This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ss4CO8F4L8prDYfvlSkwWo0gGsw.roa
File:                     Ss4CO8F4L8prDYfvlSkwWo0gGsw.roa (raw, json)
Hash identifier:          QQlavScbC7kbtML9nLU8FeZHCFP7KqY67S3upUc2RM0=
Subject key identifier:   4A:CE:02:3B:C1:78:2F:CA:6B:0D:87:EF:95:29:30:5A:8D:20:1A:CC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04B6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ss4CO8F4L8prDYfvlSkwWo0gGsw.roa
Signing time:             Thu 01 Jan 2026 01:36:14 +0000
ROA not before:           Thu 01 Jan 2026 01:36:14 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:36:14 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4ACE023BC1782FCA6B0D87EF9529305A8D201ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:af:1d:c3:94:56:48:df:e0:6c:05:7e:8a:
                    fd:3e:fc:18:f0:0e:ab:47:28:fe:a6:4b:a7:04:44:
                    97:c2:ee:5d:3f:8f:1b:d7:4c:32:91:f9:68:0f:f2:
                    46:e5:99:64:af:e1:d3:1d:4a:98:e5:72:f8:c4:f1:
                    ce:fe:ad:59:ed:f2:80:4a:ed:f5:ef:aa:85:7a:a8:
                    9b:f8:ce:e7:8c:ff:63:d7:a0:31:30:7d:f9:87:46:
                    c8:29:33:c8:f9:59:b8:18:10:a0:48:29:e9:8f:9b:
                    0b:fd:3e:f6:ec:7a:75:cf:e4:89:75:1c:12:31:6d:
                    a4:91:88:08:ba:c9:5d:c9:83:36:34:96:cd:99:27:
                    dd:a5:6c:f4:34:e2:21:c5:27:c4:67:70:55:66:c0:
                    de:46:a1:86:c6:7c:66:0b:40:f8:98:b3:ac:88:80:
                    a6:74:89:5a:32:53:2e:17:52:3a:e1:8b:60:14:de:
                    79:64:b0:20:92:08:13:90:4f:6c:92:f2:12:a3:b4:
                    16:c0:a1:73:a6:1e:71:98:f8:ff:57:3e:1a:2b:d1:
                    3b:25:8b:7e:3c:ac:1c:59:0a:66:16:a8:b3:58:0b:
                    b7:b1:f8:f6:85:79:d6:64:32:41:29:f1:4a:72:c3:
                    b7:44:a1:bc:2a:0d:0e:d1:80:2a:fa:0c:e7:51:43:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CE:02:3B:C1:78:2F:CA:6B:0D:87:EF:95:29:30:5A:8D:20:1A:CC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ss4CO8F4L8prDYfvlSkwWo0gGsw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:ac:0a:6d:2d:eb:ac:7e:e3:a4:4b:b3:5f:c8:61:3d:ad:
         02:16:3a:7a:e5:6e:1c:20:8a:55:5e:54:65:56:38:82:ff:7b:
         e4:4d:fe:87:d5:e5:22:aa:9e:b5:50:9e:f0:2a:76:8c:b1:96:
         6e:da:40:13:48:28:6a:59:36:bd:17:aa:d6:b5:f3:23:5b:e0:
         6a:5e:3d:a8:ee:3d:fe:d4:c0:5c:c9:ee:0c:09:70:58:1d:4a:
         4f:77:82:66:69:e7:f6:2b:38:0b:f2:d9:9d:75:ee:fc:bc:88:
         61:75:14:03:b7:18:bd:6d:17:65:7a:25:fb:2f:28:c1:2a:b4:
         a1:98:82:2c:9c:6b:44:f7:91:cb:78:6c:ae:20:16:ca:cf:0a:
         ff:0d:72:d2:57:05:c8:91:3e:f2:1f:86:b8:0a:4c:c3:1a:42:
         5d:22:30:fe:c2:62:01:41:67:42:d8:ba:81:32:0a:9a:3c:aa:
         8c:03:b8:9f:bc:50:6f:15:a0:2f:dc:b8:26:b3:91:9a:e6:79:
         2c:03:a4:73:bb:13:e2:3d:5c:9a:76:8c:c6:97:a2:79:fc:7f:
         cf:f4:a6:b4:80:47:84:be:e5:ad:f9:50:bd:50:ff:21:82:23:
         23:42:bf:2f:b0:81:31:38:98:07:f8:56:a2:3a:cd:7b:71:43:
         d3:45:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:21 2026 by rpki-client