This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/TZhMguU14RSDsu6f6Po5541XVTw.roa
File:                     TZhMguU14RSDsu6f6Po5541XVTw.roa (raw, json)
Hash identifier:          9GpbRdW16SCQrJIC5vfmFAmXJaTfotIr5Ov25HB8r3U=
Subject key identifier:   4D:98:4C:82:E5:35:E1:14:83:B2:EE:9F:E8:FA:39:E7:8D:57:55:3C
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       84
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/TZhMguU14RSDsu6f6Po5541XVTw.roa
Signing time:             Thu 01 Jan 2026 01:31:58 +0000
ROA not before:           Thu 01 Jan 2026 01:31:58 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     37892
IP address blocks:        202.145.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Jan  1 01:31:58 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4D984C82E535E11483B2EE9FE8FA39E78D57553C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:17:6e:52:c3:60:19:b2:a5:80:78:82:09:
                    9b:0a:45:05:b1:98:01:82:fd:7d:d0:88:4b:70:98:
                    99:da:0e:49:ff:7b:c6:f4:9d:cd:e2:84:fa:dc:86:
                    ab:f0:e1:50:bf:5b:2f:5f:90:91:ba:5c:7f:45:6e:
                    62:5e:31:b9:af:c7:77:7f:55:7e:34:7e:24:a8:0d:
                    b6:dd:eb:73:05:21:01:f4:6d:43:7e:bd:c4:c5:9c:
                    2b:de:33:a0:e9:a7:5e:dd:76:7e:50:4e:2e:29:78:
                    be:c6:02:5c:99:58:af:0f:e8:d0:93:1b:37:0d:8d:
                    45:0e:e5:b9:dd:0f:e1:75:65:1b:5e:73:69:49:ca:
                    f0:52:b0:31:a8:8d:4b:dd:25:e2:4e:0d:eb:39:ba:
                    fb:da:34:b6:72:b0:c6:5f:b7:24:31:91:38:96:6d:
                    d5:53:2a:63:76:83:5c:23:59:ed:c0:47:45:4f:70:
                    59:52:55:56:18:67:a7:69:88:c7:3c:fe:a4:19:dc:
                    9d:71:c7:c6:08:34:fd:7d:12:56:0c:3e:6f:dd:81:
                    49:7e:50:df:44:55:fb:25:8a:07:b6:fb:f1:86:2c:
                    fe:79:66:72:96:57:1f:8b:ee:16:0a:d8:e2:8c:6e:
                    d4:a1:71:e1:95:c2:f4:16:b4:1d:f4:a5:ae:92:b9:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:98:4C:82:E5:35:E1:14:83:B2:EE:9F:E8:FA:39:E7:8D:57:55:3C
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/TZhMguU14RSDsu6f6Po5541XVTw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:f1:fd:8b:9d:3e:40:db:6f:20:f2:0b:7d:07:93:02:b3:d0:
         d6:77:24:bc:2f:97:98:57:24:ec:16:ae:84:7d:54:55:a4:94:
         00:95:84:07:3d:83:23:8c:9e:e1:ea:bc:1e:2c:e7:0b:9b:ad:
         67:73:ba:74:bd:50:bf:a0:ef:9d:5f:13:f8:ee:d5:f0:c7:17:
         5a:b3:e2:f5:7f:e7:bb:58:40:c6:32:1f:6b:1c:86:c3:ff:03:
         7c:dd:d9:de:1d:9c:af:e7:ff:ae:fd:7a:d4:16:6e:f7:37:06:
         12:b3:5a:1b:f4:b3:de:4b:50:e3:5d:72:54:0c:f5:de:17:15:
         60:7c:97:17:81:28:80:75:97:44:5b:62:aa:46:ec:d2:3b:60:
         48:05:f4:85:d7:58:c3:06:df:de:1a:74:93:bd:75:79:13:0e:
         1c:67:f2:02:7e:38:57:ee:0b:33:cb:8f:e7:29:8f:a3:38:65:
         53:37:3a:0f:dd:35:50:4f:44:cf:55:af:29:89:6e:de:79:36:
         a9:1b:a4:17:99:f7:72:12:56:e1:8a:68:7d:ff:a2:7c:82:82:
         45:43:54:87:41:27:a3:93:b0:91:be:42:45:07:3c:32:c3:1d:
         e7:a9:9d:14:fd:ff:b3:61:5c:eb:63:f6:db:e2:f8:9c:69:de:
         ba:72:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:53 2026 by rpki-client