This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/1MrG7G9H8s2YFEiGe2XOgYtkTkg.roa
File:                     1MrG7G9H8s2YFEiGe2XOgYtkTkg.roa (raw, json)
Hash identifier:          7D5em6O8LBPX/lyOFGRiY9u/rM7/jfj+QgwyJEWU4is=
Subject key identifier:   D4:CA:C6:EC:6F:47:F2:CD:98:14:48:86:7B:65:CE:81:8B:64:4E:48
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0620
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1MrG7G9H8s2YFEiGe2XOgYtkTkg.roa
Signing time:             Thu 01 Jan 2026 01:50:04 +0000
ROA not before:           Thu 01 Jan 2026 01:50:04 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        61.120.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568 (0x620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:50:04 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D4CAC6EC6F47F2CD981448867B65CE818B644E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:8f:79:f2:33:8a:7b:82:75:8c:2a:b8:2a:
                    54:f7:7c:b6:c2:47:c7:a6:5d:12:0d:08:5c:f2:40:
                    80:4b:5a:43:24:61:fe:0b:76:d7:d9:e5:40:95:ed:
                    98:bd:59:3f:92:56:bc:2a:f8:36:4f:c5:16:14:ca:
                    b7:b0:b9:11:7a:7c:a0:32:3c:75:00:d0:eb:09:b6:
                    71:66:b4:99:a8:92:3b:6c:e3:9f:8d:e9:b2:b6:21:
                    15:a5:ce:bf:75:b4:56:eb:c9:f9:f4:38:b6:8c:e2:
                    02:71:d7:6b:f3:29:4f:9b:8a:fd:23:fd:6d:ed:e6:
                    be:5b:f9:07:ab:e1:d7:0a:0a:d2:59:9b:03:68:ee:
                    02:d4:c9:b9:89:87:8b:aa:78:4c:81:5b:f6:ea:64:
                    7d:a0:34:d2:6c:8d:eb:0b:f1:6d:ec:2d:60:ea:40:
                    87:4c:f3:0c:60:d6:e4:3e:56:ae:e4:bc:79:59:da:
                    1a:4f:97:5c:ce:54:45:84:7b:a4:60:e4:e9:b5:7f:
                    25:cb:b8:4e:2d:15:28:a7:e2:e7:ef:56:a7:18:e7:
                    67:1e:63:c4:a4:b0:2b:1a:fd:24:90:7f:73:be:bd:
                    9b:74:af:10:23:3a:cf:e0:2e:58:b5:14:6b:3b:5f:
                    9e:04:43:68:c7:74:51:ec:87:ec:e8:24:6d:c9:a1:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CA:C6:EC:6F:47:F2:CD:98:14:48:86:7B:65:CE:81:8B:64:4E:48
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1MrG7G9H8s2YFEiGe2XOgYtkTkg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:c8:cc:c4:13:bd:ec:90:5f:e3:09:ac:88:ec:83:ef:2a:0c:
         87:63:74:e3:f7:df:de:84:aa:96:b1:4d:f2:61:f4:8d:4d:df:
         c6:56:73:80:43:cf:4b:c7:66:11:97:07:a5:60:1f:17:16:51:
         ab:dd:24:d6:63:e1:61:46:34:c7:8e:d0:7e:a0:39:3a:ab:64:
         2e:5f:e7:16:48:ed:42:47:7f:4b:3e:26:d8:b8:58:6f:d0:be:
         5e:7e:2e:37:bd:b0:0b:05:9f:1a:3f:92:a2:a5:5f:17:cb:fc:
         cc:dc:a3:a7:19:cf:a2:86:e0:92:8a:28:7b:ba:f3:31:72:b0:
         4e:6f:2b:97:2a:b5:ea:c7:a4:c6:77:86:f3:72:28:82:db:54:
         6a:3f:ff:de:04:e9:20:6c:e1:d7:17:6b:1a:f3:43:bf:1f:06:
         a2:2b:0d:be:a1:1d:ee:9e:84:a7:60:ae:8c:85:ec:fc:9c:e3:
         1b:ef:79:93:b7:ca:81:aa:2f:d8:4e:9f:2d:3c:7d:4b:c2:2f:
         11:10:41:ee:88:8d:3c:ed:30:48:ae:e5:57:71:5a:6d:9b:55:
         b5:2e:67:23:11:06:3c:8a:b8:00:85:bc:07:0d:94:5a:b8:36:
         8a:68:c2:1a:80:2a:86:a5:f6:77:ae:db:5b:9f:ef:ff:ed:d7:
         ee:fc:5b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:38 2026 by rpki-client