This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/2U_0G7anGScjqxUsAvUvOokMCnA.roa
File:                     2U_0G7anGScjqxUsAvUvOokMCnA.roa (raw, json)
Hash identifier:          78YcTVQu5v/Ya2ZuaKAJEsA15DCkKUhDdcJ4PaNWi3c=
Subject key identifier:   D9:4F:F4:1B:B6:A7:19:27:23:AB:15:2C:02:F5:2F:3A:89:0C:0A:70
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       31
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/2U_0G7anGScjqxUsAvUvOokMCnA.roa
Signing time:             Fri 23 Jan 2026 03:08:19 +0000
ROA not before:           Fri 23 Jan 2026 03:08:19 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     23831
IP address blocks:        103.6.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Jan 23 03:08:19 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=D94FF41BB6A7192723AB152C02F52F3A890C0A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:30:3d:99:62:15:36:10:aa:53:b3:72:d9:
                    89:ac:9e:3f:6f:2e:c8:61:ca:ef:41:af:ab:a3:c7:
                    96:da:79:8c:e3:62:12:71:30:6f:88:bf:e9:d9:97:
                    5c:b2:20:0c:72:86:b0:8f:76:6c:d1:47:67:e5:cf:
                    4c:68:26:4a:0d:b2:25:f4:10:30:8b:67:40:47:88:
                    f0:1e:8f:3b:48:24:24:90:d0:cf:da:03:55:e4:79:
                    81:2b:ac:b1:36:d3:13:16:8b:17:9a:cf:5f:f0:a2:
                    66:59:79:4f:be:06:32:96:f4:1c:5f:21:4e:f6:24:
                    5b:41:ea:98:c7:e4:a3:19:15:53:ec:c4:16:70:f3:
                    40:9c:07:bf:ff:d4:4e:ec:f1:f6:fc:6c:12:e5:f1:
                    40:b6:d6:c2:5b:f8:a1:da:da:b2:22:3a:a5:e2:3f:
                    77:95:87:ae:79:bb:a8:af:97:f3:f3:bb:63:92:ef:
                    7d:b6:1e:4e:3b:5a:6e:c6:be:8f:67:cc:a4:d7:dd:
                    1c:94:a1:23:e7:7d:5b:c6:2c:0f:be:fa:42:df:22:
                    42:ed:39:0b:f6:71:bf:e3:32:54:bd:bc:e9:3b:6a:
                    a3:cf:66:8e:65:0c:8c:99:ed:55:ab:37:d3:f7:58:
                    1a:aa:60:fd:68:9e:da:f0:1c:33:d0:3a:c5:d1:e8:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:F4:1B:B6:A7:19:27:23:AB:15:2C:02:F5:2F:3A:89:0C:0A:70
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/2U_0G7anGScjqxUsAvUvOokMCnA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:28:e6:b5:68:9f:14:aa:b4:35:ec:8e:ba:eb:31:22:b6:4d:
         14:02:ed:81:c8:96:b9:c2:20:2b:8b:d5:2d:1a:94:f4:e9:e2:
         d6:69:8b:0d:16:0d:02:95:86:66:73:b8:8e:f3:a7:b1:d7:bf:
         09:b5:cf:c8:01:c6:09:dc:e2:3c:77:06:49:76:29:41:c6:eb:
         e5:f9:34:74:8a:cc:df:cf:19:d7:d8:7b:aa:6e:23:73:33:30:
         04:41:d2:f2:a4:98:8f:3c:0e:dd:93:7f:05:3a:28:b1:dc:d3:
         68:53:29:fa:be:54:98:77:81:f9:23:a0:c0:0e:a2:55:a2:51:
         89:25:ab:97:b9:74:42:02:fc:5a:da:d7:f6:36:b0:bc:cd:da:
         64:c3:24:32:07:5d:d6:87:31:b3:5f:78:32:93:f6:7b:74:1e:
         1f:07:85:5b:7e:f4:52:a9:e1:9f:f7:18:ae:ca:37:d9:07:84:
         b3:4f:40:97:c0:23:4b:1e:85:8f:a7:61:93:e5:38:38:c0:b5:
         e5:5e:7f:69:34:ff:82:05:82:99:de:ea:0b:ef:af:03:84:04:
         59:a0:71:f1:66:a3:7a:f3:2f:a3:49:70:b7:f7:13:fc:23:87:
         fc:05:f4:b8:da:7e:e1:a8:db:3b:ba:d3:7e:a0:c0:ef:ac:7b:
         b8:59:66:0b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB
Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI2MDEyMzAz
MDgxOVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoRDk0RkY0MUJCNkE3MTky
NzIzQUIxNTJDMDJGNTJGM0E4OTBDMEE3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK5WMD2ZYhU2EKpTs3LZiayeP28uyGHK70Gvq6PHltp5jONiEnEw
b4i/6dmXXLIgDHKGsI92bNFHZ+XPTGgmSg2yJfQQMItnQEeI8B6PO0gkJJDQz9oD
VeR5gSussTbTExaLF5rPX/CiZll5T74GMpb0HF8hTvYkW0HqmMfkoxkVU+zEFnDz
QJwHv//UTuzx9vxsEuXxQLbWwlv4odrasiI6peI/d5WHrnm7qK+X8/O7Y5LvfbYe
Tjtabsa+j2fMpNfdHJShI+d9W8YsD776Qt8iQu05C/Zxv+MyVL286Ttqo89mjmUM
jJntVas30/dYGqpg/Wie2vAcM9A6xdHoDDkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTZT/QbtqcZJyOrFSwC9S86iQwKcDAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI
QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1
TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NzMvMlVfMEc3YW5HU2NqcXhVc0F2VXZPb2tNQ25BLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcGEDANBgkqhkiG9w0BAQsFAAOCAQEAuyjmtWifFKq0NeyOuusxIrZNFALt
gciWucIgK4vVLRqU9Oni1mmLDRYNApWGZnO4jvOnsde/CbXPyAHGCdziPHcGSXYp
Qcbr5fk0dIrM388Z19h7qm4jczMwBEHS8qSYjzwO3ZN/BToosdzTaFMp+r5UmHeB
+SOgwA6iVaJRiSWrl7l0QgL8WtrX9jawvM3aZMMkMgdd1ocxs194MpP2e3QeHweF
W370Uqnhn/cYrso32QeEs09Al8AjSx6Fj6dhk+U4OMC15V5/aTT/ggWCmd7qC++v
A4QEWaBx8WajevMvo0lwt/cT/COH/AX0uNp+4ajbO7rTfqDA76x7uFlmCw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:12 2026 by rpki-client