This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gmJGu9nJDNhq2EIok0B0lXm0Tqc.roa
File:                     gmJGu9nJDNhq2EIok0B0lXm0Tqc.roa (raw, json)
Hash identifier:          TWzk+r4nWLoaYZanXPDnpqKk3fOSaRhTuKKIXnLFa+o=
Subject key identifier:   82:62:46:BB:D9:C9:0C:D8:6A:D8:42:28:93:40:74:95:79:B4:4E:A7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04B1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gmJGu9nJDNhq2EIok0B0lXm0Tqc.roa
Signing time:             Thu 01 Jan 2026 01:36:11 +0000
ROA not before:           Thu 01 Jan 2026 01:36:11 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:36:11 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=826246BBD9C90CD86AD842289340749579B44EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:a0:4d:23:27:78:04:1b:af:93:43:15:2e:
                    51:c2:e4:99:86:56:b5:7c:61:c7:8d:e5:bb:84:32:
                    67:60:96:ca:0d:8e:63:1c:36:60:67:6d:9f:dd:89:
                    d5:cd:a2:86:4e:02:3e:ca:ae:75:f2:9c:42:3d:6a:
                    0b:e7:9b:9c:12:fa:0f:69:1e:06:2b:7c:ed:37:44:
                    6e:84:43:98:20:34:eb:a9:3a:da:ea:aa:7e:f3:a7:
                    b9:cd:c6:6f:24:18:d3:59:bc:41:f0:21:ba:38:01:
                    1a:56:e2:2d:e5:b1:03:cd:51:3a:49:4c:45:ff:2b:
                    b4:cd:70:31:5c:48:06:01:e2:cd:60:4b:6c:51:0c:
                    fc:4f:bf:3c:35:bb:16:3d:db:a5:48:45:ec:be:f8:
                    a6:0f:51:ca:cd:a6:9f:25:07:e4:bd:f6:38:a3:65:
                    c1:04:5a:d2:df:1f:49:e4:25:f9:32:9f:14:01:07:
                    d8:40:f1:7f:c4:14:fc:67:3c:32:1f:ab:c4:9f:36:
                    b8:5e:8a:8a:69:29:1c:ba:6e:0d:6c:a3:cf:4c:28:
                    70:50:94:b9:b5:40:e9:f6:03:a1:b9:72:85:7a:d5:
                    64:dc:45:e6:23:10:6d:21:a3:bf:4e:4f:22:80:26:
                    9f:48:4f:b3:80:61:d3:12:1f:27:6a:42:00:a5:9e:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:62:46:BB:D9:C9:0C:D8:6A:D8:42:28:93:40:74:95:79:B4:4E:A7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gmJGu9nJDNhq2EIok0B0lXm0Tqc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:d5:8e:ee:69:2a:3b:fe:2b:07:c7:1e:8a:62:9e:fe:16:a8:
         57:69:79:dc:d1:d9:c4:ce:a4:c5:d3:24:69:87:90:c5:42:bf:
         35:1f:1b:cd:d4:36:06:4a:e3:27:b6:12:4a:1f:31:ab:13:16:
         d5:ba:c4:a1:e7:65:4d:3f:47:15:3f:32:b7:66:a5:7a:5d:ae:
         9e:2e:b1:a1:ec:a0:4e:cf:0b:c2:f0:a3:89:af:39:23:3c:28:
         3e:ac:bc:c4:2c:ef:6b:ea:46:45:e6:9c:b7:d1:f6:a6:40:af:
         a1:d3:15:e8:61:d2:a5:f3:f1:c0:27:21:e4:82:54:80:b2:60:
         01:56:cd:b2:42:63:a5:a4:39:f8:e6:98:0c:79:69:97:8f:bd:
         d1:46:35:40:83:04:b1:92:05:07:e9:45:2b:55:be:f8:f4:24:
         5e:11:07:10:02:33:81:c9:ca:35:ed:ed:13:7c:08:ec:e8:65:
         06:8e:87:1a:7c:c7:35:bc:4e:5c:a6:93:ab:58:73:fc:bc:cd:
         b2:b1:34:9f:cb:41:68:ee:3b:9d:e4:c6:84:ec:39:62:50:51:
         53:65:34:29:63:ac:16:90:cf:38:6b:eb:8a:43:5e:ef:76:db:
         db:b7:66:b8:4a:4a:bd:c8:b3:fc:e8:81:5f:3f:23:59:c3:71:
         19:35:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:08 2026 by rpki-client