This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7PsFDAG4x_jjwsT2G_yh8xWR8Qo.roa
File:                     7PsFDAG4x_jjwsT2G_yh8xWR8Qo.roa (raw, json)
Hash identifier:          HCO3XXBQuzm2eH1QK+KmyboZ1rz75xU7IimPBgNZka8=
Subject key identifier:   EC:FB:05:0C:01:B8:C7:F8:E3:C2:C4:F6:1B:FC:A1:F3:15:91:F1:0A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04BB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7PsFDAG4x_jjwsT2G_yh8xWR8Qo.roa
Signing time:             Thu 01 Jan 2026 01:36:17 +0000
ROA not before:           Thu 01 Jan 2026 01:36:17 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:36:17 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=ECFB050C01B8C7F8E3C2C4F61BFCA1F31591F10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:1b:57:99:02:3e:97:64:a1:cc:05:3b:41:
                    47:fc:67:62:c7:07:40:72:55:5f:2e:13:14:b3:26:
                    33:18:ad:e5:25:20:55:07:47:ac:e0:5c:eb:c5:05:
                    38:84:3a:5b:61:65:cf:1b:24:71:fd:ae:ed:01:7b:
                    9a:d2:01:8a:da:fb:97:45:f9:a8:37:79:63:af:e7:
                    37:1c:b9:e4:4e:45:d5:a6:83:df:ca:a8:8c:0a:4b:
                    67:72:02:82:92:92:2b:e9:ba:c7:40:3b:e4:5d:f8:
                    2d:bf:2b:23:a3:71:3a:24:ad:ce:91:e9:86:37:23:
                    99:58:6c:be:b0:a1:6c:25:73:ee:00:25:e0:a3:eb:
                    da:6e:04:ea:2f:f9:c4:ad:61:f5:75:b3:e4:5c:53:
                    6c:c3:af:7e:2a:7a:24:e9:56:ff:2f:ca:28:83:99:
                    e6:7c:a9:fb:46:08:52:a0:68:83:28:15:84:09:03:
                    22:9a:e0:c7:f4:86:07:ad:50:21:64:4f:71:57:70:
                    3f:7b:fa:75:70:1a:cb:95:fe:15:1d:eb:3a:c6:61:
                    28:b3:49:1b:00:97:92:a6:6e:fc:da:49:a6:25:08:
                    48:3b:88:74:6d:4f:43:d6:a9:63:63:96:c1:95:0d:
                    fe:c7:d0:37:58:d7:61:44:b3:ec:7f:81:a0:5f:59:
                    54:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FB:05:0C:01:B8:C7:F8:E3:C2:C4:F6:1B:FC:A1:F3:15:91:F1:0A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7PsFDAG4x_jjwsT2G_yh8xWR8Qo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:c6:16:27:0a:8f:bd:01:34:18:75:e0:83:a4:3c:a8:66:09:
         cd:0c:a0:a9:90:9f:6e:b2:bf:59:5a:f3:05:a9:93:e8:5a:a2:
         cf:b2:8d:96:c1:95:bc:1d:51:ea:8c:38:fa:8b:2b:d3:e5:f1:
         fa:f9:b9:bb:ae:72:77:77:93:d4:28:b8:1d:84:1b:7a:a6:29:
         2d:03:46:b8:66:5b:8c:33:9b:91:e2:01:bd:9b:1a:b5:f8:dc:
         9f:d4:8c:2d:f5:34:28:e9:a2:ad:20:19:95:23:e9:93:d2:92:
         cf:e0:4a:f2:f4:3c:3a:89:c3:08:d4:88:a4:9f:bd:a9:3e:bd:
         10:e1:a1:78:b5:27:05:a0:2b:b0:37:70:42:49:98:f9:86:0e:
         60:7e:3d:32:ae:13:d6:fa:8f:53:0f:b9:d4:79:6c:8d:a2:b2:
         11:72:e9:9c:c3:b9:21:3e:e7:c7:3b:1b:f9:98:31:e5:6b:e6:
         41:c8:26:64:22:4f:56:d7:88:58:d2:d9:76:26:05:09:bc:12:
         86:90:72:ec:0f:5d:ec:b4:15:f0:19:c5:0e:82:f4:12:0d:06:
         7d:04:d0:d8:2a:de:78:44:71:51:49:4b:f0:3a:96:24:6b:34:
         75:a6:6f:cf:33:ee:40:b4:4b:3e:3c:e9:c7:b6:a6:bc:d4:27:
         48:7d:6e:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAxMDEw
MTM2MTdaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVDRkIwNTBDMDFCOEM3
RjhFM0MyQzRGNjFCRkNBMUYzMTU5MUYxMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5eBtXmQI+l2ShzAU7QUf8Z2LHB0ByVV8uExSzJjMYreUlIFUH
R6zgXOvFBTiEOlthZc8bJHH9ru0Be5rSAYra+5dF+ag3eWOv5zccueRORdWmg9/K
qIwKS2dyAoKSkivpusdAO+Rd+C2/KyOjcTokrc6R6YY3I5lYbL6woWwlc+4AJeCj
69puBOov+cStYfV1s+RcU2zDr34qeiTpVv8vyiiDmeZ8qftGCFKgaIMoFYQJAyKa
4Mf0hgetUCFkT3FXcD97+nVwGsuV/hUd6zrGYSizSRsAl5KmbvzaSaYlCEg7iHRt
T0PWqWNjlsGVDf7H0DdY12FEs+x/gaBfWVSvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU7PsFDAG4x/jjwsT2G/yh8xWR8QowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzdQc0ZEQUc0eF9qandzVDJHX3loOHhXUjhRby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAO27DgwDQYJKoZIhvcNAQELBQADggEBAITGFicKj70BNBh14IOkPKhmCc0M
oKmQn26yv1la8wWpk+haos+yjZbBlbwdUeqMOPqLK9Pl8fr5ubuucnd3k9QouB2E
G3qmKS0DRrhmW4wzm5HiAb2bGrX43J/UjC31NCjpoq0gGZUj6ZPSks/gSvL0PDqJ
wwjUiKSfvak+vRDhoXi1JwWgK7A3cEJJmPmGDmB+PTKuE9b6j1MPudR5bI2ishFy
6ZzDuSE+58c7G/mYMeVr5kHIJmQiT1bXiFjS2XYmBQm8EoaQcuwPXey0FfAZxQ6C
9BINBn0E0Ngq3nhEcVFJS/A6liRrNHWmb88z7kC0Sz486ce2przUJ0h9bnk=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:31 2026 by rpki-client