This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vAT99MBt9zQfukDRnKco8V8j-tE.roa
File:                     vAT99MBt9zQfukDRnKco8V8j-tE.roa (raw, json)
Hash identifier:          o8g6QD/8TkXw/cx0I7jXo9kfXICvE24/Ez0WGjor2PM=
Subject key identifier:   BC:04:FD:F4:C0:6D:F7:34:1F:BA:40:D1:9C:A7:28:F1:5F:23:FA:D1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1029
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vAT99MBt9zQfukDRnKco8V8j-tE.roa
Signing time:             Thu 01 Jan 2026 01:46:18 +0000
ROA not before:           Thu 01 Jan 2026 01:46:18 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4137 (0x1029)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:46:18 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=BC04FDF4C06DF7341FBA40D19CA728F15F23FAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:63:da:93:c0:e1:a0:9f:12:2c:bf:4c:ee:
                    ce:3f:8f:f0:14:a1:b6:a3:71:56:21:5c:7b:88:03:
                    5b:de:f2:a6:1a:8c:9a:b8:e8:c5:2d:00:ae:05:7a:
                    21:19:4d:93:c1:78:c7:7a:a8:46:f4:05:7d:44:14:
                    b1:22:10:34:9c:80:3a:1b:c2:65:67:30:ae:49:29:
                    e5:b4:d6:02:3c:eb:b6:8f:6a:90:61:2d:b6:67:84:
                    9e:98:57:02:e2:3b:95:12:5b:67:f3:8b:79:a9:83:
                    fd:f2:63:2f:c8:32:02:81:05:0f:a2:58:98:ad:a2:
                    37:c2:7c:ab:90:49:90:91:67:86:9f:15:13:ac:9e:
                    cc:0c:ce:8d:58:33:92:ad:27:b9:63:fc:c4:16:a7:
                    3e:69:00:94:d7:b8:64:a0:40:de:b0:fb:96:49:1b:
                    23:be:84:53:f6:ca:23:16:ba:63:26:23:06:33:5d:
                    44:7d:fa:e3:de:3d:2d:8c:e3:c1:58:9f:b7:08:00:
                    53:02:12:a6:95:a4:c3:50:98:ff:40:3a:fd:68:e9:
                    4e:84:4f:e8:e7:98:bc:60:67:f2:ce:25:8b:e5:c3:
                    0a:b7:53:c1:ed:9c:e5:a2:df:66:9f:64:bb:aa:68:
                    88:e2:24:c3:d3:f5:62:e2:08:37:de:f9:15:9c:61:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:04:FD:F4:C0:6D:F7:34:1F:BA:40:D1:9C:A7:28:F1:5F:23:FA:D1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vAT99MBt9zQfukDRnKco8V8j-tE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:9b:e8:71:66:2f:91:cd:61:1b:f5:68:93:70:63:14:47:
         83:ba:52:51:06:ad:a3:81:1c:ab:10:83:1e:c1:ec:c7:47:97:
         d3:84:be:f9:34:d8:42:2e:95:d1:19:88:54:a2:79:ca:1d:5d:
         5c:7b:2e:c8:36:66:a4:72:a7:9f:df:f5:7e:bf:71:49:9e:28:
         89:7b:e1:d1:3b:fc:35:84:08:76:60:c3:d8:d1:63:aa:c6:06:
         c7:59:ed:24:0a:a7:5b:21:cd:11:d8:65:20:65:7b:f8:45:c8:
         5a:04:26:b6:52:63:12:e8:3d:79:ee:11:ab:1e:64:c1:eb:6b:
         5f:4c:4f:02:62:2f:e8:11:9c:0a:94:38:7a:25:90:b8:f1:17:
         99:e5:db:0a:bc:3a:3f:0a:5e:87:00:1e:13:6a:14:79:48:34:
         8c:5b:39:88:48:3a:d0:7d:ae:f9:e7:c6:ac:59:6c:1c:48:c0:
         04:84:c4:00:ab:92:1e:78:84:82:69:d9:1a:c5:0d:3b:1b:7a:
         bb:ed:28:cc:94:03:19:c1:e3:3f:3d:a4:c0:7a:a6:78:69:d5:
         37:56:ba:c2:e6:b3:49:48:88:2f:fa:c1:c1:80:ff:73:cf:8c:
         24:84:1d:8c:73:52:aa:5d:f0:48:98:f2:19:3d:53:2a:c3:7d:
         60:07:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:29 2026 by rpki-client