This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/2Kwp9ctNqiX1QpMbYTlcuLosAGM.roa
File:                     2Kwp9ctNqiX1QpMbYTlcuLosAGM.roa (raw, json)
Hash identifier:          2hgthxq7H2iZaWxNJVwVlfqApZTO1mCWE1XXS6XMR4U=
Subject key identifier:   D8:AC:29:F5:CB:4D:AA:25:F5:42:93:1B:61:39:5C:B8:BA:2C:00:63
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05D1
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2Kwp9ctNqiX1QpMbYTlcuLosAGM.roa
Signing time:             Thu 01 Jan 2026 01:34:15 +0000
ROA not before:           Thu 01 Jan 2026 01:34:15 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        202.226.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:15 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D8AC29F5CB4DAA25F542931B61395CB8BA2C0063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:35:ce:ab:90:a2:71:5b:66:df:6b:93:e8:
                    56:7e:d0:cf:93:61:08:45:f8:f7:d4:03:aa:c8:46:
                    8f:2a:c0:88:d8:23:8d:ad:49:e3:37:9c:84:92:0a:
                    fc:08:78:4e:69:20:cb:8e:a0:f0:42:e7:9e:3e:83:
                    77:f7:68:6c:0d:03:48:28:92:54:a2:45:8b:73:67:
                    07:e5:07:5b:ea:81:cd:27:52:fd:05:bd:a3:7f:40:
                    fd:a3:a7:6b:53:e3:7a:ce:1e:a8:33:4c:33:50:d2:
                    37:d3:76:e3:28:f8:e0:38:a7:53:5c:cf:27:79:2e:
                    08:7c:28:40:27:29:ec:ad:3e:a0:a7:d5:cb:6d:8b:
                    9e:55:bc:5e:a3:22:3f:1b:25:5d:98:f8:f3:2d:e7:
                    76:09:1a:db:e6:68:d2:dd:db:44:2c:b4:6f:88:25:
                    40:80:1b:11:59:ae:62:4c:c5:22:fd:b9:14:89:1b:
                    2b:81:6e:2b:e9:c0:0a:a5:3e:b2:65:06:9a:0e:ba:
                    79:54:39:64:66:54:54:7f:9f:31:73:05:cc:7b:c8:
                    fa:79:55:cb:a4:d4:8a:05:e2:b9:17:65:ad:9b:19:
                    39:03:60:e4:fc:ca:c0:36:6a:08:34:42:27:f5:fa:
                    12:5d:f2:e0:d2:02:75:7a:4a:c2:45:f3:99:09:dc:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AC:29:F5:CB:4D:AA:25:F5:42:93:1B:61:39:5C:B8:BA:2C:00:63
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2Kwp9ctNqiX1QpMbYTlcuLosAGM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:10:74:bf:ea:25:08:6f:89:13:df:07:09:e0:b7:ec:59:
         aa:e0:c6:a6:3c:85:aa:d3:5c:0c:e0:40:12:0c:fc:81:c1:59:
         77:00:4b:29:cd:00:ea:99:9e:a1:ae:28:08:e4:bb:41:99:70:
         91:60:10:97:00:a8:f5:61:bd:ac:75:26:9c:b0:8c:17:29:49:
         0a:0d:8a:01:32:cf:db:76:98:7f:e2:a2:11:5e:d9:4d:82:c5:
         ab:75:27:f5:5a:55:0d:06:1c:a4:24:4e:21:50:13:c7:a0:f6:
         61:cc:03:c6:4e:1d:16:34:b3:e0:79:5a:fc:ee:8d:f8:8e:35:
         95:52:52:32:73:3d:45:a3:2f:de:8b:57:81:4c:19:68:ac:fd:
         c9:c6:78:95:ad:ec:e3:13:af:7b:dd:1b:d9:ea:f2:90:c1:ef:
         05:68:e5:c6:46:a2:71:d8:4d:1d:5c:5c:b9:00:60:ad:c0:b2:
         29:ab:df:c1:2e:f1:e6:93:fd:3c:72:10:b3:c4:49:bd:4e:cb:
         8b:fd:78:59:a4:4e:2d:b1:59:07:5d:b9:b2:a9:d5:39:bf:85:
         3b:37:46:d7:8c:a6:bb:e8:18:a6:5a:30:6a:9c:38:d2:83:8a:
         ab:3d:1e:6f:6c:5f:11:72:91:ae:65:81:4d:a9:47:e5:fa:ad:
         d7:1e:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:38 2026 by rpki-client