This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vkwBgtwvJdiU0JCUrpn6fCZ_wwM.roa
File:                     vkwBgtwvJdiU0JCUrpn6fCZ_wwM.roa (raw, json)
Hash identifier:          ZTfqp/6nddLjE6K++3UxRU5yy2DjvOkg2C0Qlirxt5k=
Subject key identifier:   BE:4C:01:82:DC:2F:25:D8:94:D0:90:94:AE:99:FA:7C:26:7F:C3:03
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04AD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vkwBgtwvJdiU0JCUrpn6fCZ_wwM.roa
Signing time:             Thu 01 Jan 2026 01:36:09 +0000
ROA not before:           Thu 01 Jan 2026 01:36:09 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        180.131.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:36:09 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=BE4C0182DC2F25D894D09094AE99FA7C267FC303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:05:1f:1c:62:10:fe:79:81:80:90:80:e2:
                    52:b0:63:84:c1:59:ca:61:29:91:ff:fc:02:c3:1b:
                    04:3c:15:98:2d:76:31:79:02:ca:d2:23:1b:7f:d0:
                    b4:2e:14:b3:45:13:66:12:2f:bf:a3:df:f4:f1:9c:
                    18:2a:43:d2:9d:72:a5:5a:7f:33:22:b9:2f:ea:34:
                    7d:96:a4:7e:17:6e:7a:23:ac:02:04:39:bb:d8:38:
                    ac:e1:09:54:7e:b7:3c:c2:f5:1f:6c:55:df:67:6f:
                    d1:b3:a8:b7:85:e0:17:40:e3:6f:1b:80:57:21:00:
                    18:f2:1f:dc:51:35:e9:51:69:bd:dc:55:e6:dc:fe:
                    1b:b6:90:31:de:05:76:85:4a:4a:cf:4c:df:33:b5:
                    3d:71:c2:90:f5:99:64:76:55:64:1f:e0:bb:04:3d:
                    64:bc:ea:6c:e5:8d:ab:5a:dd:7c:e1:a0:f7:b2:82:
                    13:9f:d1:92:1d:5d:8a:9a:67:05:15:a7:9f:d6:ba:
                    52:c4:79:23:c0:e9:85:9a:a7:a3:d3:38:c0:07:17:
                    1a:0b:bc:a6:33:65:38:39:ca:54:ba:41:bb:bc:97:
                    5e:b6:6f:8a:d6:ee:85:4a:69:36:0a:99:84:5a:08:
                    b7:b1:c2:b1:a0:79:02:b3:da:21:2a:df:54:a9:35:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4C:01:82:DC:2F:25:D8:94:D0:90:94:AE:99:FA:7C:26:7F:C3:03
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vkwBgtwvJdiU0JCUrpn6fCZ_wwM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:2f:0c:ac:d1:f8:01:f1:f8:f8:af:84:a6:72:b3:a5:3a:94:
         82:f5:2b:fa:3b:4c:79:b4:9f:f8:31:a1:77:a3:ab:a5:bc:57:
         b5:31:5e:9f:19:a8:22:fd:3c:92:1c:bc:55:df:27:56:28:ca:
         f2:02:63:b0:30:65:e6:67:ac:c4:bb:83:59:95:b2:57:83:a6:
         89:60:9d:6d:27:84:7e:9e:5f:23:e2:f1:84:7f:e6:b6:88:a4:
         e8:85:79:83:cb:f7:6b:c5:c2:26:aa:f3:ab:7f:66:a6:50:14:
         3d:62:87:2c:34:63:7e:f1:70:e7:15:a1:85:73:4a:51:e6:ca:
         58:51:fc:bf:85:ab:44:1e:ef:f1:33:e9:22:20:7b:62:ee:2c:
         91:02:c9:f4:27:40:b4:a4:43:80:23:03:58:4c:f5:33:27:bb:
         21:e8:df:a3:6f:a7:e2:9e:12:9d:5d:41:be:b4:ce:a6:e6:d2:
         eb:d9:67:8a:81:46:65:1d:5c:d7:17:33:be:d1:c2:68:35:c9:
         b2:3a:95:d5:0f:15:35:0c:13:ab:99:c6:65:e2:08:01:3c:a0:
         49:ef:44:74:f4:1a:59:f7:bf:cb:d6:21:7c:a5:ae:5c:1a:0d:
         95:d2:a5:88:10:23:76:db:b6:a3:75:0f:d0:7e:c9:2c:09:d3:
         07:92:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:26 2026 by rpki-client