This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/QBwTcMnUTyG9Ath3xPbfG_-SDvE.roa
File:                     QBwTcMnUTyG9Ath3xPbfG_-SDvE.roa (raw, json)
Hash identifier:          dWlsH+AbhaSRMDtJ1jNbTmiMW4wYVieb346tzF3/J2A=
Subject key identifier:   40:1C:13:70:C9:D4:4F:21:BD:02:D8:77:C4:F6:DF:1B:FF:92:0E:F1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04B8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QBwTcMnUTyG9Ath3xPbfG_-SDvE.roa
Signing time:             Thu 01 Jan 2026 01:36:14 +0000
ROA not before:           Thu 01 Jan 2026 01:36:14 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:36:14 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=401C1370C9D44F21BD02D877C4F6DF1BFF920EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:39:28:c6:1b:75:9b:6c:14:01:8a:38:1f:
                    37:be:0a:87:f8:1b:4d:67:fc:31:7b:74:5e:e2:a9:
                    5a:25:5b:f9:96:ba:96:79:8c:13:2a:7c:a3:f9:06:
                    c6:e2:70:4f:a7:a9:37:b9:30:29:ff:32:95:ae:17:
                    3c:ff:2e:34:ae:34:50:a8:2e:be:00:d9:ea:19:3d:
                    b2:6c:66:8b:60:23:55:0c:ae:47:2a:54:23:91:00:
                    44:e5:ad:67:4f:b4:41:3f:35:7b:f1:91:8c:8d:ff:
                    bc:be:bc:58:66:c3:ad:56:5a:62:c7:3f:6b:bd:c7:
                    22:37:e8:0c:5b:4a:6c:89:1e:f4:d0:98:07:bc:e7:
                    2d:bb:bd:b5:ac:0d:82:4c:9a:b4:53:2f:03:54:26:
                    c6:ea:77:e3:51:55:c9:ae:28:fa:f6:03:bb:43:94:
                    19:0e:4e:aa:fa:d3:92:3d:98:5e:cf:96:d5:66:32:
                    71:bf:00:02:b0:38:11:bb:0b:1f:ea:23:41:9e:df:
                    e2:98:42:71:77:46:91:8a:8f:17:96:ad:fd:b5:eb:
                    2c:f7:8c:f5:c0:d1:b2:17:35:21:08:f9:b6:8b:cf:
                    bf:ba:0e:2d:ff:f9:5e:6d:c2:04:95:9d:9c:b3:a1:
                    d6:05:8c:1f:b3:72:f8:a6:fc:73:cc:a3:0f:0f:34:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1C:13:70:C9:D4:4F:21:BD:02:D8:77:C4:F6:DF:1B:FF:92:0E:F1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QBwTcMnUTyG9Ath3xPbfG_-SDvE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:c5:7c:0a:63:c3:65:f0:b9:00:4d:6f:20:7b:98:3c:09:
         ed:c0:6b:fb:96:54:b1:ec:2f:f7:8f:50:00:d2:51:c4:d4:0e:
         cc:b5:2f:ee:9c:77:8e:21:3a:c5:fb:7a:8e:58:8b:df:db:33:
         c1:48:ba:9e:c0:87:e0:99:ae:b2:41:a1:37:b2:ea:9d:72:99:
         29:9b:c0:7e:46:9b:d1:83:25:d4:94:99:6e:dc:2b:a8:23:68:
         25:22:82:02:ab:02:44:1b:c1:e0:93:15:79:4f:43:ad:e3:f5:
         f8:7b:6e:4b:88:47:1c:ad:30:b6:a2:6f:a2:91:ca:49:af:fe:
         08:ac:99:e3:61:4b:c8:ab:30:7b:66:91:5b:dd:70:6c:fe:2f:
         93:4c:3e:66:0a:cd:d8:28:c9:72:72:c1:0f:71:3b:27:07:a6:
         df:05:e3:31:7b:21:da:e7:1e:5a:58:9c:09:96:9c:a2:8a:46:
         09:f6:0e:3b:b7:4d:64:34:ec:20:1e:c9:1e:6e:34:78:97:5b:
         4d:71:fe:88:84:8b:40:25:92:77:c6:11:29:ff:53:7d:dc:9c:
         58:d1:41:30:31:04:2d:a7:10:ed:35:11:86:d4:5e:d9:18:70:
         5a:d0:2d:86:59:eb:4e:83:d1:7f:50:70:11:f9:56:5f:8b:73:
         cc:c2:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:11 2026 by rpki-client