This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/chgnzamIzr2OFk20vgRdyS9JGxM.roa
File:                     chgnzamIzr2OFk20vgRdyS9JGxM.roa (raw, json)
Hash identifier:          OTr/Uygv6gpuaZ27aQsvCKUGXb5yoEoYidoag9OF3lw=
Subject key identifier:   72:18:27:CD:A9:88:CE:BD:8E:16:4D:B4:BE:04:5D:C9:2F:49:1B:13
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       54
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/chgnzamIzr2OFk20vgRdyS9JGxM.roa
Signing time:             Thu 01 Jan 2026 01:32:22 +0000
ROA not before:           Thu 01 Jan 2026 01:32:22 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     37908
IP address blocks:        103.10.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Jan  1 01:32:22 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=721827CDA988CEBD8E164DB4BE045DC92F491B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:e3:6c:4d:23:6f:85:cf:af:83:ad:eb:64:
                    7e:e2:78:fe:ab:f4:be:94:13:14:24:03:87:9f:9d:
                    1e:39:3b:53:35:05:3f:a6:f8:23:f8:eb:c2:ad:69:
                    d9:c3:69:6d:f2:73:2c:87:02:12:8c:7a:72:1b:a4:
                    ed:68:16:c6:bf:d0:6e:35:96:5a:e3:a0:fe:91:13:
                    7c:42:b6:6a:03:fa:d5:58:76:9e:3d:e3:b8:c1:1a:
                    6e:89:87:c0:8c:38:15:61:e6:7c:6f:f2:98:2f:99:
                    2d:5c:cc:62:45:fb:bd:85:54:a8:ad:04:f0:a9:0f:
                    58:76:fc:e0:31:7e:05:ac:7a:a1:86:7f:85:fd:fc:
                    a0:50:3d:dc:2c:4d:8d:33:b0:79:2f:8a:d7:e1:07:
                    bd:91:a1:af:77:0b:2c:30:bb:d7:2d:0f:95:ea:32:
                    19:bf:f8:4a:ff:1b:40:f7:ea:75:59:43:f6:85:4b:
                    58:30:6f:54:3c:4d:0d:75:90:7e:db:50:53:21:7b:
                    f8:9b:c3:11:a7:1e:d8:68:84:2f:56:a4:3b:70:54:
                    11:3f:49:a6:d0:a7:1c:f5:ce:4d:f1:99:5f:08:ca:
                    c0:c8:41:c5:d6:d3:de:1c:d1:10:90:c1:5c:86:5b:
                    b2:fc:e9:23:86:1e:35:b3:24:bd:a0:5a:bb:da:c4:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:18:27:CD:A9:88:CE:BD:8E:16:4D:B4:BE:04:5D:C9:2F:49:1B:13
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/chgnzamIzr2OFk20vgRdyS9JGxM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:b4:de:c1:3e:a6:a5:0d:0f:7a:0e:95:c0:d9:22:3e:0a:b1:
         ff:28:88:a5:79:10:f5:29:04:5b:1e:6b:3e:d7:1f:fa:34:51:
         40:aa:b8:b6:aa:9c:1f:da:21:6e:37:6c:7d:09:dc:07:25:9d:
         4c:d1:47:ec:94:73:14:f8:25:d2:ce:5d:64:9d:a7:d5:5d:91:
         e2:e3:4a:02:82:c5:39:5a:a4:2b:6f:8b:1d:22:18:d3:8b:e9:
         9f:d0:68:1b:47:07:97:39:6d:ca:e5:12:36:f5:75:1b:a8:ca:
         36:3d:41:75:35:29:96:36:f5:40:a0:03:bc:b4:07:33:88:a5:
         46:87:15:95:6f:33:73:28:43:23:6d:dd:c2:96:a8:7c:53:b5:
         9e:e9:1b:80:82:72:d5:85:9d:ae:80:58:86:4a:88:fc:80:f1:
         c4:de:9e:c2:aa:3e:55:82:d5:64:34:c8:1d:28:38:0c:54:e4:
         09:b1:a5:26:94:35:7a:f3:58:90:05:2e:6c:3c:8b:ce:2e:e4:
         e3:a9:1d:f0:32:13:36:06:f1:b6:b8:78:b2:0c:0d:9a:dc:1b:
         b3:7e:8c:c1:0e:fe:b0:b8:9e:41:e2:b1:c9:f5:e6:84:be:a3:
         e4:44:00:6b:9c:73:9f:ae:15:2e:e0:74:0c:8f:e4:33:c3:d0:
         79:5d:d5:d2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF
NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTI2MDEwMTAx
MzIyMloXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNzIxODI3Q0RBOTg4Q0VC
RDhFMTY0REI0QkUwNDVEQzkyRjQ5MUIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL0Q42xNI2+Fz6+DretkfuJ4/qv0vpQTFCQDh5+dHjk7UzUFP6b4
I/jrwq1p2cNpbfJzLIcCEox6chuk7WgWxr/QbjWWWuOg/pETfEK2agP61Vh2nj3j
uMEabomHwIw4FWHmfG/ymC+ZLVzMYkX7vYVUqK0E8KkPWHb84DF+Bax6oYZ/hf38
oFA93CxNjTOweS+K1+EHvZGhr3cLLDC71y0PleoyGb/4Sv8bQPfqdVlD9oVLWDBv
VDxNDXWQfttQUyF7+JvDEace2GiEL1akO3BUET9JptCnHPXOTfGZXwjKwMhBxdbT
3hzREJDBXIZbsvzpI4YeNbMkvaBau9rEaAUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRyGCfNqYjOvY4WTbS+BF3JL0kbEzAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh
oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy
MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NDIvY2hnbnphbUl6cjJPRmsyMHZnUmR5UzlKR3hNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcKpDANBgkqhkiG9w0BAQsFAAOCAQEAprTewT6mpQ0Peg6VwNkiPgqx/yiI
pXkQ9SkEWx5rPtcf+jRRQKq4tqqcH9ohbjdsfQncByWdTNFH7JRzFPgl0s5dZJ2n
1V2R4uNKAoLFOVqkK2+LHSIY04vpn9BoG0cHlzltyuUSNvV1G6jKNj1BdTUpljb1
QKADvLQHM4ilRocVlW8zcyhDI23dwpaofFO1nukbgIJy1YWdroBYhkqI/IDxxN6e
wqo+VYLVZDTIHSg4DFTkCbGlJpQ1evNYkAUubDyLzi7k46kd8DITNgbxtrh4sgwN
mtwbs36MwQ7+sLieQeKxyfXmhL6j5EQAa5xzn64VLuB0DI/kM8PQeV3V0g==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:32:28 2026 by rpki-client