This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/5vQpEpo8SiwPE_Dd2KkbVc4VpdY.roa
File:                     5vQpEpo8SiwPE_Dd2KkbVc4VpdY.roa (raw, json)
Hash identifier:          aG0iwyyUJAdiy5WCTqXuA7S/EcewLSOJOFizDRNBqFQ=
Subject key identifier:   E6:F4:29:12:9A:3C:4A:2C:0F:13:F0:DD:D8:A9:1B:55:CE:15:A5:D6
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       061D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5vQpEpo8SiwPE_Dd2KkbVc4VpdY.roa
Signing time:             Thu 01 Jan 2026 01:50:01 +0000
ROA not before:           Thu 01 Jan 2026 01:50:01 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        59.85.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:50:01 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=E6F429129A3C4A2C0F13F0DDD8A91B55CE15A5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:07:31:da:9a:c7:38:53:80:91:d1:6f:be:
                    35:6f:65:bc:86:9b:e6:db:f4:66:cd:d1:ef:a7:48:
                    f9:73:7b:3f:b8:9e:d7:bd:c8:c8:99:cd:0e:bb:c5:
                    0d:85:a5:79:60:a1:25:3c:0e:b6:31:c9:fd:ee:0d:
                    f2:62:13:58:9b:4b:4b:11:16:d6:21:84:b1:b8:e9:
                    25:a5:08:cd:06:6a:b8:b8:b9:b1:cb:c3:76:29:35:
                    fc:c2:b2:66:00:b1:eb:17:cb:f3:e8:89:21:dc:6e:
                    c3:2b:b1:e7:db:34:81:26:d9:ca:5a:95:5e:a9:23:
                    7c:f0:1e:4f:39:f7:20:75:52:95:2c:39:b0:60:36:
                    d7:38:74:d6:6b:83:fe:0c:b1:ef:6b:05:ea:39:3d:
                    b1:13:18:d4:fb:b2:f3:39:57:b1:3c:b8:c0:bd:e6:
                    9d:55:07:bc:d1:aa:8f:12:3b:e1:11:75:f1:99:4c:
                    9f:a4:50:24:19:26:70:f0:3d:50:fa:d1:c9:ad:93:
                    d9:f8:d6:84:22:0c:a3:38:0a:2d:c7:b0:e8:ec:35:
                    c1:2f:d8:9a:6b:42:9e:16:f2:09:98:8f:f1:86:64:
                    4f:55:d4:c5:38:2e:88:be:e6:6c:41:e4:7d:d5:ad:
                    ff:da:5b:e9:9e:df:63:61:5d:cf:f3:3b:b3:70:48:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F4:29:12:9A:3C:4A:2C:0F:13:F0:DD:D8:A9:1B:55:CE:15:A5:D6
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5vQpEpo8SiwPE_Dd2KkbVc4VpdY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.85.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:da:1b:27:ff:65:d2:41:de:52:91:a9:30:a3:fd:41:74:
         4a:e9:3c:7b:99:b1:df:98:94:87:0a:59:5c:70:5f:f0:4d:02:
         92:f9:98:68:6e:61:7c:bd:6f:83:b3:66:eb:f7:d4:82:86:a8:
         c7:ae:05:47:61:19:7b:41:c5:a5:ce:45:24:0a:87:2b:4f:1f:
         dd:5f:81:d5:d1:15:35:2a:44:f6:97:e8:89:b4:e1:c1:5c:27:
         37:66:b6:42:a3:63:27:15:b3:fa:28:8f:b2:20:86:f7:5c:cb:
         3f:48:1c:e4:6a:50:17:30:b6:1f:bb:11:18:a7:87:3f:c7:34:
         e8:63:57:f8:bc:a3:7e:22:cd:2f:2d:d7:a4:65:71:79:f8:48:
         bc:8c:d4:ea:63:5d:12:92:b2:eb:5d:99:5f:c6:af:3a:90:c3:
         57:c6:dc:30:00:7e:17:f6:26:13:ea:88:b3:04:09:75:7f:4e:
         f9:ba:00:cc:3b:0a:25:8c:01:06:1d:41:c9:42:a7:ba:87:4c:
         63:47:32:17:b5:3f:75:f2:c6:b8:d6:45:01:9e:65:1c:62:c7:
         bc:ab:aa:8b:91:dd:85:9f:67:69:9d:d2:ba:1d:5b:e3:8b:eb:
         19:96:f4:b2:16:cf:d2:9d:e3:91:17:d4:da:23:fe:b2:e1:d0:
         93:04:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:36 2026 by rpki-client