This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/x2yfDUBiKL8BWg-mSugvyZp4VW0.roa
File:                     x2yfDUBiKL8BWg-mSugvyZp4VW0.roa (raw, json)
Hash identifier:          GmAxVF1kLQZ/n/OYz2ZT8D7UOrVuJSgbwRmGxtmxTQ0=
Subject key identifier:   C7:6C:9F:0D:40:62:28:BF:01:5A:0F:A6:4A:E8:2F:C9:9A:78:55:6D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04BE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/x2yfDUBiKL8BWg-mSugvyZp4VW0.roa
Signing time:             Thu 01 Jan 2026 01:36:18 +0000
ROA not before:           Thu 01 Jan 2026 01:36:18 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        203.181.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan  1 01:36:18 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=C76C9F0D406228BF015A0FA64AE82FC99A78556D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:85:91:da:49:bc:17:31:c0:89:22:51:c4:60:
                    20:0f:7a:df:e1:0a:b7:03:18:56:3d:40:5a:97:f2:
                    d0:4b:8d:63:34:6d:ef:49:22:82:26:3b:f1:7b:74:
                    53:3b:50:9d:a3:64:78:af:50:62:31:4b:b8:eb:ed:
                    fa:f2:99:57:74:1f:e7:a9:80:bf:3c:a2:9e:e8:3d:
                    be:f5:56:9b:1a:5e:83:f2:fc:f5:e3:11:14:d6:e8:
                    89:bd:03:1e:1f:aa:29:b2:3a:50:6b:c1:6e:b9:23:
                    28:5f:35:5d:ae:c4:7e:01:97:52:99:0b:b1:ff:19:
                    ff:27:4f:d6:48:80:cb:c6:e8:4c:8f:78:bb:db:37:
                    b8:9a:82:8a:71:bd:bb:9c:58:49:1d:cc:3c:05:ff:
                    d5:c0:31:84:9a:54:2f:33:a5:58:80:05:4e:bc:f9:
                    49:3c:0d:f7:8c:72:07:56:52:41:8e:97:ec:be:80:
                    05:fb:2b:7f:2d:44:37:dd:b9:8a:9c:73:ec:83:c9:
                    2f:9c:33:14:22:49:7e:e8:b8:39:db:73:5c:88:dd:
                    32:33:49:63:f7:fb:1f:b5:c8:da:91:50:70:92:44:
                    7a:51:6d:a3:3b:25:d7:03:d5:4d:87:2e:e9:d3:89:
                    e8:94:9a:61:c2:96:d9:f4:9c:d5:c9:ff:89:d4:5d:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6C:9F:0D:40:62:28:BF:01:5A:0F:A6:4A:E8:2F:C9:9A:78:55:6D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/x2yfDUBiKL8BWg-mSugvyZp4VW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:15:6c:e3:a1:04:bb:5b:05:ca:cf:bd:34:fb:3a:9d:5d:4d:
         00:9b:f7:69:58:50:d9:4b:5b:4e:92:d6:98:40:34:3e:f5:00:
         f4:67:2e:25:0f:4a:f2:34:2b:e7:31:a0:9d:05:71:f5:be:de:
         53:ec:c0:bb:a7:e0:9a:3a:67:3c:3f:16:b0:f6:f0:40:c1:4f:
         7e:a4:29:14:0c:b7:6c:2d:c9:bd:da:af:f6:fa:85:c6:19:cf:
         3e:27:cf:2e:45:ef:ec:ae:ff:fb:4b:0e:bb:19:82:d4:b4:a4:
         9d:69:5c:66:eb:91:29:a2:d4:8d:41:39:fc:11:11:e8:d2:c8:
         b4:23:32:35:17:1e:ac:66:07:a5:70:06:dc:81:53:90:5b:93:
         1c:a6:cc:3e:24:0b:2f:ae:8a:55:2c:d1:7b:a7:93:83:80:c3:
         f8:85:bf:4c:cc:c3:34:7d:e4:10:d7:99:6f:4e:20:ce:c6:a7:
         ff:e1:7f:75:e9:06:2a:7e:a1:a5:08:df:ee:81:ab:49:a1:87:
         58:93:c3:d7:ac:3a:60:c2:e8:b5:00:c0:50:07:74:3c:6f:2e:
         f1:c3:3f:f5:d7:94:18:71:9d:23:71:6d:b5:6b:fc:df:d7:b3:
         33:f9:89:15:1e:82:42:b5:e8:1a:c7:df:b6:64:ca:6f:9a:95:
         bd:19:ee:23
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAxMDEw
MTM2MThaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3NkM5RjBENDA2MjI4
QkYwMTVBMEZBNjRBRTgyRkM5OUE3ODU1NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVhZHaSbwXMcCJIlHEYCAPet/hCrcDGFY9QFqX8tBLjWM0be9J
IoImO/F7dFM7UJ2jZHivUGIxS7jr7frymVd0H+epgL88op7oPb71VpsaXoPy/PXj
ERTW6Im9Ax4fqimyOlBrwW65IyhfNV2uxH4Bl1KZC7H/Gf8nT9ZIgMvG6EyPeLvb
N7iagopxvbucWEkdzDwF/9XAMYSaVC8zpViABU68+Uk8DfeMcgdWUkGOl+y+gAX7
K38tRDfduYqcc+yDyS+cMxQiSX7ouDnbc1yI3TIzSWP3+x+1yNqRUHCSRHpRbaM7
JdcD1U2HLunTieiUmmHCltn0nNXJ/4nUXbp5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUx2yfDUBiKL8BWg+mSugvyZp4VW0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3gyeWZEVUJpS0w4QldnLW1TdWd2eVpwNFZXMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHLtVIwDQYJKoZIhvcNAQELBQADggEBABcVbOOhBLtbBcrPvTT7Op1dTQCb
92lYUNlLW06S1phAND71APRnLiUPSvI0K+cxoJ0FcfW+3lPswLun4Jo6Zzw/FrD2
8EDBT36kKRQMt2wtyb3ar/b6hcYZzz4nzy5F7+yu//tLDrsZgtS0pJ1pXGbrkSmi
1I1BOfwREejSyLQjMjUXHqxmB6VwBtyBU5BbkxymzD4kCy+uilUs0Xunk4OAw/iF
v0zMwzR95BDXmW9OIM7Gp//hf3XpBip+oaUI3+6Bq0mhh1iTw9esOmDC6LUAwFAH
dDxvLvHDP/XXlBhxnSNxbbVr/N/XszP5iRUegkK16BrH37Zkym+alb0Z7iM=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:22 2026 by rpki-client