This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/iy3UV7O-WjKbHDDAWtZRK8fwKmM.roa
File:                     iy3UV7O-WjKbHDDAWtZRK8fwKmM.roa (raw, json)
Hash identifier:          0/6+FAPSWIKkbYTHDz0FnTtuhP7MB3cvi+JTo/rmM+8=
Subject key identifier:   8B:2D:D4:57:B3:BE:5A:32:9B:1C:30:C0:5A:D6:51:2B:C7:F0:2A:63
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       86
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/iy3UV7O-WjKbHDDAWtZRK8fwKmM.roa
Signing time:             Thu 01 Jan 2026 01:31:59 +0000
ROA not before:           Thu 01 Jan 2026 01:31:59 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     37892
IP address blocks:        124.247.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Jan  1 01:31:59 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=8B2DD457B3BE5A329B1C30C05AD6512BC7F02A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:32:2b:61:60:bf:29:ca:60:1b:14:ac:1c:
                    b1:7f:2e:85:58:1a:e4:dd:1e:da:a7:91:79:be:16:
                    91:8b:84:20:18:2b:7a:24:59:3f:b6:e4:e3:68:d1:
                    a0:d4:07:00:bc:e4:96:dc:a7:73:8c:9f:aa:8b:48:
                    6e:16:bd:ba:1b:bf:60:7a:88:ac:66:e0:f3:eb:f2:
                    d7:ef:6a:18:13:6b:75:37:a4:81:f7:2b:3f:d6:22:
                    79:a5:cd:bb:25:3d:64:b3:e9:9d:79:b5:1b:21:b6:
                    0f:ec:6d:47:47:6c:48:56:be:81:e7:de:61:32:b1:
                    63:f9:38:1e:3b:ca:f5:70:cc:68:88:45:89:e1:0f:
                    0c:a2:f5:e1:f6:a9:58:91:16:77:94:57:b8:9b:5d:
                    6d:e7:71:e8:8a:4c:21:ad:96:96:b3:ee:ba:b0:ba:
                    17:0e:7b:54:2d:8d:65:db:da:fd:43:58:7e:f6:2f:
                    b7:2d:68:41:97:75:37:fb:a3:6a:84:35:8e:9f:29:
                    fa:24:48:e0:c0:47:69:9c:1a:44:8b:92:10:6f:d8:
                    c4:50:ae:44:b6:6f:97:51:bf:9d:f4:5a:a0:e7:fa:
                    1b:7b:ee:89:65:cd:95:f8:02:d7:a2:ae:df:8c:10:
                    6a:27:ce:91:bd:9f:5b:be:1f:ab:20:fc:2d:74:12:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2D:D4:57:B3:BE:5A:32:9B:1C:30:C0:5A:D6:51:2B:C7:F0:2A:63
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/iy3UV7O-WjKbHDDAWtZRK8fwKmM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:35:f5:e3:4a:16:ef:5b:98:53:0a:b8:ba:f6:89:54:74:
         16:c9:7f:01:43:9a:f9:0a:6e:00:da:de:b7:d2:18:72:ce:7f:
         7b:b0:9a:84:2b:da:c7:44:39:b0:54:ca:83:32:2e:89:77:9d:
         5c:70:fe:94:f1:2a:f8:01:44:93:65:5c:73:51:93:6c:58:c9:
         1f:3c:53:13:37:3d:26:d8:93:62:6b:6f:82:7b:cf:05:8a:14:
         5c:30:78:0a:4f:84:e8:a7:a1:87:7e:17:58:ee:4c:90:42:b3:
         cb:86:0a:fe:64:5b:8c:8a:8b:fb:79:76:15:14:db:12:bd:71:
         42:f7:fb:e0:15:80:91:b7:11:7f:68:b9:97:6d:ef:38:25:30:
         1d:93:2f:cd:79:79:e3:fa:bf:4b:d8:ec:2b:67:f9:d6:cd:f9:
         49:8b:8f:0d:3f:a0:f0:a7:e6:9c:85:1f:a5:b6:a3:46:36:b6:
         f4:09:e2:fd:b3:69:4e:a8:c3:a5:c0:d9:62:df:8f:43:c4:5a:
         db:2b:1a:60:36:a8:6e:94:11:d3:26:fc:6a:40:0c:26:96:08:
         b1:2d:b9:f3:fc:18:7f:19:bb:eb:e6:39:fb:f2:08:37:ab:e4:
         29:ee:3a:e6:86:4c:58:8f:56:52:bb:34:8e:e2:24:f5:e2:40:
         68:10:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:35 2026 by rpki-client