This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/OTBoplpf5Kout-08F32RzZfO23Q.roa
File:                     OTBoplpf5Kout-08F32RzZfO23Q.roa (raw, json)
Hash identifier:          1ZsVinZMtO6YwcukX2SBLEZl9O8Yl/y+m6v+HvWp06E=
Subject key identifier:   39:30:68:A6:5A:5F:E4:AA:2E:B7:ED:3C:17:7D:91:CD:97:CE:DB:74
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       5C
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/OTBoplpf5Kout-08F32RzZfO23Q.roa
Signing time:             Thu 01 Jan 2026 01:38:03 +0000
ROA not before:           Thu 01 Jan 2026 01:38:03 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     131934
IP address blocks:        27.147.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Jan  1 01:38:03 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=393068A65A5FE4AA2EB7ED3C177D91CD97CEDB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:c6:54:4b:c1:9c:f9:75:56:42:07:54:37:
                    07:12:3b:d4:9a:28:ce:9d:72:1a:2e:f5:5b:3e:82:
                    4b:e2:9d:68:38:8c:81:6c:f8:91:38:3a:80:31:bd:
                    29:7c:70:84:03:7e:75:b9:d5:b3:82:4d:95:ad:8c:
                    eb:03:16:62:f8:b2:2e:63:91:0d:a5:15:4c:9f:98:
                    ec:d7:3a:5f:8e:6d:ee:1a:c1:7b:7b:62:8c:13:0f:
                    17:f7:5d:84:76:ff:41:10:cf:a3:8c:00:f7:30:94:
                    20:dd:99:96:d2:71:bf:ae:c5:5b:d9:fd:62:10:5e:
                    23:fb:8f:f9:92:7b:4d:c5:86:68:fe:c2:b4:ea:aa:
                    6d:af:5f:b5:dd:08:15:f1:81:47:11:96:1c:5c:d1:
                    e6:99:b2:c7:eb:cf:39:8d:88:29:69:c7:f7:c5:25:
                    b9:b4:9d:f6:7a:cc:57:b7:6f:19:a6:8d:75:58:35:
                    82:5a:aa:24:64:4c:d3:22:5a:92:e6:d0:10:af:dc:
                    2d:81:77:a4:87:01:21:f1:78:99:fe:2a:5c:39:52:
                    43:e6:17:5c:0d:c2:36:ec:e8:46:b1:a8:b4:a8:2b:
                    d2:7c:f9:c2:cf:9e:1c:86:41:7b:b7:3a:7f:2c:4a:
                    9e:ed:ce:9d:96:98:57:9b:fe:e1:a7:18:17:09:7a:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:68:A6:5A:5F:E4:AA:2E:B7:ED:3C:17:7D:91:CD:97:CE:DB:74
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/OTBoplpf5Kout-08F32RzZfO23Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:44:ce:75:7a:ad:76:44:2f:0a:c2:21:21:f5:08:1e:31:9c:
         90:9d:23:ba:04:ae:e3:15:7a:14:f0:ed:04:6b:0b:c5:cf:88:
         6c:3f:f9:be:46:d5:9b:41:6d:e8:5a:8d:fe:4f:42:ea:8b:73:
         a1:7f:61:c6:98:b7:27:24:85:67:85:34:b1:81:56:92:8a:6f:
         6a:2f:8d:af:25:66:0c:63:4b:47:82:b5:6e:dc:a5:bf:a3:21:
         24:0a:41:20:fa:73:08:29:70:05:4e:2e:92:43:d5:74:60:f2:
         02:cd:cb:93:5f:29:6d:56:ad:39:18:3d:88:5a:4f:9d:ee:90:
         64:9f:37:16:9a:3d:2b:5b:ac:b2:f2:3a:14:27:f7:fb:47:46:
         55:d5:4b:9e:de:ac:27:8d:a3:89:fb:47:fa:97:2a:d7:4f:2a:
         24:2c:7e:80:a6:e1:93:fb:f4:ea:bd:10:59:df:ac:f7:3a:e3:
         d5:6f:b7:17:1e:7b:b7:7c:96:71:90:7a:9a:56:ca:92:ec:d6:
         10:87:b5:af:cb:d5:6c:ec:db:17:be:13:c2:7c:5e:c2:aa:6a:
         e8:27:ae:ab:b1:42:f3:2f:ca:40:38:58:63:52:69:ad:11:56:
         9d:9c:f9:d3:47:17:51:b8:59:ea:62:24:87:07:b7:d2:91:e0:
         07:1b:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:04:26 2026 by rpki-client