This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bKKNpFBWCo0Gl-mY1h6SxPZJL_s.roa
File:                     bKKNpFBWCo0Gl-mY1h6SxPZJL_s.roa (raw, json)
Hash identifier:          6T9+cmx37J1o4q0TiYe+GP6OOp29DNOlxlRaQGG+vKU=
Subject key identifier:   6C:A2:8D:A4:50:56:0A:8D:06:97:E9:98:D6:1E:92:C4:F6:49:2F:FB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04BD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bKKNpFBWCo0Gl-mY1h6SxPZJL_s.roa
Signing time:             Thu 01 Jan 2026 01:36:17 +0000
ROA not before:           Thu 01 Jan 2026 01:36:17 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        202.75.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213 (0x4bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:36:17 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=6CA28DA450560A8D0697E998D61E92C4F6492FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:cf:af:68:f5:52:19:85:82:9a:3b:48:34:
                    ac:26:08:fc:f9:04:6a:96:b3:ed:3b:a7:b9:de:0e:
                    40:d8:bc:f8:c8:02:c9:69:a1:cf:1e:9a:36:08:41:
                    cb:0a:35:99:25:22:6b:93:13:88:b0:fa:0d:65:51:
                    3d:19:da:74:1f:81:90:03:5b:83:40:70:8d:2b:d4:
                    2e:67:3d:d5:8b:ef:b0:69:8b:51:3a:95:4a:3c:91:
                    64:8e:cf:0e:68:8d:6d:5b:db:31:e3:d8:65:3a:f2:
                    97:74:9d:3d:13:ad:ec:3c:b1:6a:77:ef:09:1f:9a:
                    b8:d9:78:e5:fd:5b:44:0c:41:41:91:6d:16:48:1a:
                    4f:26:20:52:db:a0:26:56:8f:59:11:03:f3:4c:32:
                    71:aa:5f:ba:55:3f:5c:85:89:59:31:96:d4:70:42:
                    e8:31:9a:57:7f:8f:c8:e6:c1:30:0b:c3:76:3c:89:
                    d4:1f:7b:2b:85:9b:e2:01:be:f3:35:c5:61:7a:a5:
                    e2:5a:48:d0:eb:bf:5e:8a:9a:45:3a:64:8d:25:56:
                    58:43:43:1c:63:ea:b8:d2:0f:17:43:2c:5c:7f:33:
                    4a:2d:da:26:d0:e7:82:48:cf:5d:ae:c0:2d:19:c2:
                    23:9c:d3:f0:e3:a5:7d:7b:dc:40:ee:03:41:41:4d:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A2:8D:A4:50:56:0A:8D:06:97:E9:98:D6:1E:92:C4:F6:49:2F:FB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bKKNpFBWCo0Gl-mY1h6SxPZJL_s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:6d:f9:eb:0c:90:77:24:ba:9c:18:bf:8c:21:ed:d3:ee:58:
         6a:10:75:2e:29:13:3d:d2:da:07:43:b7:67:9c:f3:5c:93:06:
         26:8d:5d:61:c4:87:d0:32:f6:bf:1c:fa:9a:e5:88:28:90:68:
         22:82:6e:44:78:b6:47:a6:f9:85:9d:73:36:fb:7e:16:a7:88:
         22:d6:ba:75:5f:7b:0b:d1:65:83:97:ea:f3:a3:34:38:0c:8a:
         f0:47:31:05:ff:5d:14:b0:bb:fb:fa:84:1b:c8:0a:ab:e8:f8:
         ca:a5:e6:88:7f:e6:e6:f8:6c:af:2a:72:8e:28:cb:fe:a7:57:
         be:f9:09:9e:60:d9:2a:e1:11:f0:0d:30:e1:8b:f7:f6:64:1e:
         6e:76:a7:db:ba:82:a3:dd:85:95:df:10:9b:5d:a2:3c:08:66:
         69:2e:ad:cc:1e:0d:cd:5d:7d:12:71:38:f3:d4:34:43:74:63:
         89:6a:6c:4e:13:b0:15:9b:10:11:54:4d:02:02:a9:13:da:75:
         a6:f1:a4:66:4f:31:6b:9c:f2:18:14:b9:8e:9a:5f:ba:4f:88:
         b0:17:a3:3a:30:b0:2d:03:32:51:6d:30:e3:ac:0a:1b:b2:73:
         1e:46:97:47:b8:8d:6a:2e:51:5d:03:35:f8:0d:32:18:b6:bd:
         2e:86:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:25 2026 by rpki-client