This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/B9C7l1kkWguQqaUOkRO15Ma8gGs.roa
File:                     B9C7l1kkWguQqaUOkRO15Ma8gGs.roa (raw, json)
Hash identifier:          e/YtLfeSmuueSwxUYjNIg6ijCYYKwrA/yoPom7dmoOg=
Subject key identifier:   07:D0:BB:97:59:24:5A:0B:90:A9:A5:0E:91:13:B5:E4:C6:BC:80:6B
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       013F
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/B9C7l1kkWguQqaUOkRO15Ma8gGs.roa
Signing time:             Thu 01 Jan 2026 01:30:12 +0000
ROA not before:           Thu 01 Jan 2026 01:30:12 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9607
IP address blocks:        211.14.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan  1 01:30:12 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=07D0BB9759245A0B90A9A50E9113B5E4C6BC806B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fc:76:14:35:e3:af:7c:87:02:d8:19:c7:f5:
                    d4:8f:57:eb:62:0b:9b:b8:5e:8d:b0:65:f3:30:e6:
                    31:13:85:fe:60:ed:f4:09:f0:3f:ed:c6:cc:73:fb:
                    60:04:70:63:7e:66:6c:17:7f:de:41:ef:8d:96:d7:
                    e9:54:3e:ed:bb:c8:bc:5d:40:af:f9:34:68:01:38:
                    14:b6:ca:98:06:2a:60:d4:36:61:0e:4f:64:22:bd:
                    81:21:68:49:86:05:48:61:3d:8c:a4:b9:4f:7b:5f:
                    d9:21:8f:e9:4f:32:a3:49:22:da:a9:30:1f:d1:1b:
                    c5:c9:bd:4f:b3:c4:12:55:74:71:58:ef:e1:a6:f3:
                    07:ee:03:53:37:55:01:ce:cf:45:05:55:b0:c1:3f:
                    5b:fd:b6:7f:f7:d5:7a:4e:02:16:d1:bf:59:be:db:
                    9b:f1:a6:14:83:0d:f4:7d:13:3e:ad:6f:6e:34:00:
                    f7:8f:e9:3b:10:a0:01:33:bd:38:06:f5:ee:c5:ef:
                    bc:1c:50:6a:af:f6:20:d1:d4:3b:ff:b8:9a:2c:61:
                    0b:d8:27:45:a0:8a:1f:4d:4f:12:dc:72:69:ce:56:
                    80:5f:24:8f:c4:1a:2b:54:5d:2b:f2:94:60:2e:a6:
                    f8:a2:f0:96:d8:fb:dc:84:64:73:79:81:25:29:f7:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D0:BB:97:59:24:5A:0B:90:A9:A5:0E:91:13:B5:E4:C6:BC:80:6B
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/B9C7l1kkWguQqaUOkRO15Ma8gGs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:c3:16:e9:21:45:fa:d1:53:44:49:dd:1c:76:93:57:5a:
         0f:d8:6d:50:26:62:89:a3:e3:fe:13:7d:35:45:b3:8b:54:2a:
         80:59:9c:45:6a:a8:65:e8:0e:21:ba:d0:28:d5:91:24:63:43:
         54:64:ec:66:9a:bb:de:49:7e:eb:13:0e:19:14:3e:de:51:84:
         16:a0:8e:0a:f7:1d:ff:2b:17:fa:f9:cf:cd:40:ac:d5:0f:b4:
         ca:46:db:de:3d:48:f7:fa:88:e8:d3:04:44:bc:a3:22:9d:47:
         fa:cc:9a:6a:4f:23:08:28:f1:4d:63:8b:f6:5a:ee:c9:0d:a6:
         8c:7c:bb:b0:c6:bb:04:cd:3f:0b:22:90:5f:40:b1:93:d7:04:
         a1:4b:72:ec:d6:b3:54:60:16:8d:d7:10:75:0f:e2:90:ab:b5:
         7f:96:89:a4:29:3b:05:a3:7f:ce:da:8b:74:f8:46:41:38:35:
         3c:ca:ec:2d:13:89:1e:e9:e7:5d:ba:b5:26:de:0a:89:d2:6e:
         aa:d8:92:21:ae:c8:12:c7:eb:e0:db:60:51:c4:16:0c:f4:ef:
         d7:8b:36:8c:87:0f:2e:9f:a3:47:c5:fe:ce:a4:2f:f3:30:7e:
         09:a8:63:f0:c6:1f:32:c1:a5:27:ee:8a:ca:92:49:93:17:30:
         16:73:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:06:45 2026 by rpki-client