This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/QP9FCOf3jGz2FP3HPsANEpgiBBI.roa
File:                     QP9FCOf3jGz2FP3HPsANEpgiBBI.roa (raw, json)
Hash identifier:          yi+/wkwZPN+uH83HfTzH+JQmuv8MhtQgnWKkfBgdb1s=
Subject key identifier:   40:FF:45:08:E7:F7:8C:6C:F6:14:FD:C7:3E:C0:0D:12:98:22:04:12
Certificate issuer:       /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial:       19
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/QP9FCOf3jGz2FP3HPsANEpgiBBI.roa
Signing time:             Fri 02 Jan 2026 07:45:36 +0000
ROA not before:           Fri 02 Jan 2026 07:45:36 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     24253
IP address blocks:        103.157.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
        Validity
            Not Before: Jan  2 07:45:36 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=40FF4508E7F78C6CF614FDC73EC00D1298220412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:b7:00:48:3b:72:e3:b7:c7:a2:59:ad:e9:
                    67:9c:3d:02:76:62:da:fd:c9:21:f0:73:e7:b4:79:
                    77:32:59:23:5f:01:41:32:36:0a:c6:62:be:82:36:
                    eb:52:0e:b4:e2:b7:6c:69:27:0a:0d:dd:a8:73:53:
                    cc:e9:0e:57:15:22:9a:c7:79:cf:06:02:c4:d3:46:
                    19:ec:8f:e0:9f:ce:97:6d:17:c9:d1:12:0f:18:f8:
                    83:52:59:6f:46:a4:ca:ca:77:ca:be:24:65:96:37:
                    59:0b:10:18:48:d1:11:8f:c5:d8:f7:ff:3f:52:f0:
                    53:57:b5:31:6c:10:0a:9f:5d:da:aa:f8:be:17:02:
                    04:55:40:39:2f:f5:0c:03:76:f9:f3:bd:2b:56:e4:
                    eb:19:1d:bc:40:ff:64:56:4c:be:a7:29:cf:e9:e0:
                    db:b0:b7:77:71:3b:77:ce:c6:7c:f4:cd:0d:47:88:
                    a3:79:c7:8f:4b:50:39:d9:c6:f7:bd:2b:22:49:7d:
                    50:1f:c2:e4:47:b8:b2:19:c4:cb:ef:e4:76:a8:1b:
                    57:3c:10:80:6b:89:f1:e6:82:b0:6f:f7:e7:90:dc:
                    50:04:11:ee:42:fa:ac:d1:1e:06:ce:4e:2e:fb:69:
                    f7:d3:78:99:3c:83:f0:66:ad:40:22:08:d8:c4:e1:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FF:45:08:E7:F7:8C:6C:F6:14:FD:C7:3E:C0:0D:12:98:22:04:12
            X509v3 Authority Key Identifier:
                keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/QP9FCOf3jGz2FP3HPsANEpgiBBI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:a7:df:a8:a8:b7:dc:c4:81:0c:fa:98:6e:43:d0:87:4d:
         85:76:ff:7e:39:be:33:f7:d1:78:30:93:50:ed:78:e6:9e:48:
         2f:11:c5:e0:04:99:7f:fe:39:7f:27:18:2f:78:27:57:da:3c:
         00:3c:e2:cd:91:54:a8:97:ca:9c:15:e5:4e:4e:00:98:84:99:
         82:c2:f0:58:7a:a9:6a:3e:ef:d5:9f:1d:19:16:1b:3c:22:4d:
         8e:20:84:fb:81:d4:16:51:59:7a:22:74:84:22:16:83:be:a5:
         9b:a7:a9:63:5f:0b:17:85:4b:ab:68:4b:04:93:59:9a:a7:69:
         db:ac:16:8b:db:b7:fa:01:dd:ea:f6:94:9f:61:7b:27:e1:07:
         c2:5b:30:1d:ae:44:1c:e9:95:a3:e7:40:07:43:52:9b:6c:af:
         1a:1f:55:4e:a2:b1:0a:5b:c9:53:e0:08:c4:0b:e9:0a:4f:e2:
         8a:63:7d:e1:78:61:33:96:fc:88:f0:50:39:b3:b3:bd:ab:20:
         f9:ac:fa:9c:56:ca:fc:aa:bc:4f:f5:14:06:4d:9c:83:b2:0b:
         35:c7:96:c6:50:2d:33:64:ba:9b:5a:c1:9a:ce:e2:d4:07:fa:
         68:4c:e7:b5:be:aa:23:8b:3a:d4:c0:6e:23:92:f0:e3:83:d5:
         f4:ed:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:00:49 2026 by rpki-client