This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3bfWQvf_RWfb5tqvCFzqssc8MnE.roa
File:                     3bfWQvf_RWfb5tqvCFzqssc8MnE.roa (raw, json)
Hash identifier:          DMfApBca/FPaJiTh+uM2MUNf7EoC7Y9qf3Mrg0VT7fU=
Subject key identifier:   DD:B7:D6:42:F7:FF:45:67:DB:E6:DA:AF:08:5C:EA:B2:C7:3C:32:71
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05BC
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3bfWQvf_RWfb5tqvCFzqssc8MnE.roa
Signing time:             Thu 01 Jan 2026 01:34:03 +0000
ROA not before:           Thu 01 Jan 2026 01:34:03 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        27.98.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:03 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=DDB7D642F7FF4567DBE6DAAF085CEAB2C73C3271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:15:79:15:9d:1c:66:df:c7:4c:14:18:ab:
                    b9:db:df:7c:08:68:05:65:a7:d0:28:d2:9d:42:58:
                    b1:b6:fe:2b:f9:6f:6e:13:48:c5:ee:68:e2:74:90:
                    2d:7a:a6:63:71:d3:b1:2e:0b:0a:3b:d8:28:bf:f1:
                    cb:d6:b4:e3:2f:22:62:0c:a9:4e:6c:7b:90:f2:db:
                    52:a8:65:df:fc:9f:19:1d:dc:29:3f:f5:14:e5:03:
                    b6:b3:25:81:a6:62:64:a9:ed:bb:a0:13:63:bd:e6:
                    e6:bd:17:21:f9:a8:1f:15:e6:2c:84:47:15:b6:e8:
                    76:97:09:33:b9:11:96:87:8f:12:bd:18:10:1c:46:
                    43:20:93:49:e9:14:05:e8:d6:ac:4c:dd:de:44:64:
                    54:82:f2:1a:76:44:8e:e5:9b:f5:1d:e2:41:d9:41:
                    a4:4c:64:f5:3d:16:80:53:c1:41:a5:22:c2:02:57:
                    77:12:a4:a8:1d:c4:2d:5c:3c:54:ec:39:d0:80:4f:
                    04:a1:f8:17:43:5e:8c:02:8f:d8:e7:4d:91:b6:59:
                    13:27:81:4f:37:2f:09:62:b2:b3:0d:3f:e5:30:4f:
                    d7:4d:df:8e:56:74:fa:e3:02:c4:1b:b3:75:ec:d7:
                    80:24:0c:4d:41:79:a2:35:51:78:d6:db:ff:6f:72:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B7:D6:42:F7:FF:45:67:DB:E6:DA:AF:08:5C:EA:B2:C7:3C:32:71
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3bfWQvf_RWfb5tqvCFzqssc8MnE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.98.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         13:66:8c:f5:3e:a3:56:c0:e7:a5:31:0a:bc:04:4d:6d:84:ac:
         2d:c1:69:8e:60:af:e7:50:20:ee:09:10:9c:57:30:ca:76:a5:
         6c:ac:73:23:93:13:b6:5d:dd:bf:23:8d:78:fa:24:f7:e7:56:
         75:c4:e0:de:f9:f4:43:87:82:8c:5e:5c:e1:0b:b3:a1:df:34:
         bd:79:29:8c:12:02:ac:99:cf:92:3a:97:6c:ae:d0:07:ce:5a:
         a1:8b:7a:99:d9:de:1b:25:a6:e6:1d:53:a9:7e:55:bb:1f:d4:
         46:d6:51:01:db:39:5a:71:94:ba:98:1c:b4:aa:99:4a:ab:f1:
         c4:9a:d1:30:63:f3:2b:89:94:ca:94:49:6e:d6:ef:7f:a1:02:
         2d:1f:bf:58:46:c4:87:30:65:a7:3c:3e:00:38:a2:9e:cf:af:
         59:b9:81:14:4a:c0:cc:39:82:74:cf:e4:12:ab:e5:24:bc:7c:
         34:ad:ec:79:d0:6c:26:b2:3c:c9:e2:56:81:b8:eb:4a:e4:ea:
         71:e6:ab:a8:cd:9c:aa:9f:16:0f:08:14:e0:9c:86:c8:d3:74:
         c5:33:32:b7:62:71:3c:6c:8f:03:08:c0:dc:51:8c:31:71:7d:
         97:34:e6:be:31:b4:df:23:42:34:a3:e7:87:35:a6:7a:ed:86:
         f4:b5:09:ed
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAxMDEw
MTM0MDNaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREQjdENjQyRjdGRjQ1
NjdEQkU2REFBRjA4NUNFQUIyQzczQzMyNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdnRV5FZ0cZt/HTBQYq7nb33wIaAVlp9Ao0p1CWLG2/iv5b24T
SMXuaOJ0kC16pmNx07EuCwo72Ci/8cvWtOMvImIMqU5se5Dy21KoZd/8nxkd3Ck/
9RTlA7azJYGmYmSp7bugE2O95ua9FyH5qB8V5iyERxW26HaXCTO5EZaHjxK9GBAc
RkMgk0npFAXo1qxM3d5EZFSC8hp2RI7lm/Ud4kHZQaRMZPU9FoBTwUGlIsICV3cS
pKgdxC1cPFTsOdCATwSh+BdDXowCj9jnTZG2WRMngU83LwlisrMNP+UwT9dN345W
dPrjAsQbs3Xs14AkDE1BeaI1UXjW2/9vcivZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU3bfWQvf/RWfb5tqvCFzqssc8MnEwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzNiZldRdmZfUldmYjV0cXZDRnpxc3NjOE1uRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYbYoAwDQYJKoZIhvcNAQELBQADggEBABNmjPU+o1bA56UxCrwETW2ErC3B
aY5gr+dQIO4JEJxXMMp2pWyscyOTE7Zd3b8jjXj6JPfnVnXE4N759EOHgoxeXOEL
s6HfNL15KYwSAqyZz5I6l2yu0AfOWqGLepnZ3hslpuYdU6l+Vbsf1EbWUQHbOVpx
lLqYHLSqmUqr8cSa0TBj8yuJlMqUSW7W73+hAi0fv1hGxIcwZac8PgA4op7Pr1m5
gRRKwMw5gnTP5BKr5SS8fDSt7HnQbCayPMniVoG460rk6nHmq6jNnKqfFg8IFOCc
hsjTdMUzMrdicTxsjwMIwNxRjDFxfZc05r4xtN8jQjSj54c1pnrthvS1Ce0=
-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:41 2026 by rpki-client