This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/0dsthZ8aLKtLK8xseA4ngqcEFaM.roa
File:                     0dsthZ8aLKtLK8xseA4ngqcEFaM.roa (raw, json)
Hash identifier:          M/4ctpQLBOQ3Notu7qU56Z7REu6XbRuNpjz5iANYBwg=
Subject key identifier:   D1:DB:2D:85:9F:1A:2C:AB:4B:2B:CC:6C:78:0E:27:82:A7:04:15:A3
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       30
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/0dsthZ8aLKtLK8xseA4ngqcEFaM.roa
Signing time:             Fri 23 Jan 2026 03:08:18 +0000
ROA not before:           Fri 23 Jan 2026 03:08:18 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     23831
IP address blocks:        115.85.136.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Jan 23 03:08:18 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=D1DB2D859F1A2CAB4B2BCC6C780E2782A70415A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:90:69:b3:9f:d9:26:8d:05:56:66:ac:b5:
                    24:57:33:07:73:92:fb:2c:c4:b0:e8:c3:08:ea:c5:
                    92:13:f3:a3:6b:f8:7f:fd:4a:dd:d1:c5:d7:70:e2:
                    ae:e6:c3:5c:23:a2:0c:64:9b:25:81:3d:1c:f9:37:
                    6e:83:31:ca:f1:a7:07:bc:4c:61:06:62:30:e6:9a:
                    75:81:41:6c:bf:fa:13:d8:b0:72:8f:c4:16:67:12:
                    b6:d4:18:c8:bf:8d:8d:6b:06:f4:02:d6:4a:ec:e9:
                    0b:c7:6e:d5:b8:14:c9:3d:6f:1f:32:41:dc:c8:14:
                    28:d9:1e:f7:a5:54:90:fd:33:68:5e:80:80:05:06:
                    07:b6:33:38:26:2b:a8:0d:a7:2b:2e:3c:51:aa:d5:
                    40:d4:2d:9b:71:a5:90:81:5f:ef:29:3e:c3:1e:5f:
                    17:8b:6d:10:1e:b2:eb:b5:44:05:08:02:b3:87:4d:
                    82:82:0a:9c:91:5a:da:b3:a2:dd:92:e6:c6:cc:ec:
                    26:ae:ba:50:73:e9:25:b2:eb:b7:3b:cc:f6:2a:96:
                    17:90:5f:49:6f:97:dd:9a:4f:c5:57:1c:8f:1b:fe:
                    e9:3f:44:66:5a:01:3b:96:94:32:d4:4c:7f:56:cf:
                    5a:94:46:d9:c5:1f:c9:e3:3b:51:de:d7:41:98:8a:
                    ab:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DB:2D:85:9F:1A:2C:AB:4B:2B:CC:6C:78:0E:27:82:A7:04:15:A3
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/0dsthZ8aLKtLK8xseA4ngqcEFaM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.85.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:71:bf:14:f7:7a:ea:36:ef:ad:af:69:43:f3:5a:7d:c7:6e:
         60:6a:72:f9:7a:46:88:ef:b6:01:bc:e1:43:c8:49:57:7e:9d:
         7e:98:35:db:9b:21:9e:8b:f4:fa:8c:d3:ba:ce:35:da:c6:44:
         07:e7:6b:ef:3a:fa:b4:b3:2f:b8:14:e8:77:c3:f9:2a:97:7b:
         5d:a7:5a:54:55:86:b1:ac:31:58:23:b6:c4:e4:4d:59:ed:47:
         98:44:a9:cf:31:91:da:a3:68:74:af:3a:54:da:ac:2b:5a:b7:
         f6:ff:d3:a9:c7:80:6d:3f:14:e3:b7:9f:3d:4f:63:0b:32:e6:
         42:b2:81:1d:07:19:9f:8a:bc:be:5a:8c:cc:44:28:d5:f4:21:
         b7:26:c0:ee:0a:2e:85:13:12:da:6e:70:dc:a7:2f:dc:12:80:
         29:d3:53:e3:08:93:95:b9:f7:bd:56:72:3d:9c:c5:21:d7:23:
         61:4a:bf:e6:a2:b5:3a:88:6a:83:20:b9:60:d2:52:ec:5d:6a:
         8d:6b:e0:27:26:6f:b2:75:19:15:19:6e:0b:e1:fe:45:db:36:
         7a:48:9d:90:d0:65:65:6f:5b:f6:68:7f:1a:8e:52:db:0b:22:
         d9:f9:3d:fa:9c:af:ab:f2:29:46:20:ca:28:cd:56:b7:96:fe:
         f4:d9:34:f6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB
Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI2MDEyMzAz
MDgxOFoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoRDFEQjJEODU5RjFBMkNB
QjRCMkJDQzZDNzgwRTI3ODJBNzA0MTVBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALrPkGmzn9kmjQVWZqy1JFczB3OS+yzEsOjDCOrFkhPzo2v4f/1K
3dHF13DirubDXCOiDGSbJYE9HPk3boMxyvGnB7xMYQZiMOaadYFBbL/6E9iwco/E
FmcSttQYyL+NjWsG9ALWSuzpC8du1bgUyT1vHzJB3MgUKNke96VUkP0zaF6AgAUG
B7YzOCYrqA2nKy48UarVQNQtm3GlkIFf7yk+wx5fF4ttEB6y67VEBQgCs4dNgoIK
nJFa2rOi3ZLmxszsJq66UHPpJbLrtzvM9iqWF5BfSW+X3ZpPxVccjxv+6T9EZloB
O5aUMtRMf1bPWpRG2cUfyeM7Ud7XQZiKq+kCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTR2y2Fnxosq0srzGx4DieCpwQVozAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI
QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1
TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NzMvMGRzdGhaOGFMS3RMSzh4c2VBNG5ncWNFRmFNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3NViDANBgkqhkiG9w0BAQsFAAOCAQEAunG/FPd66jbvra9pQ/NafcduYGpy
+XpGiO+2AbzhQ8hJV36dfpg125shnov0+ozTus412sZEB+dr7zr6tLMvuBTod8P5
Kpd7XadaVFWGsawxWCO2xORNWe1HmESpzzGR2qNodK86VNqsK1q39v/TqceAbT8U
47efPU9jCzLmQrKBHQcZn4q8vlqMzEQo1fQhtybA7gouhRMS2m5w3Kcv3BKAKdNT
4wiTlbn3vVZyPZzFIdcjYUq/5qK1OohqgyC5YNJS7F1qjWvgJyZvsnUZFRluC+H+
Rds2ekidkNBlZW9b9mh/Go5S2wsi2fk9+pyvq/IpRiDKKM1Wt5b+9Nk09g==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:24 2026 by rpki-client