This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/liVShYowVldtyVbjJdNhtortZlI.roa
File:                     liVShYowVldtyVbjJdNhtortZlI.roa (raw, json)
Hash identifier:          nfl01jRQh7njsZ+cnm+q3rbVgeu1XttfS6G8ZrhdYFU=
Subject key identifier:   96:25:52:85:8A:30:56:57:6D:C9:56:E3:25:D3:61:B6:8A:ED:66:52
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       2F
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/liVShYowVldtyVbjJdNhtortZlI.roa
Signing time:             Fri 23 Jan 2026 03:08:18 +0000
ROA not before:           Fri 23 Jan 2026 03:08:18 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     23831
IP address blocks:        103.235.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Jan 23 03:08:18 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=962552858A3056576DC956E325D361B68AED6652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:10:da:62:62:11:ea:60:c6:9a:bd:7c:5b:
                    e0:89:2d:55:3c:a1:64:7f:a3:20:25:69:e2:ab:aa:
                    ea:aa:86:27:1e:7c:c2:ab:1f:e1:00:50:9b:94:d3:
                    4d:48:e8:30:cb:a2:6c:3c:2a:84:e4:64:46:48:80:
                    1e:36:2c:f0:f0:d8:56:73:d8:72:c8:ca:b4:d8:2f:
                    9d:0b:0f:74:74:3c:ea:6e:cd:bb:35:2c:fe:3c:18:
                    b9:2c:26:d6:0b:db:b3:6c:db:ea:0d:bc:97:a8:03:
                    da:c8:3a:00:27:2b:09:6a:fa:f5:7f:c9:a4:f9:98:
                    2c:f0:df:f9:aa:10:a5:a2:00:bf:dc:db:53:32:3d:
                    88:0f:8a:ae:a8:b9:d5:21:62:1c:58:cf:7f:aa:3f:
                    a8:2c:67:70:88:26:4b:2b:e2:d2:92:85:56:4c:de:
                    85:bf:61:d3:05:0f:af:85:6a:c6:5a:ea:41:3e:c4:
                    e8:c2:96:0c:03:35:1e:1e:d3:ec:c3:35:b9:04:6f:
                    cf:b1:87:02:b8:e4:6b:11:5c:d3:3f:30:90:31:1f:
                    db:ca:4a:43:53:a1:05:02:65:04:4d:8b:be:b3:ea:
                    9b:ad:75:96:24:22:4a:1b:98:7e:61:89:0d:0b:83:
                    8d:15:04:17:85:b1:8c:f8:ba:bb:39:99:27:94:81:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:52:85:8A:30:56:57:6D:C9:56:E3:25:D3:61:B6:8A:ED:66:52
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/liVShYowVldtyVbjJdNhtortZlI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:46:ce:8f:cf:02:2b:1a:ac:40:ed:b0:72:80:88:eb:65:1a:
         84:4d:39:6b:f3:5c:66:4c:05:f8:ed:a0:e0:e7:ed:e6:3b:94:
         32:4e:4c:33:d3:a6:50:5a:a7:ed:ba:52:1a:c7:c9:9c:10:27:
         be:4e:d9:e5:3d:28:3d:f8:44:6d:97:de:bd:60:b8:a8:4a:2b:
         28:e6:a3:da:4c:ea:d2:1c:b9:db:5c:36:6a:12:82:c2:ae:e5:
         a8:51:7e:1a:62:5f:ac:7e:d4:15:b6:de:a5:b4:d8:98:a0:78:
         f3:7b:c7:ac:85:b2:72:ef:87:24:b3:86:cd:7f:51:e9:f0:db:
         08:e2:8a:d3:bd:a1:8e:1a:c3:fd:a8:01:ff:ea:65:e2:e2:c1:
         62:81:b2:c9:d4:7d:5c:21:6e:d0:26:91:6c:59:9d:7e:55:12:
         bc:1b:d9:b4:0f:9b:b0:03:b8:9c:63:68:eb:b3:7c:73:1e:cc:
         e2:f1:3c:7a:0a:62:54:f7:83:b0:72:b0:d1:74:b1:57:6a:bd:
         fc:1a:32:77:e5:f3:54:84:ef:4e:91:51:fc:56:bd:f3:13:ec:
         1f:a8:7d:a8:8c:c2:8e:9f:be:8f:1c:c7:1f:4e:45:07:fa:a3:
         44:37:56:dc:ae:a9:2a:31:91:66:db:8c:91:e7:6c:b6:40:3e:
         fb:9b:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:26 2026 by rpki-client