This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/C20SguFdm_b06VvqrRYkzdAUA2k.roa
File:                     C20SguFdm_b06VvqrRYkzdAUA2k.roa (raw, json)
Hash identifier:          zEuuRMH/eSKlT1+NW1j7vvdrQTxAW42j/t6BGtVl5PI=
Subject key identifier:   0B:6D:12:82:E1:5D:9B:F6:F4:E9:5B:EA:AD:16:24:CD:D0:14:03:69
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05EE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/C20SguFdm_b06VvqrRYkzdAUA2k.roa
Signing time:             Thu 01 Jan 2026 01:41:25 +0000
ROA not before:           Thu 01 Jan 2026 01:41:25 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        27.121.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:41:25 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=0B6D1282E15D9BF6F4E95BEAAD1624CDD0140369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:98:e8:64:a8:6b:c9:69:f2:8b:91:5e:0a:
                    85:ae:be:dc:12:64:51:c5:94:bd:c1:a7:7b:03:f4:
                    82:0d:48:27:f4:85:22:9d:92:f3:c1:3f:46:71:b4:
                    e7:b5:90:2a:53:8f:03:4d:12:b6:f8:c2:cc:f4:98:
                    a9:57:a3:3c:49:9e:6e:a8:8b:91:56:72:7c:24:22:
                    1f:3b:46:18:dd:d3:3c:85:a1:18:9e:68:0a:9b:fc:
                    42:87:d5:f0:90:d9:0e:4a:c6:11:ce:b4:20:02:5d:
                    46:5e:8a:aa:35:cc:f0:2d:a6:46:d9:a4:98:0a:8b:
                    61:84:b5:38:42:38:e7:02:16:0c:7e:e6:bc:ee:5e:
                    8d:8b:1e:28:f9:dc:32:b8:e0:d6:3d:59:8b:cf:31:
                    e4:5d:81:ce:af:88:0a:30:ac:76:82:61:d4:68:05:
                    80:db:8d:49:36:9c:8a:7f:09:b4:53:75:84:fb:06:
                    bd:8a:6c:01:55:4a:1d:e2:db:b7:51:f7:07:a0:c3:
                    90:14:76:14:e4:a4:02:af:ce:9e:71:9a:5f:e5:80:
                    bb:50:2e:85:2e:8c:2a:6e:96:c1:2e:e5:0b:ba:83:
                    53:9c:b1:5c:46:68:ba:ba:71:31:67:61:f7:c6:71:
                    dd:50:cc:a3:e8:38:81:bb:f9:24:9a:82:03:8a:10:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6D:12:82:E1:5D:9B:F6:F4:E9:5B:EA:AD:16:24:CD:D0:14:03:69
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/C20SguFdm_b06VvqrRYkzdAUA2k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:16:3e:dd:70:d3:ff:75:e1:29:85:67:41:6b:9c:88:ca:
         a5:b0:bb:8a:c3:01:77:aa:63:4a:5e:9b:a9:c0:86:e1:f8:cb:
         3a:4f:44:dd:f2:b8:0b:63:e5:2a:75:1a:df:87:b4:14:65:68:
         ed:a6:87:b1:59:bf:37:98:b2:00:e6:ed:a5:2a:a0:6d:be:fa:
         1e:a8:a5:64:d7:1d:18:ce:ae:53:15:a3:f2:61:c3:be:f1:53:
         27:bc:42:a8:d6:58:0d:ce:0f:23:34:35:10:33:e6:a1:51:a5:
         02:97:66:ab:a0:47:fa:3c:ef:bb:31:1b:21:b2:d8:7f:f6:29:
         05:0d:91:29:3b:9f:84:37:1f:6d:82:c9:df:e0:28:5f:ef:74:
         a0:a4:33:6e:fd:1a:ac:05:ef:47:a1:c8:c8:a9:df:dc:89:f4:
         2f:1f:db:0c:66:7b:78:f8:e1:91:3b:cd:57:ed:17:96:47:9e:
         50:86:ca:75:37:92:b5:e4:37:47:c3:75:22:8e:ae:86:30:49:
         51:e9:23:b6:02:3d:fb:41:2f:1e:7c:0d:27:73:8d:a6:4c:51:
         16:6a:2c:32:c4:3d:c3:19:63:36:19:72:15:bf:59:b9:2e:e7:
         ae:9a:a9:35:92:ac:78:46:52:f4:19:1c:6b:ad:84:75:7f:ce:
         c2:ec:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:44 2026 by rpki-client