This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/LTgiaNPPodjVPfg_79TbfAd9FuE.roa
File:                     LTgiaNPPodjVPfg_79TbfAd9FuE.roa (raw, json)
Hash identifier:          oPknUcQBH5i58Yf9HSj5sS73nHNHo/Fnv+9ZwgWOCI0=
Subject key identifier:   2D:38:22:68:D3:CF:A1:D8:D5:3D:F8:3F:EF:D4:DB:7C:07:7D:16:E1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0633
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LTgiaNPPodjVPfg_79TbfAd9FuE.roa
Signing time:             Thu 01 Jan 2026 01:53:43 +0000
ROA not before:           Thu 01 Jan 2026 01:53:43 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        116.68.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:53:43 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=2D382268D3CFA1D8D53DF83FEFD4DB7C077D16E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:3d:90:a0:c0:59:98:2d:47:7e:06:f3:6b:
                    5b:46:c5:1e:2c:dd:fc:e4:5f:f0:aa:99:f0:64:a7:
                    26:49:6e:20:53:5f:02:8f:97:75:fa:d2:71:c8:39:
                    2f:bb:42:73:8f:ea:da:57:b8:54:f0:91:41:b9:ad:
                    63:c7:1f:7d:74:e1:50:98:5a:fe:32:dd:26:2e:83:
                    da:91:b1:ab:12:4b:1a:b4:26:f8:ec:86:c4:e0:1a:
                    be:2e:98:b9:fa:72:b7:10:3a:d9:4d:e9:43:eb:42:
                    a4:50:c7:f4:20:3e:ad:52:3b:77:e8:70:bd:fb:19:
                    af:77:33:b7:d3:19:e6:38:58:4b:77:4a:5d:6d:26:
                    f3:a2:42:47:9c:5f:c8:21:e4:6f:fa:28:6d:2a:9c:
                    7f:55:4b:e2:7d:ff:83:04:39:ba:d0:07:73:86:24:
                    27:8f:b7:18:33:07:3c:05:f0:9d:98:80:36:18:fa:
                    f2:1f:c3:ba:54:e2:27:02:eb:36:7d:75:25:84:da:
                    f6:35:a4:c5:ca:15:24:49:ac:56:13:a9:af:12:8b:
                    d8:7a:bb:b4:2c:66:77:74:b8:a4:38:be:8e:44:42:
                    38:b2:ad:52:b8:0a:3d:57:a3:23:ea:6e:75:b6:70:
                    1f:b8:60:ea:6c:d0:d7:e7:2f:b9:b3:fb:9c:21:4a:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:38:22:68:D3:CF:A1:D8:D5:3D:F8:3F:EF:D4:DB:7C:07:7D:16:E1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LTgiaNPPodjVPfg_79TbfAd9FuE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:11:9f:5e:9d:cb:80:4e:51:fc:50:a8:3f:94:ca:ea:d6:d2:
         a4:0c:57:90:d4:eb:cb:24:32:3b:9b:48:c7:e7:95:7c:b4:28:
         3e:f1:46:41:5d:26:20:56:8c:f7:b2:02:7c:69:98:c1:9b:5c:
         a2:f6:1e:9b:76:5e:25:e3:f2:af:45:20:a1:68:28:d8:32:31:
         90:a1:6a:3a:26:d3:a8:36:24:de:3e:79:af:54:e6:bc:54:95:
         39:f4:18:3f:7c:df:8b:88:40:0c:e1:16:30:3a:1e:f2:17:86:
         9c:dd:8f:bb:2c:a4:98:35:bc:61:c7:cd:d8:f8:c9:f2:b5:a3:
         63:9a:1a:63:e4:be:99:ad:5b:b9:6a:ae:1b:de:52:73:b2:fc:
         5b:47:e9:6c:07:ec:8c:3d:a2:a9:cf:d9:02:7b:f1:0e:7c:8f:
         99:2c:2e:ae:14:db:c5:4c:69:5e:d2:dc:61:6e:e0:f9:37:c9:
         3c:fd:12:7a:e8:4a:10:f9:52:e1:e5:27:e5:29:ce:1e:36:33:
         ad:f2:3c:2d:4b:59:60:7f:ca:7c:3c:75:8c:c1:2e:74:05:12:
         1f:30:77:92:b6:d4:f1:d5:11:0f:08:88:bf:ea:7a:d3:0b:45:
         95:da:be:9e:6f:76:32:12:6c:07:84:fe:2f:96:38:c9:33:9b:
         64:e3:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:43 2026 by rpki-client