This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/8FZgAUIpOC-ChuDLFKpurEhKLwM.roa
File:                     8FZgAUIpOC-ChuDLFKpurEhKLwM.roa (raw, json)
Hash identifier:          HlL0RuY5q20XQKTbT7hisdyP+Hm7SOXWhrmnY3O936o=
Subject key identifier:   F0:56:60:01:42:29:38:2F:82:86:E0:CB:14:AA:6E:AC:48:4A:2F:03
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05C2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8FZgAUIpOC-ChuDLFKpurEhKLwM.roa
Signing time:             Thu 01 Jan 2026 01:34:06 +0000
ROA not before:           Thu 01 Jan 2026 01:34:06 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:06 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F05660014229382F8286E0CB14AA6EAC484A2F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:1c:6a:df:b2:51:75:c4:53:9d:a9:66:3e:
                    11:20:44:f1:e5:a8:54:1e:7d:8b:f4:25:49:dc:8b:
                    79:12:2c:7c:20:19:b7:42:87:08:0c:2b:61:ff:8c:
                    16:49:45:59:07:e5:b4:72:6e:1b:dd:13:c7:68:98:
                    35:89:24:59:84:b9:70:7a:30:d1:be:b2:12:27:f0:
                    ba:83:ee:ce:80:67:02:72:cc:15:e0:8b:6e:82:1f:
                    54:a7:5a:d5:55:79:69:30:72:65:19:04:5b:20:85:
                    0d:48:bd:00:14:22:04:f9:a5:43:58:8b:47:9d:b5:
                    07:a3:40:cf:e8:33:cc:80:94:75:56:85:dd:89:25:
                    61:fc:8f:79:06:95:a7:3a:41:a7:fa:c8:6b:1a:79:
                    f2:77:8c:ea:7b:00:69:09:2b:2d:06:8c:22:c3:c9:
                    06:23:cf:f8:9f:4c:82:45:d5:32:7c:99:e1:e7:9a:
                    89:c9:8a:99:69:d1:0b:3f:ca:ff:7d:82:c6:bf:59:
                    74:cd:d3:e2:ba:30:13:29:bd:45:89:23:39:e8:31:
                    21:d5:b3:21:b2:23:a6:09:98:39:c6:04:b5:29:ab:
                    cb:f8:56:5c:56:a4:6d:5d:19:c8:ab:f8:4c:12:c8:
                    21:8e:2e:dc:f9:b5:f7:3a:7b:23:3c:0c:82:67:23:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:56:60:01:42:29:38:2F:82:86:E0:CB:14:AA:6E:AC:48:4A:2F:03
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8FZgAUIpOC-ChuDLFKpurEhKLwM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:e9:9b:b2:85:2a:ce:f5:e9:3d:6f:16:ea:d1:8a:a7:e1:13:
         3b:2b:21:de:b0:86:78:c6:f8:ea:b4:79:fa:38:a3:a7:63:94:
         76:f6:14:64:7c:09:a6:4b:7d:82:06:1a:2d:39:f5:1b:27:42:
         37:cf:80:b6:44:a5:05:e2:b8:a1:02:8e:ba:e1:24:bb:41:1d:
         96:e3:d8:f5:c7:f2:7a:2f:95:14:11:a4:33:7e:40:00:55:17:
         3e:e5:56:4f:75:25:d2:1f:1d:51:c3:60:b0:30:36:46:aa:54:
         74:a9:32:38:16:ed:3e:4b:61:69:0a:24:10:e5:c3:bb:74:cf:
         78:33:36:49:61:6e:a0:8a:52:5a:66:03:e3:5c:f6:03:5b:e7:
         d8:df:03:91:72:f9:41:64:8a:8a:70:81:ab:32:2b:81:79:8e:
         aa:c8:d2:63:08:10:87:c4:7e:8d:b1:31:35:09:25:fd:1e:4e:
         f9:92:75:ce:86:00:4f:4c:14:c7:0a:73:56:31:1b:1d:db:7f:
         c8:69:20:83:b7:d0:3b:73:0d:44:aa:da:c5:72:eb:7b:5d:ce:
         a5:e7:39:a2:2d:40:21:e5:a1:2f:eb:3f:15:f1:f1:aa:b9:29:
         45:75:50:1d:61:fe:33:ab:63:8c:49:2e:50:6b:2c:92:53:ce:
         46:d8:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:42 2026 by rpki-client