This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/96KJXI_aYT_vU_YJiWg-k8LJRMQ.roa
File:                     96KJXI_aYT_vU_YJiWg-k8LJRMQ.roa (raw, json)
Hash identifier:          1uxFN3Iuh+hjJzp6tf4Jkv1qZ2zutz0kwXRmwqGkxdI=
Subject key identifier:   F7:A2:89:5C:8F:DA:61:3F:EF:53:F6:09:89:68:3E:93:C2:C9:44:C4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04C5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/96KJXI_aYT_vU_YJiWg-k8LJRMQ.roa
Signing time:             Thu 01 Jan 2026 01:42:36 +0000
ROA not before:           Thu 01 Jan 2026 01:42:36 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        210.229.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:42:36 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F7A2895C8FDA613FEF53F60989683E93C2C944C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:dd:be:73:fd:a0:94:a4:d6:04:56:fc:aa:
                    08:b1:9f:fa:94:61:94:d9:a1:de:fe:33:9a:2d:24:
                    72:cf:6c:08:3a:1a:96:56:74:94:0d:9e:63:a4:4d:
                    e2:ba:21:80:2c:59:bc:67:c5:7e:d9:86:e5:a6:49:
                    b8:17:a8:0f:09:8f:9a:a6:8c:a0:9b:d4:69:b5:f5:
                    33:57:77:fa:9a:b4:7b:29:0d:85:df:f2:81:9d:51:
                    f8:3c:22:44:6c:7b:b6:07:18:f2:ce:d1:04:94:cd:
                    29:2c:7d:f0:cf:66:e9:f4:f7:e6:2a:b3:9b:b4:00:
                    5e:d1:0b:39:ed:e0:05:3c:7a:8c:f4:06:6e:08:7e:
                    81:85:2c:14:9b:5d:f9:e6:6d:fc:32:2d:88:49:5e:
                    b8:e0:fd:f6:34:66:6b:c3:70:c0:2e:3f:2c:87:60:
                    5c:fc:12:ea:eb:42:c2:18:9c:5a:7c:bf:9a:4b:26:
                    e1:0e:7a:8f:e8:c7:1a:24:2c:66:53:d1:57:d5:03:
                    d9:3e:e6:78:db:a7:bf:11:0c:4a:c1:aa:c1:89:f6:
                    7d:e5:35:bb:9f:f5:dc:ef:96:f1:76:12:3a:68:fe:
                    70:82:b0:4c:82:8b:0c:eb:8b:37:4c:7e:6a:07:77:
                    dd:36:27:09:11:6a:c8:cd:2b:d6:1d:b3:8d:37:84:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A2:89:5C:8F:DA:61:3F:EF:53:F6:09:89:68:3E:93:C2:C9:44:C4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/96KJXI_aYT_vU_YJiWg-k8LJRMQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:ef:a2:8a:d0:af:4a:00:8d:be:e2:7c:91:0f:a4:03:f1:
         79:e3:54:25:b5:0e:3c:c5:db:b8:6f:28:99:cb:89:2f:c9:0b:
         2d:c9:f9:1c:c0:30:6b:72:42:dc:c2:e6:22:40:f5:e7:c3:95:
         f2:b9:f9:07:10:85:45:f3:30:22:5a:64:66:96:5b:2d:00:26:
         fc:2b:22:04:45:8a:cc:2f:f9:0b:bd:44:6e:6c:38:71:4d:d0:
         6b:25:5c:5a:b8:e1:e1:e7:4e:53:95:3d:02:d9:4f:bd:79:41:
         c2:b9:59:51:f5:2f:02:c9:13:8c:0c:06:c6:63:90:1d:90:3b:
         5e:61:8f:b5:5f:f8:d7:f0:10:e1:53:9e:3d:ef:5d:d3:d4:b8:
         05:3a:15:f1:a4:c1:dd:bd:2f:08:2a:4f:fe:e0:b2:f7:b5:1a:
         1c:eb:97:fc:24:a2:f2:bf:f1:f9:48:9f:31:20:ea:cc:1e:53:
         d6:34:ac:cb:fb:23:0c:70:df:d9:60:90:97:d0:2e:6a:15:98:
         71:af:e9:85:83:44:cc:cd:1b:ef:78:ad:e5:71:06:44:13:7b:
         da:a4:39:f0:70:87:1b:5d:0e:01:95:3e:51:7e:5d:4d:2c:fc:
         a7:5c:5f:8f:c8:37:76:4f:8f:1d:dd:c4:e8:81:a6:05:26:30:
         e3:1b:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:23 2026 by rpki-client