This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/ofDCTtUG5fvkF7h9tbdz6qA-KQk.roa
File:                     ofDCTtUG5fvkF7h9tbdz6qA-KQk.roa (raw, json)
Hash identifier:          5yR8/9mSXL2zUKRNt+ixGJJlrZDs9Pgo4SL+0VD/pBI=
Subject key identifier:   A1:F0:C2:4E:D5:06:E5:FB:E4:17:B8:7D:B5:B7:73:EA:A0:3E:29:09
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       5B
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/ofDCTtUG5fvkF7h9tbdz6qA-KQk.roa
Signing time:             Thu 01 Jan 2026 01:38:02 +0000
ROA not before:           Thu 01 Jan 2026 01:38:02 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     131934
IP address blocks:        14.192.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Jan  1 01:38:02 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=A1F0C24ED506E5FBE417B87DB5B773EAA03E2909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:6f:6d:17:51:31:12:67:5e:02:19:3f:27:
                    2b:cc:99:bc:cb:4b:bb:09:52:2c:5e:24:6d:1f:f5:
                    32:95:11:c5:8b:d8:50:ed:a3:45:9e:bd:d4:1a:a7:
                    2e:a7:12:7d:78:28:5c:90:30:b1:2a:6d:f2:c8:b8:
                    09:b5:a2:e9:7f:8c:42:8c:e1:70:f9:24:c7:cb:3f:
                    16:cc:6b:87:19:fa:2e:e6:b8:59:11:42:6c:65:78:
                    45:92:f0:39:5f:9d:27:cf:ec:79:01:cd:7a:bb:9e:
                    00:04:77:2a:ea:6b:40:3c:02:31:de:83:dd:53:37:
                    44:38:5c:f1:06:20:08:a7:9b:a3:b0:95:e5:e4:b0:
                    fa:3f:85:1f:e5:a7:19:4b:fb:26:8e:02:de:be:53:
                    34:d3:2c:c9:8b:45:3b:61:f5:d2:99:a1:e2:8a:72:
                    2f:33:97:d5:b1:95:ea:14:76:bf:36:74:a8:f1:6f:
                    6b:7d:0b:68:df:0a:c6:8d:c3:e0:73:1d:d6:34:93:
                    cb:f9:2b:22:56:f3:e6:39:e3:ac:cb:d2:f8:ef:ab:
                    6f:89:c3:81:30:33:c5:2d:04:1a:52:0e:5b:35:81:
                    ec:3b:15:ea:c8:4c:eb:1e:6d:17:24:d4:1b:4f:f7:
                    85:22:53:95:26:22:b0:78:51:4a:e0:43:35:24:d6:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F0:C2:4E:D5:06:E5:FB:E4:17:B8:7D:B5:B7:73:EA:A0:3E:29:09
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/ofDCTtUG5fvkF7h9tbdz6qA-KQk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:d6:92:b6:c6:49:42:57:13:5a:92:87:2b:1d:1d:88:2e:0d:
         c2:4b:8c:9e:04:76:57:49:3c:da:3c:a9:0c:c9:00:70:df:30:
         bd:ad:23:f2:56:57:2b:56:ca:7c:35:b9:fe:b7:9e:d3:dd:d7:
         df:11:52:30:ca:22:f6:48:8e:6e:11:53:7e:3e:3f:e9:8f:0f:
         de:64:35:c7:44:e3:45:81:5e:07:3a:04:5c:1b:97:47:60:8e:
         fd:7d:74:30:d8:63:69:d3:64:e0:80:54:38:e6:c7:da:68:63:
         17:56:31:49:4f:1b:86:1a:b6:e0:53:39:50:91:c2:f1:70:68:
         bd:16:c8:60:26:05:fa:c4:85:20:60:74:25:a9:ce:5f:05:03:
         04:5d:05:d9:5a:c8:63:24:a3:5b:7b:4c:d3:03:0c:a2:90:98:
         21:98:91:66:02:82:12:a1:6d:63:92:98:a1:fe:63:eb:04:0c:
         97:6d:17:c2:cf:9b:f1:64:9d:2e:4e:6e:6d:61:fd:e9:98:e1:
         f9:1b:03:93:0f:98:cc:70:04:66:63:ea:50:15:69:76:4f:e8:
         92:ae:ad:2e:8e:58:b7:cd:2e:f9:42:1f:d8:1c:5e:12:9c:5a:
         ae:90:6a:73:b9:30:8c:2d:f2:33:47:de:ab:2a:f2:98:15:1c:
         21:53:75:dd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC
Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI2MDEwMTAx
MzgwMloXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoQTFGMEMyNEVENTA2RTVG
QkU0MTdCODdEQjVCNzczRUFBMDNFMjkwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANDhb20XUTESZ14CGT8nK8yZvMtLuwlSLF4kbR/1MpURxYvYUO2j
RZ691BqnLqcSfXgoXJAwsSpt8si4CbWi6X+MQozhcPkkx8s/Fsxrhxn6Lua4WRFC
bGV4RZLwOV+dJ8/seQHNerueAAR3KuprQDwCMd6D3VM3RDhc8QYgCKebo7CV5eSw
+j+FH+WnGUv7Jo4C3r5TNNMsyYtFO2H10pmh4opyLzOX1bGV6hR2vzZ0qPFva30L
aN8Kxo3D4HMd1jSTy/krIlbz5jnjrMvS+O+rb4nDgTAzxS0EGlIOWzWB7DsV6shM
6x5tFyTUG0/3hSJTlSYisHhRSuBDNSTWUL0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSh8MJO1Qbl++QXuH21t3PqoD4pCTAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU
wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa
NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDAvb2ZEQ1R0VUc1ZnZrRjdoOXRiZHo2cUEtS1FrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBQ7AYDANBgkqhkiG9w0BAQsFAAOCAQEAm9aStsZJQlcTWpKHKx0diC4NwkuM
ngR2V0k82jypDMkAcN8wva0j8lZXK1bKfDW5/ree093X3xFSMMoi9kiObhFTfj4/
6Y8P3mQ1x0TjRYFeBzoEXBuXR2CO/X10MNhjadNk4IBUOObH2mhjF1YxSU8bhhq2
4FM5UJHC8XBovRbIYCYF+sSFIGB0JanOXwUDBF0F2VrIYySjW3tM0wMMopCYIZiR
ZgKCEqFtY5KYof5j6wQMl20Xws+b8WSdLk5ubWH96Zjh+RsDkw+YzHAEZmPqUBVp
dk/okq6tLo5Yt80u+UIf2BxeEpxarpBqc7kwjC3yM0feqyrymBUcIVN13Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:56:16 2026 by rpki-client