This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/OQoRibwvdraQh-YIbN4-nhWW82k.roa
File:                     OQoRibwvdraQh-YIbN4-nhWW82k.roa (raw, json)
Hash identifier:          vGzWWZXYYXvohsh9jXq2cju9CwsrN7XU9qXbr+QLjXs=
Subject key identifier:   39:0A:11:89:BC:2F:76:B6:90:87:E6:08:6C:DE:3E:9E:15:96:F3:69
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       5D
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/OQoRibwvdraQh-YIbN4-nhWW82k.roa
Signing time:             Thu 01 Jan 2026 01:38:04 +0000
ROA not before:           Thu 01 Jan 2026 01:38:04 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     131934
IP address blocks:        180.94.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Jan  1 01:38:04 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=390A1189BC2F76B69087E6086CDE3E9E1596F369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ec:bc:82:5c:a4:92:97:76:44:10:7e:5e:43:
                    8c:62:d3:c0:55:a3:93:89:db:b2:47:9d:19:2b:37:
                    35:7e:26:78:37:8d:f8:ce:a9:15:b2:14:54:d0:a2:
                    18:95:9b:0a:07:e1:4a:f3:11:f6:35:a4:1a:51:70:
                    48:49:58:15:4e:50:dc:35:ed:f2:2a:78:7e:2d:d9:
                    7c:49:25:e7:40:c6:0d:b1:0b:a5:11:97:9d:98:d7:
                    5c:95:9b:9a:34:42:6c:ee:8c:7f:b6:ea:ee:37:84:
                    2f:40:e3:6b:3f:95:f6:3f:9e:2c:c1:d4:1b:2c:7c:
                    59:31:c9:7c:64:b4:77:d4:38:83:d7:74:c8:13:53:
                    02:a8:53:ad:da:c5:3d:57:3e:a7:4d:26:92:58:5b:
                    9e:6e:7f:bb:c6:b5:fb:8c:50:11:86:c6:18:38:95:
                    e2:97:4a:6a:f1:d7:17:ae:e4:7f:d7:61:a2:20:76:
                    ee:ac:3c:f7:93:d2:78:1a:7c:8a:c8:ac:cf:24:85:
                    4c:0f:72:f1:43:5f:4e:43:c3:a4:8a:27:a6:c9:27:
                    e5:b3:7b:2d:cc:16:a0:26:6a:d1:76:67:2f:ca:dc:
                    79:b1:d7:c5:32:2d:d9:03:ce:91:5f:43:2c:55:af:
                    ca:3b:27:ec:c8:f2:47:67:02:21:00:79:10:b9:c0:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0A:11:89:BC:2F:76:B6:90:87:E6:08:6C:DE:3E:9E:15:96:F3:69
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/OQoRibwvdraQh-YIbN4-nhWW82k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:0f:5c:38:d7:77:10:25:ae:90:0c:06:d6:cb:34:82:01:
         e2:d9:63:2f:86:b0:2a:06:95:97:17:da:8c:91:9b:12:e7:4c:
         ac:86:da:df:61:51:8a:4c:25:7d:08:67:b9:41:00:b8:23:51:
         48:5a:32:38:a3:fd:64:5c:55:07:3b:51:d2:02:c7:dc:74:13:
         8f:bf:65:de:10:aa:5f:c7:54:40:51:06:18:af:0f:8d:c6:d1:
         4e:11:9a:e0:ed:27:4c:34:58:47:95:3b:43:9e:66:3f:f4:e8:
         c0:4a:d5:a2:10:05:7f:3d:d8:88:2b:49:4f:26:a9:07:85:fa:
         70:c8:42:16:35:c3:2d:3c:a8:26:74:0a:42:3f:f5:35:48:54:
         da:8c:3e:99:42:99:ae:fa:7f:81:73:4d:cc:4a:14:f4:ee:4e:
         b3:d4:66:b2:c4:fd:95:70:5e:31:d1:2d:7e:c5:2e:81:39:86:
         c5:24:aa:b9:82:4f:54:80:9d:5d:05:3c:09:03:2d:27:75:03:
         f0:bc:6f:e0:22:dc:dc:88:c6:aa:14:f3:1e:04:b2:e5:54:73:
         19:dd:f2:ef:80:fa:f0:09:bb:7b:12:88:35:ea:2b:23:5b:ac:
         8f:53:e1:8c:15:7d:3b:3f:41:be:90:db:60:c6:fa:69:10:25:
         ec:86:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:41:09 2026 by rpki-client