This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3Yw9ETPmAnT0KzG_JaQCRTTuGAo.roa
File:                     3Yw9ETPmAnT0KzG_JaQCRTTuGAo.roa (raw, json)
Hash identifier:          4MpqUfyCgPdETzFXJw71kXq3fyGQkDTOQsIzJzSHhJw=
Subject key identifier:   DD:8C:3D:11:33:E6:02:74:F4:2B:31:BF:25:A4:02:45:34:EE:18:0A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05D2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3Yw9ETPmAnT0KzG_JaQCRTTuGAo.roa
Signing time:             Thu 01 Jan 2026 01:34:15 +0000
ROA not before:           Thu 01 Jan 2026 01:34:15 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        124.47.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:15 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=DD8C3D1133E60274F42B31BF25A4024534EE180A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:ba:50:85:d9:cd:15:83:2b:d7:fd:18:98:
                    c2:75:72:60:a3:f9:e2:68:ae:fb:2e:26:18:2a:e7:
                    94:68:ba:8e:7e:f1:79:28:10:b8:1c:66:d7:b5:b7:
                    54:f2:7d:32:43:b1:3b:3b:d0:4c:d1:4d:74:dc:1d:
                    ba:e3:79:90:8b:6d:48:1f:58:01:3a:75:3f:97:9d:
                    a9:bc:00:44:70:5f:1b:26:ad:bb:8d:39:d6:0e:14:
                    3c:dc:6d:c8:fd:2a:e7:84:da:00:12:d8:e1:dd:ea:
                    d7:45:3b:5b:f5:53:f5:e5:e2:80:84:b4:41:89:c2:
                    0b:d4:d7:ef:ff:00:e2:e8:e2:bb:d6:59:f1:7c:f5:
                    8c:e5:27:86:7b:89:8e:d5:66:7c:06:7b:5c:92:6d:
                    74:56:c7:88:dd:8e:d9:b3:69:ae:ed:d8:9a:39:68:
                    2c:2b:16:3b:aa:73:4c:bd:37:55:70:c6:dc:49:b3:
                    ce:32:45:be:dd:7b:7f:05:50:68:b1:64:bd:03:06:
                    cd:9f:b2:41:c2:3b:44:0d:f5:55:95:f0:0b:70:95:
                    70:e2:64:fc:3f:c3:76:47:a0:3f:43:f6:5e:5c:11:
                    f5:79:48:39:45:3c:c9:e9:ec:5e:82:8d:a8:f7:7f:
                    35:f6:0b:d0:90:8e:94:c3:7b:06:a8:20:68:e4:28:
                    c6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8C:3D:11:33:E6:02:74:F4:2B:31:BF:25:A4:02:45:34:EE:18:0A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3Yw9ETPmAnT0KzG_JaQCRTTuGAo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:cc:c3:79:96:30:42:bf:35:7d:19:06:de:69:a7:d0:6a:
         34:51:fe:cb:49:84:ea:5c:e7:f8:4b:05:85:1b:d7:a5:b3:5e:
         6f:bb:63:ac:85:59:bd:09:06:c0:55:b9:39:1c:06:ea:fc:68:
         4b:a5:3d:fd:7c:e5:28:76:65:f2:fb:f0:bf:73:f9:13:52:9b:
         23:9d:26:8d:4d:ef:31:37:83:dc:b9:b9:67:78:89:54:56:d7:
         07:72:4e:a7:a8:93:98:37:cf:a8:58:79:bb:1c:b3:8b:ba:e2:
         45:9b:1f:06:6e:42:c6:51:95:dd:f1:b4:ec:33:89:52:0f:64:
         6f:5d:fc:d8:76:b0:7c:38:0e:fa:a6:45:b0:48:43:96:12:58:
         20:c9:32:bb:dd:10:6c:4e:c0:4f:54:e0:02:60:f0:53:20:b7:
         d5:ad:73:1e:99:d2:d9:25:48:a3:54:00:c2:1c:92:5d:d2:6f:
         08:c9:af:d6:d0:63:4e:c5:6d:ac:c0:3b:52:e5:32:57:11:9f:
         ec:6b:9d:a0:ce:48:16:90:58:20:30:2c:75:47:c0:5b:bc:f3:
         e1:aa:dc:37:eb:b9:fb:49:8e:e5:67:8b:1f:0a:7a:bc:a1:42:
         3d:5d:b1:af:6b:9c:a5:30:82:df:81:c4:f6:fb:f2:3b:fb:ac:
         aa:e5:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:39 2026 by rpki-client