This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/8SLXBhmycusY1EXKb8aR0D33eAg.roa
File:                     8SLXBhmycusY1EXKb8aR0D33eAg.roa (raw, json)
Hash identifier:          OtcgdzlluXbk+mtrkuCIL7CTYV4JFfnTgd2Prk3iuNw=
Subject key identifier:   F1:22:D7:06:19:B2:72:EB:18:D4:45:CA:6F:C6:91:D0:3D:F7:78:08
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0634
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8SLXBhmycusY1EXKb8aR0D33eAg.roa
Signing time:             Thu 01 Jan 2026 01:53:43 +0000
ROA not before:           Thu 01 Jan 2026 01:53:43 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        110.172.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:53:43 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F122D70619B272EB18D445CA6FC691D03DF77808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:f6:de:c3:bd:0e:68:bd:aa:c8:0c:30:83:
                    74:98:91:9e:28:e7:d8:c9:e9:ac:17:c4:a6:74:45:
                    d9:af:05:36:ab:7f:bf:67:bc:90:ec:46:3c:ce:9d:
                    ea:af:fa:fa:69:27:f3:78:93:ca:5c:8a:57:9a:2a:
                    79:da:5a:9e:4a:22:2e:ab:9e:9e:bb:b6:9b:95:9f:
                    f7:0c:84:5f:68:7f:e7:0e:54:c1:21:af:ab:eb:90:
                    cf:c8:e4:ee:cc:d7:0e:20:1c:32:b4:1c:eb:32:62:
                    f6:7f:79:d7:ce:63:3e:11:b0:85:10:9e:23:d5:a9:
                    6e:9c:da:11:89:29:d1:39:c7:3c:41:ba:c6:87:56:
                    76:21:4a:1f:72:15:3f:ae:1e:49:ae:f8:5c:a8:de:
                    01:8a:0b:35:d7:65:38:2c:83:3f:25:15:57:e0:60:
                    dd:b8:0a:a9:51:fd:be:21:3c:f0:83:84:af:31:57:
                    90:1e:51:b8:02:64:45:9e:57:24:f2:bf:5a:ad:a8:
                    d4:d7:d0:e2:35:2d:18:22:c2:c7:c3:6a:b4:0b:72:
                    93:4f:64:3b:2e:07:6a:61:a6:3c:8b:41:ee:20:d1:
                    57:c8:2e:79:80:58:55:ef:a1:b4:48:09:a3:ff:ca:
                    a7:11:41:1d:56:40:81:60:b4:33:0a:f8:cd:73:4d:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:22:D7:06:19:B2:72:EB:18:D4:45:CA:6F:C6:91:D0:3D:F7:78:08
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8SLXBhmycusY1EXKb8aR0D33eAg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b9:6b:21:01:53:4f:74:ef:d3:9f:2c:3d:d8:6f:7d:57:66:92:
         f9:9c:dd:4f:56:6c:5c:8d:ee:d3:98:25:02:3c:8e:fb:65:ac:
         f2:eb:59:95:46:43:97:6b:96:46:f9:a5:a6:c4:a3:d2:4f:05:
         74:84:a1:0a:5c:f3:0f:f3:21:8a:b9:6f:1e:9d:e4:70:6d:f2:
         39:be:0d:1a:33:28:1d:98:50:47:db:22:28:0a:62:c2:92:b6:
         35:3c:d1:ff:fd:40:16:ae:26:99:f2:9b:63:ff:9c:aa:5b:b9:
         cf:9a:e5:c8:1c:36:90:d3:b1:e4:55:ef:af:de:55:67:44:7c:
         62:cf:3e:4c:ac:f1:cf:cd:7e:b4:0e:19:42:da:6a:22:02:45:
         9d:46:e7:ab:c4:e4:6a:63:bf:1c:86:dc:6d:6b:bb:4b:87:86:
         9b:43:e9:52:42:62:8b:a3:5e:a0:d7:5d:a6:2b:73:ce:e8:17:
         c0:a0:4a:24:bb:fb:5b:bc:46:b5:71:4e:1e:11:b2:7b:a6:1e:
         e8:45:76:b4:ea:79:6b:20:3f:3c:9b:1a:4d:6e:1b:3f:9e:23:
         d6:f2:d1:d0:b6:83:4b:ec:52:5e:e2:5f:58:dc:4f:48:ae:ec:
         ee:d9:17:60:fe:73:6e:4e:9a:1e:cc:4e:81:55:4b:6d:47:0b:
         b7:e2:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:43 2026 by rpki-client