This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/E3Fs77p9mYpwCCKqq0K2OSsBHnU.roa
File:                     E3Fs77p9mYpwCCKqq0K2OSsBHnU.roa (raw, json)
Hash identifier:          D7QGsPiXtb5yNdsDZ5paYrQh2xKx8akTvMWwLVrmAII=
Subject key identifier:   13:71:6C:EF:BA:7D:99:8A:70:08:22:AA:AB:42:B6:39:2B:01:1E:75
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       013B
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/E3Fs77p9mYpwCCKqq0K2OSsBHnU.roa
Signing time:             Thu 01 Jan 2026 01:30:08 +0000
ROA not before:           Thu 01 Jan 2026 01:30:08 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan  1 01:30:08 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=13716CEFBA7D998A700822AAAB42B6392B011E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:e0:68:14:af:fa:e2:46:42:6b:67:89:3a:
                    16:ee:67:8a:0b:93:66:ee:09:4e:7d:47:6a:4c:53:
                    87:ea:df:98:86:b9:d0:3a:b6:ae:a1:85:fb:6a:c9:
                    d9:f1:d7:1b:40:79:11:22:ec:a1:3c:24:9f:ce:79:
                    ac:4b:73:29:ce:61:19:27:72:0b:90:db:1c:40:12:
                    6a:88:9a:ab:29:1a:71:3b:80:15:c0:b0:95:67:54:
                    90:48:ea:b6:bb:9b:46:7f:28:93:38:f7:19:ee:76:
                    f8:35:3f:4d:9d:e1:6c:4e:3a:51:c4:a0:cb:de:74:
                    bd:7b:bb:60:df:9b:f8:b7:0b:40:11:30:6a:4e:52:
                    12:c9:d4:4c:0c:9f:9a:1d:79:c7:e5:d3:9e:18:85:
                    fe:04:cd:21:2a:69:a9:85:cb:0b:46:49:43:90:1c:
                    ff:15:2f:13:ab:f6:a0:4a:b1:56:a0:a3:6e:16:53:
                    b5:e7:76:7b:3b:45:b7:eb:60:33:cc:8e:90:37:07:
                    e6:6d:4a:17:e8:82:03:a8:89:5a:11:9d:b7:b9:e0:
                    8d:3a:98:f5:02:dc:e6:8b:2c:a8:8b:17:92:b4:e4:
                    3c:3e:de:6d:f8:9b:da:be:ac:11:10:ec:ef:5f:a1:
                    e8:95:8a:7d:96:3d:3b:a7:5e:7b:82:a2:bb:17:be:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:71:6C:EF:BA:7D:99:8A:70:08:22:AA:AB:42:B6:39:2B:01:1E:75
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/E3Fs77p9mYpwCCKqq0K2OSsBHnU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:77:65:4f:f8:1d:a2:bd:5e:80:f5:80:0b:50:5f:43:b2:23:
         d6:88:1c:44:94:9b:e0:ab:eb:3e:24:ba:ee:83:e8:f5:dd:64:
         10:11:91:d9:6d:dc:86:5e:37:d5:f2:8f:a2:a6:82:69:c4:46:
         68:3b:26:42:a3:71:8b:53:71:06:60:a9:a5:8b:66:ca:e7:84:
         56:46:dc:ea:33:2e:81:f2:6a:a0:2b:a4:35:4a:78:09:f6:6f:
         a7:bd:3a:17:51:b8:51:01:3c:8b:31:e0:24:2e:96:0d:d8:90:
         6d:87:ba:3d:b3:a4:d2:40:cd:40:7b:8f:1c:9d:a2:90:1c:1f:
         ee:a0:96:14:65:c9:12:a6:a4:83:87:99:c3:d2:39:e9:de:b6:
         2c:53:a3:f1:00:8b:0e:d9:14:e8:d7:67:07:24:f7:e6:cd:0b:
         93:a2:1f:bf:c9:e4:94:cf:1e:50:16:c3:5e:07:8e:3c:c9:b8:
         97:ea:9a:37:cd:33:df:90:fe:d6:98:6d:70:f9:d0:12:87:a5:
         78:06:cf:bf:52:47:ea:0f:12:68:f5:10:ea:09:23:16:c9:87:
         e7:de:42:37:e4:f3:28:e7:c1:f7:10:cd:a3:44:6e:43:c1:0b:
         68:be:e0:42:90:a8:0e:8f:b8:ae:22:42:97:28:b9:9f:04:89:
         a2:b3:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:06:47 2026 by rpki-client