This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FcXHZhW5TO2nEQbIxpAilnnCJU4.roa
File:                     FcXHZhW5TO2nEQbIxpAilnnCJU4.roa (raw, json)
Hash identifier:          InlDdLN/oIB2Gh9ZqcS50EB8XHLv+yM+xniVxECJL/M=
Subject key identifier:   15:C5:C7:66:15:B9:4C:ED:A7:11:06:C8:C6:90:22:96:79:C2:25:4E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0601
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FcXHZhW5TO2nEQbIxpAilnnCJU4.roa
Signing time:             Thu 01 Jan 2026 01:45:53 +0000
ROA not before:           Thu 01 Jan 2026 01:45:53 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        61.206.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:45:53 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=15C5C76615B94CEDA71106C8C690229679C2254E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:e0:d6:89:12:e9:6c:bf:20:13:5b:fa:29:
                    29:72:8a:a9:d8:a5:3f:f8:61:fb:ec:15:3f:2c:ca:
                    1d:32:28:a6:0c:a4:26:06:b2:e8:a0:34:68:63:f2:
                    63:35:04:fe:fc:55:24:1f:78:9f:b9:61:90:08:42:
                    cb:cd:e3:44:49:5b:da:4f:ee:b5:b6:67:62:82:18:
                    48:12:28:cb:8a:67:a5:9b:fa:5a:11:9f:ea:b3:23:
                    34:8c:ba:45:6a:5a:e1:34:ee:0f:58:ce:2e:13:22:
                    db:9d:c1:8d:40:c5:25:49:95:0e:9c:d2:43:ef:c3:
                    4b:fa:99:08:97:55:55:b7:b7:b3:b7:b2:fa:c7:f0:
                    83:67:a2:d8:60:36:22:f6:11:17:50:0c:4e:81:8f:
                    f8:ef:f5:f0:09:e1:c0:0e:e4:de:29:84:00:7e:b3:
                    6f:19:4f:08:9c:b0:0a:4e:eb:9d:21:ee:f8:8a:72:
                    4b:c3:ae:65:8c:56:25:3b:aa:f8:8c:e9:93:a1:c5:
                    dc:19:49:bf:76:95:5a:46:6f:c4:4e:4f:96:3a:43:
                    3b:65:7c:77:22:f5:0a:05:fa:77:fa:15:94:28:ef:
                    cf:ef:3c:6c:04:ce:8b:bf:e3:2d:48:ec:a4:04:08:
                    12:6b:2b:bf:83:c2:d6:42:56:1d:24:da:f9:5f:3e:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:C7:66:15:B9:4C:ED:A7:11:06:C8:C6:90:22:96:79:C2:25:4E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FcXHZhW5TO2nEQbIxpAilnnCJU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:f1:a6:6e:81:77:aa:10:2d:a7:4e:f1:f1:73:e3:5b:7b:38:
         25:f9:07:65:d6:11:fa:82:8b:4b:25:94:78:00:ee:87:59:22:
         90:20:33:f6:df:85:12:00:1a:c6:7f:ce:61:e6:ed:67:d0:92:
         a5:39:24:b9:41:99:ef:f4:8b:7f:76:02:c1:a5:32:73:53:44:
         a8:7d:06:86:5e:01:d7:ef:5d:0b:47:47:a2:4c:32:47:53:e3:
         b6:52:ad:23:b1:ca:f7:7f:27:b8:94:7f:1a:54:2c:7b:01:ca:
         e2:94:da:57:42:a2:12:d1:26:d3:da:28:ea:24:68:fd:c2:f8:
         b7:01:12:e1:45:07:0b:c8:36:89:22:bc:7e:93:f9:7a:f6:4b:
         08:64:3a:ee:5b:65:61:e6:47:b8:ce:c5:cb:d9:4b:06:9b:57:
         59:8a:2a:43:fd:b7:0f:ce:1d:df:f8:ff:52:f7:b5:8d:57:2d:
         fe:9d:ee:77:f1:b5:00:02:e3:af:cf:fe:06:b4:fa:03:2e:1e:
         cd:9a:43:44:20:15:13:37:8e:d1:11:6a:ab:97:6d:0f:9b:3a:
         37:52:a2:e6:72:26:14:0a:b3:86:39:a1:22:2f:34:62:00:1b:
         a4:e2:60:73:3c:e3:a5:7f:59:65:f2:77:63:d0:f0:72:78:95:
         ce:9e:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:42 2026 by rpki-client