This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/a90JL2GuseP4LJxVejYc33tOl-0.roa
File:                     a90JL2GuseP4LJxVejYc33tOl-0.roa (raw, json)
Hash identifier:          uvX4Qvo4rxPUTtmCU6U/8hldM0ajqRyvgKIHPLYk/x0=
Subject key identifier:   6B:DD:09:2F:61:AE:B1:E3:F8:2C:9C:55:7A:36:1C:DF:7B:4E:97:ED
Certificate issuer:       /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial:       61
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/a90JL2GuseP4LJxVejYc33tOl-0.roa
Signing time:             Thu 01 Jan 2026 01:31:48 +0000
ROA not before:           Thu 01 Jan 2026 01:31:48 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     2504
IP address blocks:        192.50.24.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
        Validity
            Not Before: Jan  1 01:31:48 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=6BDD092F61AEB1E3F82C9C557A361CDF7B4E97ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:e7:c3:73:a0:4c:8a:92:fb:c3:aa:7b:d7:
                    c5:30:87:0c:84:2b:71:de:fc:31:8f:ae:ad:89:d3:
                    de:8b:cd:dd:3c:ac:74:e7:6d:d1:c5:a8:3d:82:6a:
                    08:a3:03:79:75:b6:22:c3:4d:90:31:a3:93:27:22:
                    b1:71:ad:5f:e7:bc:2c:20:4e:3d:b9:b0:08:17:30:
                    62:64:1e:a2:96:55:5c:fa:89:96:76:22:91:fa:e4:
                    09:ef:a1:6a:1a:85:ea:94:79:8b:0e:0e:ea:50:19:
                    6e:53:e2:13:6b:1c:f9:a6:c4:d2:a5:25:8f:22:5e:
                    b4:2f:10:06:6d:0d:03:02:41:3f:0d:aa:7e:c9:22:
                    9f:72:47:c0:02:3c:47:72:78:6a:7a:ee:1f:50:95:
                    87:7b:cc:65:43:9a:8c:b1:60:34:36:b0:6f:f9:0a:
                    89:76:28:e0:10:18:66:33:2f:ce:1f:03:a4:8c:3f:
                    a4:10:44:94:bd:c9:e9:0b:e1:da:d5:32:79:4c:e4:
                    66:87:11:91:01:94:47:c2:d6:cc:a0:7c:56:b2:bd:
                    42:d7:6b:83:1b:f7:37:88:00:cf:a5:f8:fa:67:2c:
                    64:fd:73:b8:46:cb:8f:1f:80:7f:ca:07:df:e1:37:
                    20:71:11:c8:ee:4e:24:43:9c:c1:a6:45:b7:28:c4:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DD:09:2F:61:AE:B1:E3:F8:2C:9C:55:7A:36:1C:DF:7B:4E:97:ED
            X509v3 Authority Key Identifier:
                keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/a90JL2GuseP4LJxVejYc33tOl-0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:f9:89:63:3e:69:d1:c0:5b:bb:9f:29:a2:96:4f:05:8b:
         e8:2b:2b:b5:3d:63:15:db:e4:4a:2d:22:87:f9:79:d1:55:8c:
         9a:32:9b:00:00:c3:04:8c:ab:75:88:26:db:5e:7f:bc:5b:00:
         bb:94:7e:1f:42:0e:af:b0:fe:7b:dd:8b:1a:77:9a:35:df:2d:
         4d:8d:69:1e:5c:21:b9:ac:a4:1e:c2:ae:2d:83:c4:b1:25:9c:
         d9:4e:26:66:2e:54:11:1f:b5:0c:be:3b:5e:d0:19:fa:45:81:
         3a:43:1c:ca:26:0a:cd:95:a7:38:0a:f4:db:a0:96:97:d2:88:
         c9:ed:07:a2:7a:d3:bd:46:29:04:61:08:cf:8b:73:c5:37:44:
         00:38:1c:38:f0:0e:a9:ca:f3:f1:82:7b:f3:2e:13:92:90:49:
         40:8c:3e:0d:61:a1:51:64:c0:65:b3:83:0b:b1:52:9a:11:e0:
         08:7e:e3:82:04:59:98:47:ad:c0:ee:4c:97:d9:9e:dc:d5:cd:
         b0:4f:6c:87:f9:99:8f:0a:a0:3f:99:99:b8:85:de:58:68:56:
         f9:01:65:98:9f:46:6d:20:a0:db:84:39:a2:ce:49:f4:ea:ba:
         d2:5d:4a:2f:91:e6:45:31:0d:cd:a5:22:c0:30:a7:4e:94:84:
         5a:aa:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:17:58 2026 by rpki-client