This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/S0rdW6V4uj3sltDLRewOVXDSUuI.roa
File:                     S0rdW6V4uj3sltDLRewOVXDSUuI.roa (raw, json)
Hash identifier:          d/npPmQCaGhLDkEU1Iz445XgE5mumlvJTsruXiQRG94=
Subject key identifier:   4B:4A:DD:5B:A5:78:BA:3D:EC:96:D0:CB:45:EC:0E:55:70:D2:52:E2
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       52
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/S0rdW6V4uj3sltDLRewOVXDSUuI.roa
Signing time:             Thu 01 Jan 2026 01:32:21 +0000
ROA not before:           Thu 01 Jan 2026 01:32:21 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     37908
IP address blocks:        202.254.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Jan  1 01:32:21 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4B4ADD5BA578BA3DEC96D0CB45EC0E5570D252E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:96:31:55:e7:1a:3b:10:e6:93:50:30:71:
                    0a:94:c2:27:f3:fc:9e:34:97:4d:74:62:a4:ab:e7:
                    ad:71:b4:89:96:73:bc:aa:3b:61:45:4a:3a:9f:11:
                    2d:32:23:3f:a8:5c:e2:3c:27:60:7f:b5:f7:00:f9:
                    6d:cf:4d:81:d6:54:7e:4a:4f:74:e2:3f:89:7a:96:
                    d0:d6:28:36:30:20:7d:09:3e:5c:f7:03:28:f9:2d:
                    b9:71:f8:6d:1f:cc:31:2b:e7:34:f5:a6:7b:37:00:
                    5c:cf:94:96:8b:ea:cd:c7:0f:1e:50:70:13:d9:94:
                    c7:11:17:89:24:bc:c8:8c:36:ad:16:3e:c8:27:e0:
                    88:7e:64:a0:d4:c6:36:a4:6e:8d:ad:aa:0d:b9:f2:
                    43:f0:7a:86:f5:ed:21:5a:7c:21:10:ec:ef:84:77:
                    bb:2f:ca:b1:b9:51:c8:fe:8d:47:0b:d8:0b:18:67:
                    ab:f4:7b:01:18:46:b7:01:d0:c7:7a:23:38:9d:26:
                    85:43:c8:56:46:a8:d6:a5:71:02:1b:5a:1b:f1:22:
                    06:aa:6e:00:66:de:ad:9f:4f:c6:7b:ed:19:84:78:
                    cb:cd:11:ae:b6:c0:b4:a1:9e:b6:b6:1d:82:12:2c:
                    53:70:bc:66:64:82:60:da:4a:cd:7c:ac:87:ef:17:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:DD:5B:A5:78:BA:3D:EC:96:D0:CB:45:EC:0E:55:70:D2:52:E2
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/S0rdW6V4uj3sltDLRewOVXDSUuI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.254.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:8e:68:e0:61:97:49:7d:45:1d:a2:b2:73:dc:89:e8:ce:ae:
         dc:ed:70:09:8e:38:83:c0:a7:c5:4f:f8:22:b4:db:1f:00:9e:
         f7:a3:4c:78:95:00:40:3a:82:b5:e6:53:86:82:38:76:b4:84:
         29:1a:3d:82:b4:2b:bf:51:3c:0b:cd:ad:4e:ff:63:3c:38:6e:
         d2:1a:eb:6d:63:a7:b0:98:f6:ec:41:d3:1c:96:1e:6a:b3:7f:
         9a:e6:2d:a9:94:50:80:7b:8f:c6:10:62:ef:8d:f5:a0:71:b6:
         dd:c0:42:29:d4:55:6a:50:8c:9c:6f:fe:90:cc:9d:4c:29:2b:
         ae:9e:d5:71:1b:9b:54:cb:b2:51:4f:08:7f:44:54:d3:e7:38:
         5c:74:4b:15:3c:37:6b:f5:20:a4:30:9c:a8:58:8f:2a:2d:b4:
         09:e3:9c:d4:a9:fb:4d:5a:03:8b:fa:36:ac:91:65:38:15:09:
         ca:0c:4e:df:97:e2:74:6d:b3:52:00:39:e6:65:76:c5:ff:b2:
         b4:9a:aa:f7:b6:df:48:86:b9:f2:da:cc:d2:58:5b:a0:65:23:
         a3:9f:63:8c:4e:4d:91:1a:af:1e:84:2e:f5:66:90:b0:b8:2f:
         38:f6:93:32:fc:20:5e:23:19:c5:a3:7b:fb:b3:c4:d2:05:52:
         62:d0:20:52
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF
NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTI2MDEwMTAx
MzIyMVoXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNEI0QURENUJBNTc4QkEz
REVDOTZEMENCNDVFQzBFNTU3MEQyNTJFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALfZljFV5xo7EOaTUDBxCpTCJ/P8njSXTXRipKvnrXG0iZZzvKo7
YUVKOp8RLTIjP6hc4jwnYH+19wD5bc9NgdZUfkpPdOI/iXqW0NYoNjAgfQk+XPcD
KPktuXH4bR/MMSvnNPWmezcAXM+UlovqzccPHlBwE9mUxxEXiSS8yIw2rRY+yCfg
iH5koNTGNqRuja2qDbnyQ/B6hvXtIVp8IRDs74R3uy/KsblRyP6NRwvYCxhnq/R7
ARhGtwHQx3ojOJ0mhUPIVkao1qVxAhtaG/EiBqpuAGberZ9PxnvtGYR4y80RrrbA
tKGetrYdghIsU3C8ZmSCYNpKzXysh+8XkykCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRLSt1bpXi6PeyW0MtF7A5VcNJS4jAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh
oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy
MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NDIvUzByZFc2VjR1ajNzbHRETFJld09WWERTVXVJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMr+bzANBgkqhkiG9w0BAQsFAAOCAQEAsY5o4GGXSX1FHaKyc9yJ6M6u3O1w
CY44g8CnxU/4IrTbHwCe96NMeJUAQDqCteZThoI4drSEKRo9grQrv1E8C82tTv9j
PDhu0hrrbWOnsJj27EHTHJYearN/muYtqZRQgHuPxhBi7431oHG23cBCKdRValCM
nG/+kMydTCkrrp7VcRubVMuyUU8If0RU0+c4XHRLFTw3a/UgpDCcqFiPKi20CeOc
1Kn7TVoDi/o2rJFlOBUJygxO35fidG2zUgA55mV2xf+ytJqq97bfSIa58trM0lhb
oGUjo59jjE5NkRqvHoQu9WaQsLgvOPaTMvwgXiMZxaN7+7PE0gVSYtAgUg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:56:33 2026 by rpki-client