This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w-SUMlo5AZofkROcSzVADS5ZI4c.roa
File:                     w-SUMlo5AZofkROcSzVADS5ZI4c.roa (raw, json)
Hash identifier:          7Mj8utptcBYTAlu+FuVJyIV7/j77vg/v/q1yf2cZXn4=
Subject key identifier:   C3:E4:94:32:5A:39:01:9A:1F:91:13:9C:4B:35:40:0D:2E:59:23:87
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1039
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w-SUMlo5AZofkROcSzVADS5ZI4c.roa
Signing time:             Thu 01 Jan 2026 01:51:50 +0000
ROA not before:           Thu 01 Jan 2026 01:51:50 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4153 (0x1039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:51:50 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=C3E494325A39019A1F91139C4B35400D2E592387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:e0:5f:06:e2:c1:00:cf:9e:f1:05:52:1b:
                    0b:38:9e:b0:57:75:58:32:45:76:76:fd:14:61:cc:
                    eb:e0:56:58:a9:b7:47:b6:78:c4:af:c4:c0:6e:b4:
                    63:92:6d:61:08:6f:c5:4d:4e:36:b6:48:db:64:d2:
                    aa:3d:18:57:4d:74:07:12:b3:6c:e9:d6:25:f6:43:
                    0b:9b:9b:40:f1:b4:f5:4d:a6:dc:f2:cd:07:e6:02:
                    b4:61:71:c3:4a:1d:44:e8:bc:db:e2:0a:d3:2c:1f:
                    12:a9:94:b1:ef:00:c3:e2:3f:52:ac:ac:04:71:6b:
                    77:e6:2c:02:b5:92:11:5f:db:64:cc:ac:64:63:f8:
                    1d:19:45:56:16:dc:13:3e:7d:17:86:52:e8:ed:2d:
                    a2:4f:e9:75:80:aa:0f:2e:fd:1b:1d:4a:b8:78:c3:
                    02:08:91:ab:26:a2:fd:56:d1:c9:0f:9b:75:2e:72:
                    bf:91:87:85:85:ae:d3:1e:e9:46:6f:ca:44:01:22:
                    7e:29:67:27:85:f2:96:ae:64:20:4d:3a:a0:5a:59:
                    7e:44:4a:50:9a:e1:4d:38:3d:88:e8:63:ad:20:15:
                    45:38:36:d3:0d:33:57:4d:67:72:68:97:ae:f4:f4:
                    3f:3d:24:8d:87:30:c6:27:46:c8:5b:e3:a6:31:b7:
                    7d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E4:94:32:5A:39:01:9A:1F:91:13:9C:4B:35:40:0D:2E:59:23:87
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w-SUMlo5AZofkROcSzVADS5ZI4c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e2:de:e9:30:7c:2d:72:8f:14:b7:3c:77:ce:3d:e4:a7:a6:37:
         08:b3:29:fb:d0:1a:00:3e:e2:ab:d9:cb:db:d6:24:6a:ff:3c:
         3d:4b:a2:69:7c:bb:31:8a:7d:11:be:c3:dd:7b:23:c3:03:35:
         dd:10:e6:4c:4b:eb:0b:7d:31:6f:45:41:a6:34:67:f5:0f:97:
         e1:ac:96:ba:62:0d:00:0f:8e:71:93:a9:fa:fb:51:63:4d:cf:
         43:2a:e7:ae:01:98:14:d7:8c:c3:0c:c1:f4:4f:20:ff:10:2b:
         33:d3:65:03:bb:20:37:ed:98:e5:d7:c8:ef:92:86:0d:20:46:
         ca:9c:f7:6b:c1:d9:20:c5:6c:14:66:de:cd:66:d1:27:81:db:
         98:17:17:6a:88:91:34:a4:e5:73:76:05:81:6f:86:41:ac:35:
         bf:22:42:3f:c8:74:b7:99:8a:08:87:ca:6f:74:9d:ab:34:2c:
         21:ae:b4:10:a9:e0:4c:f9:9e:a2:16:8b:2f:64:9c:ae:3f:ff:
         06:f3:c1:4e:06:c3:89:a1:f8:31:36:2e:42:e3:17:3c:64:d3:
         e7:51:18:93:a0:40:0d:91:76:95:cd:c3:c1:44:16:d1:99:20:
         02:4d:75:79:a5:0c:2e:48:22:19:2a:5e:35:97:93:29:01:de:
         8a:f0:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:43 2026 by rpki-client