This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/WcD9uIJoU9-xu-EamL_azXO257A.roa
File:                     WcD9uIJoU9-xu-EamL_azXO257A.roa (raw, json)
Hash identifier:          5MIXbAZQNwJaVJkBy2CR8yYQnWZ31b2JM3dILhTaVT0=
Subject key identifier:   59:C0:FD:B8:82:68:53:DF:B1:BB:E1:1A:98:BF:DA:CD:73:B6:E7:B0
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       3256
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/WcD9uIJoU9-xu-EamL_azXO257A.roa
Signing time:             Thu 01 Jan 2026 01:30:25 +0000
ROA not before:           Thu 01 Jan 2026 01:30:25 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7671
IP address blocks:        219.111.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12886 (0x3256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: Jan  1 01:30:25 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=59C0FDB8826853DFB1BBE11A98BFDACD73B6E7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:c7:b8:75:1b:d0:b8:3b:3b:0c:d3:6f:70:
                    9e:0e:e3:2a:81:c2:c5:f4:c2:ef:a1:7b:89:dc:06:
                    51:07:2c:a6:e4:fe:15:bb:a5:0d:28:20:76:bc:bd:
                    ee:7e:7c:06:de:6f:8c:22:48:16:a2:62:fb:fc:ed:
                    0f:ab:f9:5d:c7:a6:bc:ae:76:7c:92:0f:d7:c9:c8:
                    45:8f:5c:aa:3a:c8:61:dd:0e:cd:45:f6:87:22:ed:
                    03:b1:ee:55:b3:e4:d4:3c:4a:20:66:a2:e7:88:90:
                    72:a0:2f:e7:a1:0b:5c:e0:ec:c5:18:16:fc:ba:2e:
                    ae:b9:45:dc:d5:bc:8d:d2:de:52:23:bd:27:d5:3e:
                    c4:66:3d:a5:6f:92:33:f9:55:25:5a:8d:b6:7f:37:
                    bf:28:e3:2b:7b:d3:ec:f1:58:14:1b:17:1e:c6:bc:
                    7a:54:62:ed:8c:77:f5:f3:36:ea:db:87:f8:30:b3:
                    ca:11:91:dc:f7:b4:36:3e:2f:25:b0:53:ed:29:23:
                    a4:39:34:31:d6:db:81:55:41:58:45:56:fb:f5:58:
                    35:41:cc:96:c1:e6:6b:46:c3:2d:71:79:50:d9:fb:
                    f2:88:2e:17:05:87:f2:2f:36:c2:0d:28:47:f5:a0:
                    09:02:b8:e8:92:97:db:f7:1d:58:e0:7b:ac:aa:71:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C0:FD:B8:82:68:53:DF:B1:BB:E1:1A:98:BF:DA:CD:73:B6:E7:B0
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/WcD9uIJoU9-xu-EamL_azXO257A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:da:f8:62:62:61:48:f3:74:c6:14:9e:10:d3:51:09:1a:7e:
         fe:a7:16:0a:54:2c:e4:8b:ae:d7:3d:28:bc:6d:52:36:77:49:
         24:54:7d:ac:5e:7f:a8:a5:65:79:f1:d8:3a:db:98:c5:32:ef:
         3d:bc:22:cb:bd:c5:a8:80:28:95:4b:0b:b3:df:2d:9d:7b:43:
         53:6f:2a:02:14:6a:a2:e1:c0:ce:8d:6c:6e:7f:cc:11:8f:26:
         44:b4:ab:a8:0a:f3:91:31:f1:d1:a3:49:48:fa:d3:29:0c:fe:
         49:0a:e7:c4:b7:7f:98:bd:c2:3f:98:0d:f2:80:aa:52:1b:ae:
         36:cb:ef:82:c7:6e:3f:fd:23:b0:6d:61:68:d3:c6:31:94:36:
         97:a4:54:42:e5:83:98:93:20:ed:b5:f5:8b:a4:e0:ad:fc:28:
         6d:6f:63:5f:59:e1:33:2d:fe:be:26:1f:3b:3d:5d:12:ad:50:
         f7:c7:ee:df:9f:f5:c3:66:c2:4a:8b:9b:5e:4d:b6:b6:0f:e4:
         f0:71:77:29:9b:b2:64:f1:09:8a:60:da:84:d8:3f:c9:59:ec:
         aa:f6:45:43:03:09:d7:7a:59:a4:2e:4e:8c:4c:b3:63:af:ed:
         ef:c3:3f:1e:42:b4:14:04:d9:ae:61:f1:1b:9d:d5:c5:59:89:
         a1:ef:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:40:42 2026 by rpki-client