This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/EHtloLg_Mv3K-Ue36taMM7UBvtA.roa
File:                     EHtloLg_Mv3K-Ue36taMM7UBvtA.roa (raw, json)
Hash identifier:          +GzW/IS/ZQ4eqqFeyFnAg32IZEhQCuE7WqGN+mBanWY=
Subject key identifier:   10:7B:65:A0:B8:3F:32:FD:CA:F9:47:B7:EA:D6:8C:33:B5:01:BE:D0
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0146
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/EHtloLg_Mv3K-Ue36taMM7UBvtA.roa
Signing time:             Thu 01 Jan 2026 01:30:18 +0000
ROA not before:           Thu 01 Jan 2026 01:30:18 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9607
IP address blocks:        211.14.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan  1 01:30:18 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=107B65A0B83F32FDCAF947B7EAD68C33B501BED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ca:fb:57:a9:51:0a:da:4d:ee:e7:a7:19:e6:
                    a5:f4:f8:bc:a9:96:88:8b:76:c4:87:58:05:06:5f:
                    75:94:65:2d:e1:86:f0:c2:6c:6c:49:37:58:ec:c3:
                    7d:f2:0d:ad:35:5f:9b:b0:53:61:25:25:34:42:fa:
                    f4:c7:4e:41:29:1d:db:ff:2b:9e:a5:3f:99:b3:e8:
                    1e:f5:5b:f5:f8:4e:ff:c7:0d:07:8b:22:e5:86:e1:
                    56:27:36:7e:ba:06:81:71:14:ad:88:83:0d:c6:b2:
                    a7:59:27:ca:a4:40:c4:24:f4:a0:99:10:64:b4:61:
                    a8:b3:32:72:33:e0:cf:7f:b2:8a:7c:ee:0a:2c:cc:
                    43:34:d5:1f:5c:42:9b:17:3d:32:7d:aa:1c:0d:37:
                    2b:79:7f:65:0d:33:19:ab:41:3a:05:75:8d:a1:0a:
                    fd:95:fa:0a:69:65:bd:76:3b:c3:fd:47:d1:63:f8:
                    30:37:e1:cf:af:89:38:88:17:df:7e:ff:36:e5:9a:
                    c0:a2:b4:1c:78:3e:ff:85:27:13:f4:eb:a7:dc:58:
                    39:c3:b0:84:d4:b1:79:64:19:4e:fd:4c:ea:2a:ad:
                    c3:cb:e1:0a:00:5b:ed:15:e9:37:e6:38:2c:1b:cb:
                    d5:38:47:1d:40:b5:37:75:e7:2e:8b:ac:ca:d6:c0:
                    03:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7B:65:A0:B8:3F:32:FD:CA:F9:47:B7:EA:D6:8C:33:B5:01:BE:D0
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/EHtloLg_Mv3K-Ue36taMM7UBvtA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:98:f2:73:2d:b2:a6:25:33:a8:9f:0d:dd:1c:04:d1:52:3a:
         02:41:6a:11:81:a0:fe:07:9a:d6:16:18:46:54:b8:b9:f6:2a:
         b3:91:ac:1d:1b:bb:2d:49:68:7a:af:6d:7b:4e:69:9f:d3:ba:
         84:4a:ae:2f:4d:34:4a:b6:b7:52:d7:ab:5f:5c:25:c5:2d:f6:
         9d:32:1a:05:98:f6:1f:62:fd:6a:79:ea:0d:2a:39:05:bf:38:
         01:51:1c:aa:e0:33:7e:6e:bb:fb:a0:7a:bd:43:71:62:f9:be:
         41:9d:42:7d:48:57:6e:af:82:cc:7c:ea:80:d8:24:4d:60:fc:
         4d:ad:56:56:00:6f:70:af:ea:52:4c:47:9c:06:b0:99:b7:8b:
         43:fb:de:67:c5:e4:8d:58:62:38:7f:8f:8a:08:ce:d7:1c:bf:
         6e:d1:df:51:60:55:8e:0b:cc:02:c1:cf:b4:13:02:95:a5:4b:
         b5:fd:bc:73:fa:5f:04:4b:b7:1e:db:2e:d6:9d:fc:b1:af:a4:
         0b:f7:ee:d6:41:36:45:c6:70:5e:03:2c:e6:ee:7f:42:05:ca:
         b6:78:d6:76:28:f9:d8:92:b9:4f:18:c3:2f:fb:ea:41:d1:00:
         b0:b6:72:e2:69:38:e6:88:17:eb:f6:d8:47:9d:6b:a3:0d:6c:
         59:dc:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:06:46 2026 by rpki-client