This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3TgK1r6te6t64TCAfsko1rT7jnc.roa
File:                     3TgK1r6te6t64TCAfsko1rT7jnc.roa (raw, json)
Hash identifier:          pk8YEBdE8XVAjZ3h0nkc1gkcthGGBTkIkJqW5KMuOiY=
Subject key identifier:   DD:38:0A:D6:BE:AD:7B:AB:7A:E1:30:80:7E:C9:28:D6:B4:FB:8E:77
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05C4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3TgK1r6te6t64TCAfsko1rT7jnc.roa
Signing time:             Thu 01 Jan 2026 01:34:07 +0000
ROA not before:           Thu 01 Jan 2026 01:34:07 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:07 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=DD380AD6BEAD7BAB7AE130807EC928D6B4FB8E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:fe:51:b0:f1:fe:3c:cf:cb:c3:93:d9:8c:
                    c8:5d:54:e1:31:7b:e9:7e:64:07:1f:d1:a7:d4:a0:
                    fc:fc:79:e5:d2:95:d6:37:d9:b0:ae:e5:85:6c:26:
                    eb:27:33:92:b2:dc:cd:eb:d0:b7:2b:dc:57:71:05:
                    ad:ca:01:ad:87:18:21:f3:c2:18:4a:49:e6:82:fd:
                    ac:03:4e:e6:75:43:bf:c8:33:1b:d4:60:0b:55:7c:
                    9f:81:76:8b:56:8a:e2:08:fb:bf:ab:55:8c:a2:39:
                    72:5c:ef:6f:43:ef:bc:cc:e7:2b:cf:8d:8a:d8:aa:
                    d0:c7:0e:dd:52:34:79:6b:7b:50:8e:00:75:2c:64:
                    ea:cb:ca:d2:89:75:de:94:ab:3a:1d:ae:d0:b2:74:
                    d9:79:3c:9d:ce:85:c0:b4:f7:94:d8:0c:a2:48:65:
                    f1:fd:cb:2d:ac:29:d1:b8:b4:42:bc:09:5a:93:16:
                    69:2c:ac:11:1c:37:08:ed:f7:c3:40:46:79:6d:24:
                    1b:28:7e:55:30:66:db:f8:bd:41:88:a0:ea:4b:ab:
                    a7:15:6c:35:08:53:be:f9:6b:cd:88:0d:a9:43:01:
                    8c:81:e2:36:65:40:38:10:20:25:44:f7:2c:68:27:
                    b0:1a:0e:1b:d5:ea:82:d1:2e:24:49:5d:bc:05:b7:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:38:0A:D6:BE:AD:7B:AB:7A:E1:30:80:7E:C9:28:D6:B4:FB:8E:77
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3TgK1r6te6t64TCAfsko1rT7jnc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:4d:89:24:21:c1:ca:a7:e0:9c:2f:40:29:5d:a7:42:33:6c:
         56:d2:80:b0:e5:08:8a:f8:07:e8:81:83:8f:2b:57:bf:31:c9:
         65:2a:29:a6:b0:7e:ac:0e:a0:53:cb:01:61:92:84:53:e0:2c:
         90:a6:d7:20:91:93:35:c2:5b:70:eb:23:aa:5e:ea:4c:21:61:
         53:8b:12:6a:cb:fa:bb:46:a7:f7:87:06:25:97:5b:b1:94:ff:
         b0:4d:6e:a0:68:c2:25:74:7c:65:80:3c:c3:de:1e:24:7f:ae:
         58:de:e5:17:d3:c0:8f:de:59:dc:05:e1:fd:6d:d1:c4:66:d0:
         ac:a9:ab:d7:a4:e2:42:aa:c5:25:ff:0f:ae:63:48:23:7c:33:
         60:5f:c6:78:9f:13:05:2d:4f:37:db:b6:e3:27:09:b7:6b:11:
         0a:a6:f0:c8:a4:86:02:76:04:1c:f0:48:5c:8c:f4:93:45:33:
         00:af:41:91:5b:5b:ce:a0:29:05:61:17:7b:16:bd:11:9f:db:
         94:7e:8e:07:30:4a:5e:50:95:b8:70:9d:1c:8a:40:f0:df:b8:
         4b:78:59:a7:3b:0e:bf:80:19:a8:13:af:25:c2:2c:c8:ec:cf:
         db:f1:b7:f6:46:74:f9:5c:94:32:c6:94:b2:c3:fc:8e:b1:08:
         c7:c1:bb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:37 2026 by rpki-client