This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/g47fOdKbYJSWTMCEF6ID1EXhid8.roa
File:                     g47fOdKbYJSWTMCEF6ID1EXhid8.roa (raw, json)
Hash identifier:          mnYibFtF+CibTiRB6JHp3uKEGRZk881w+gzcQznanKk=
Subject key identifier:   83:8E:DF:39:D2:9B:60:94:96:4C:C0:84:17:A2:03:D4:45:E1:89:DF
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       3259
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/g47fOdKbYJSWTMCEF6ID1EXhid8.roa
Signing time:             Thu 01 Jan 2026 01:30:28 +0000
ROA not before:           Thu 01 Jan 2026 01:30:28 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     7671
IP address blocks:        202.62.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12889 (0x3259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: Jan  1 01:30:28 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=838EDF39D29B6094964CC08417A203D445E189DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:04:8a:94:d6:98:0d:69:ba:4a:1b:34:3a:
                    00:d0:4b:54:4a:bd:98:47:88:29:63:c7:0b:11:78:
                    f6:bc:84:ff:7a:39:12:e1:7e:ea:6b:e9:41:38:6e:
                    92:37:6a:22:75:06:96:a1:f0:76:25:ee:e7:71:f5:
                    53:5d:51:25:a2:31:22:4c:34:b9:06:c1:6d:84:d1:
                    4a:b9:89:37:c9:83:a1:9c:cc:71:b8:fb:a3:92:f5:
                    35:22:37:f6:e9:fa:2f:92:ab:30:9d:35:05:98:80:
                    82:81:5a:f9:4a:b7:e4:65:d3:b8:79:c1:e7:15:e0:
                    ef:ee:0e:e4:24:2a:83:82:ce:b6:69:d3:df:cf:9c:
                    87:9c:c5:e6:d6:c8:79:f0:ec:f2:0d:73:17:2e:ca:
                    d3:be:c2:cc:1a:fc:42:2f:b2:65:b4:02:21:c0:ba:
                    a3:b9:27:af:9a:b6:33:4d:d9:3b:52:58:3a:ac:2d:
                    88:a8:a2:27:f0:cb:b6:e7:37:c8:1e:5e:5f:3b:be:
                    86:14:0e:ab:6e:b7:1b:54:c5:ea:d1:bb:70:89:db:
                    f7:f8:af:b8:03:01:c2:2d:3c:32:e8:8a:f6:f0:eb:
                    a9:dd:a2:8a:27:11:52:b8:c7:c2:f1:8f:72:3b:5b:
                    7f:20:a3:40:d1:38:77:e5:87:13:97:9e:d5:b2:c8:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8E:DF:39:D2:9B:60:94:96:4C:C0:84:17:A2:03:D4:45:E1:89:DF
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/g47fOdKbYJSWTMCEF6ID1EXhid8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:2e:5c:52:e8:38:61:c1:42:c4:2b:5d:c0:d5:3c:e7:16:45:
         52:ca:b9:a7:be:47:1c:07:ab:b5:c6:10:2b:cd:8b:f5:8c:98:
         7b:16:da:38:84:07:ae:0d:c6:e8:76:cb:3b:52:e2:6c:06:17:
         ab:23:7c:4e:ca:7f:66:6e:3e:8d:95:1b:4f:14:5f:d7:c5:aa:
         1f:85:63:13:d8:2d:15:f1:4a:a0:52:58:67:59:bf:25:ce:ce:
         ed:c2:f0:2e:df:3b:53:45:8e:b1:13:61:64:13:b2:6a:c7:7d:
         4a:e5:84:a6:6b:a1:b1:4f:2f:c2:7e:66:09:fd:16:da:5c:5e:
         79:2e:85:b0:c9:ff:22:9c:c6:7d:ba:f2:ec:4b:76:0e:26:30:
         df:34:97:76:8d:0f:ac:14:be:44:ef:a4:a7:cc:9e:35:f2:aa:
         8b:50:20:75:fd:89:d0:7d:cc:61:16:7b:ee:ac:33:b2:b6:9f:
         39:9a:bc:27:35:49:34:dc:6b:e7:7c:60:b3:9a:c7:c6:77:62:
         6d:f1:6e:98:88:74:83:be:eb:bd:67:4e:4b:a1:80:3c:51:a6:
         e0:1c:c7:52:af:8f:2d:9b:4f:31:3c:c2:92:cf:38:c2:bb:82:
         4c:54:86:59:f9:0e:c1:eb:c1:2b:33:38:4b:f5:a8:69:06:01:
         d7:c5:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:50:18 2026 by rpki-client