
                    6b:50:27:39:4d:d1:13:d4:b7:aa:d9:bd:9e:f8:35:
                    78:38:29:4f:49:69:ff:36:ba:71:cf:62:e4:de:a0:
                    71:80:c4:73:25:83:4a:52:65:bd:bc:3c:f2:7e:a3:
                    88:05:fc:7d:b6:fc:54:38:70:2c:9a:33:16:a1:f2:
                    4a:87:0b:24:8d:5d:7b:a1:1a:bf:51:1f:eb:23:b8:
                    9d:5a:1a:c7:89:27:66:75:07:5d:29:1d:a7:37:62:
                    cd:84:ad:72:73:60:e2:67:8d:44:46:37:85:54:e4:
                    e7:cc:3f:ec:b5:c2:76:db:a3:0a:9e:9a:f0:11:d9:
                    b3:9c:c6:08:6e:55:00:33:36:1b:ad:fe:00:89:df:
                    9d:ba:96:d7:3a:d4:b0:c2:29:32:9d:22:b1:41:6e:
                    c6:00:81:b1:2c:92:07:f4:51:e4:7f:42:62:75:be:
                    70:82:b7:d4:fa:30:e9:01:28:fd:1e:e0:44:b0:69:
                    1b:9e:50:2b:b6:95:cd:8a:ad:fb:f4:62:cd:47:cc:
                    0f:49:5a:35:c0:29:72:9b:5d:73:aa:9c:ff:e9:4b:
                    fc:f7:d8:59:ba:b6:ae:ca:37:35:a8:c5:fd:f7:02:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:79:AD:C2:F4:3D:46:A5:A1:E7:41:1A:BA:DF:88:43:50:96:90:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t3mtwvQ9RqWh50Eaut-IQ1CWkI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:95:2f:78:c5:ea:fd:02:dd:32:ec:fc:10:d1:26:e5:44:
         be:50:20:38:e6:87:11:67:43:2e:69:da:b2:b2:8c:b2:59:ac:
         7e:5a:3a:13:a9:69:9c:11:6d:75:5a:d9:72:ae:05:46:32:04:
         d2:21:54:d1:6c:f6:50:0a:0e:79:c2:5f:fe:26:76:11:d8:4a:
         22:4e:50:34:57:04:b4:e7:01:00:d8:97:7a:57:1c:bb:d6:56:
         ec:ed:4d:f4:4a:19:a1:d3:51:b6:ff:23:88:38:a6:d4:0e:2c:
         eb:ae:d6:3a:04:54:93:0a:d9:62:18:3e:00:af:9d:5c:a7:ef:
         57:e5:3c:cc:73:5e:f2:a4:4b:a1:4a:34:82:fe:26:15:c8:7e:
         78:65:c6:35:9a:3e:e1:89:62:07:93:0e:fd:69:e4:41:a3:62:
         08:bc:11:ff:54:df:60:29:bd:48:5a:c4:7b:ee:87:73:a1:27:
         ec:e6:24:9e:9a:83:55:f2:cc:3a:54:a2:f4:20:fe:8a:44:5b:
         83:ba:e2:84:27:81:a0:68:8d:1e:27:fc:70:d4:58:2d:98:e9:
         bf:60:06:6f:41:4a:33:83:35:22:9c:5c:e7:69:bd:82:bc:4b:
         1e:ac:45:a8:4d:06:ab:73:fd:86:17:74:90:fc:76:e9:50:07:
         42:28:0e:fd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAxMDEw
MTU2MTNaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI3NzlBREMyRjQzRDQ2
QTVBMUU3NDExQUJBREY4ODQzNTA5NjkwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSEiGLN3PE3DXhm5DMV5Ujk3FLGGEhY8bcLDs5RGtQJzlN0RPU
t6rZvZ74NXg4KU9Jaf82unHPYuTeoHGAxHMlg0pSZb28PPJ+o4gF/H22/FQ4cCya
Mxah8kqHCySNXXuhGr9RH+sjuJ1aGseJJ2Z1B10pHac3Ys2ErXJzYOJnjURGN4VU
5OfMP+y1wnbbowqemvAR2bOcxghuVQAzNhut/gCJ3526ltc61LDCKTKdIrFBbsYA
gbEskgf0UeR/QmJ1vnCCt9T6MOkBKP0e4ESwaRueUCu2lc2Krfv0Ys1HzA9JWjXA
KXKbXXOqnP/pS/z32Fm6tq7KNzWoxf33Au8bAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUt3mtwvQ9RqWh50Eaut+IQ1CWkI4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3QzbXR3dlE5UnFXaDUwRWF1dC1JUTFDV2tJNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxZoYwDQYJKoZIhvcNAQELBQADggEBAAlelS94xer9At0y7PwQ0SblRL5Q
IDjmhxFnQy5p2rKyjLJZrH5aOhOpaZwRbXVa2XKuBUYyBNIhVNFs9lAKDnnCX/4m
dhHYSiJOUDRXBLTnAQDYl3pXHLvWVuztTfRKGaHTUbb/I4g4ptQOLOuu1joEVJMK
2WIYPgCvnVyn71flPMxzXvKkS6FKNIL+JhXIfnhlxjWaPuGJYgeTDv1p5EGjYgi8
Ef9U32ApvUhaxHvuh3OhJ+zmJJ6ag1XyzDpUovQg/opEW4O64oQngaBojR4n/HDU
WC2Y6b9gBm9BSjODNSKcXOdpvYK8Sx6sRahNBqtz/YYXdJD8dulQB0IoDv0=
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:30 2026 by rpki-client