This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cPMuKpTJmadwfZTv3qQwQgkYtLo.roa
File:                     cPMuKpTJmadwfZTv3qQwQgkYtLo.roa (raw, json)
Hash identifier:          Tpxle/FTI0MPTKN0HTxoabwwx1Er+oatWXBRDq2m4CM=
Subject key identifier:   70:F3:2E:2A:94:C9:99:A7:70:7D:94:EF:DE:A4:30:42:09:18:B4:BA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04B5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cPMuKpTJmadwfZTv3qQwQgkYtLo.roa
Signing time:             Thu 01 Jan 2026 01:36:13 +0000
ROA not before:           Thu 01 Jan 2026 01:36:13 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205 (0x4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:36:13 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=70F32E2A94C999A7707D94EFDEA430420918B4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:56:c5:c9:7c:08:a7:a3:df:20:9b:35:59:
                    a8:9d:36:a1:96:b9:f8:a4:c5:06:80:ca:86:b6:c2:
                    3e:92:48:03:6a:43:54:3c:c5:af:68:74:ad:bb:51:
                    43:0e:3d:43:25:d8:4a:28:15:3a:12:27:38:e7:90:
                    d5:1f:f7:22:a5:22:b8:86:e0:16:c4:29:15:70:c2:
                    b1:ac:24:f5:6b:92:d0:90:6f:b2:84:ef:c0:33:ae:
                    d6:25:e1:e9:62:56:95:8f:a6:e9:40:26:49:58:0d:
                    2b:b3:3e:49:48:90:97:3c:e6:9d:69:29:34:00:82:
                    51:a5:87:f7:74:c0:ca:f1:9d:90:05:a4:9d:64:c7:
                    73:05:52:78:8e:26:2e:a1:91:62:dc:d9:0d:b6:b9:
                    13:dc:7b:65:5d:e0:e4:6e:5e:fa:95:15:0b:ce:69:
                    fa:b3:28:e8:26:22:87:28:06:43:7f:5b:a9:c6:2d:
                    f1:6d:29:d0:14:8d:f0:66:d3:cc:4d:13:c6:63:48:
                    ea:55:b1:5e:cf:f0:f9:1c:98:c0:74:4a:4b:89:df:
                    d9:61:74:10:22:47:6f:ef:f6:19:91:ec:a9:86:a8:
                    b9:49:2c:4e:51:71:31:ba:c1:15:7e:e7:f6:f8:74:
                    c7:b4:37:1e:f1:db:ce:36:49:69:ac:a2:42:d0:95:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:2E:2A:94:C9:99:A7:70:7D:94:EF:DE:A4:30:42:09:18:B4:BA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cPMuKpTJmadwfZTv3qQwQgkYtLo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:6a:82:ed:cb:2e:dc:ab:8c:2f:8f:07:7b:b5:62:df:24:
         1d:03:97:a1:3e:94:53:d9:d6:6f:b4:57:b6:3d:fe:e0:7f:7a:
         3c:3c:de:0e:79:09:53:5d:c1:77:7a:ef:ec:47:96:ba:cc:ce:
         ea:2a:ea:a7:8a:f1:22:13:a7:dd:af:cb:11:62:8b:74:dd:44:
         07:04:96:8c:be:d5:32:50:c6:f6:50:12:16:23:71:cf:de:de:
         7d:c9:34:f3:99:b1:bc:46:3c:d2:9a:e4:eb:6b:5b:b1:04:07:
         87:a7:7d:b8:6c:f7:4d:b3:9f:af:e6:eb:b6:8e:bd:b6:44:05:
         9b:b0:62:68:d3:7c:15:f6:57:a0:58:10:7a:ef:46:21:b0:a0:
         6c:d7:eb:69:1d:c9:c0:3c:17:56:d2:0c:5b:63:e5:79:ff:a7:
         a4:f0:69:34:47:1f:90:8d:cb:6d:85:2c:0e:22:ee:f7:ea:6c:
         ed:7d:5f:34:86:cf:26:47:55:e5:2e:b4:b9:73:80:14:bb:1e:
         ae:73:c1:6d:51:79:53:ec:59:7e:3f:50:e8:80:6d:37:81:91:
         bf:0b:f7:6e:cb:ce:88:da:f3:08:17:7c:6b:03:9c:60:79:bc:
         73:6b:d1:fc:39:1a:70:18:07:57:82:0c:8e:1d:4d:94:79:84:
         c8:88:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:28 2026 by rpki-client