This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ObpPLYCyHhQ1zLdcgxonksSg1fw.roa
File:                     ObpPLYCyHhQ1zLdcgxonksSg1fw.roa (raw, json)
Hash identifier:          5IOKV3UVO5WazRlv6RR/PGodRXKnPPk9y4qlr0Mzk7Q=
Subject key identifier:   39:BA:4F:2D:80:B2:1E:14:35:CC:B7:5C:83:1A:27:92:C4:A0:D5:FC
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0145
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ObpPLYCyHhQ1zLdcgxonksSg1fw.roa
Signing time:             Thu 01 Jan 2026 01:30:17 +0000
ROA not before:           Thu 01 Jan 2026 01:30:17 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9607
IP address blocks:        203.216.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan  1 01:30:17 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=39BA4F2D80B21E1435CCB75C831A2792C4A0D5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:d5:d1:3e:ff:1d:ad:d4:a5:10:39:6c:7a:
                    f5:30:aa:28:a8:68:81:6d:f5:4e:6d:92:54:88:62:
                    86:53:bc:b9:04:97:90:7c:cd:ae:b2:dc:72:88:cd:
                    18:9d:f5:53:ca:53:f7:ea:d2:5a:14:4d:ff:4a:d3:
                    ab:3f:75:0c:3b:23:ec:9b:9e:2c:16:c2:e1:c0:42:
                    da:28:29:42:3b:9b:db:cc:02:ca:37:2d:2f:9e:ee:
                    13:0f:6c:83:ed:7c:d4:ac:ea:24:4c:3d:fe:5f:58:
                    6d:f8:5e:27:fe:6b:71:7c:f0:83:fb:87:ee:de:e1:
                    a7:8e:68:b7:35:e3:65:ef:ec:68:35:55:dd:4c:c5:
                    f6:42:fc:6e:4a:c3:1c:cb:27:5b:e5:91:25:1b:cc:
                    5f:2e:e4:36:02:f6:c4:b1:61:bb:b7:38:45:f5:c0:
                    a6:bc:d5:28:59:45:01:69:37:12:72:62:f3:90:0b:
                    94:45:83:67:af:a2:e6:93:07:05:d9:df:73:fa:3c:
                    34:34:3f:ba:16:33:38:54:77:ff:bf:dd:3b:03:6e:
                    e5:44:81:a2:5a:b6:18:5e:d3:04:db:ad:08:c5:e8:
                    a1:f5:20:a0:9a:c0:f8:0a:86:df:1c:8f:e0:69:61:
                    f3:2b:a4:26:7d:cb:8f:22:f6:43:45:22:4b:dd:5b:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:4F:2D:80:B2:1E:14:35:CC:B7:5C:83:1A:27:92:C4:A0:D5:FC
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ObpPLYCyHhQ1zLdcgxonksSg1fw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:c2:4e:8b:fd:99:fb:8b:2f:f1:8e:6c:84:e3:89:b7:08:
         7a:b8:35:24:b2:35:ed:aa:5c:2d:f0:99:db:9f:aa:85:c2:45:
         1a:4d:44:10:86:02:f7:9b:03:16:0e:91:f1:76:82:36:34:a5:
         f6:fe:06:50:c0:4c:50:92:cc:0f:5c:80:de:7f:57:4c:f8:66:
         37:ad:c7:fa:0a:64:b8:38:c5:11:81:a3:27:36:b4:bb:26:f6:
         d6:ef:11:da:59:75:e6:b2:0b:4a:a1:6d:c1:e1:e7:6e:1f:da:
         19:3e:cb:ba:a6:00:d4:22:5c:51:87:6b:f6:f4:2a:05:f2:ac:
         be:e4:ad:76:b9:8a:ef:c1:e4:72:3b:c4:79:22:2d:67:59:6a:
         a3:0c:d1:95:eb:07:4f:8a:70:19:d9:5d:42:fb:1c:1a:d9:8e:
         52:28:95:e9:81:7c:29:8c:a2:4b:1d:62:84:60:5f:3e:11:ae:
         6f:ce:17:dd:4e:8a:aa:97:e5:62:e1:6c:ca:9b:0e:66:ba:29:
         f7:51:3c:78:3d:ff:1a:9e:28:5c:33:a8:a4:8d:1d:72:7c:8a:
         b4:2c:f1:a8:05:af:60:90:37:6e:c8:cf:fd:26:be:f4:11:22:
         a2:e9:e7:4e:69:97:21:c9:78:87:75:ad:dc:f7:b8:0d:19:84:
         fc:f0:69:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:06:46 2026 by rpki-client