This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/M2cSVIoQIR0l1us3b1_q1goPhlY.roa
File:                     M2cSVIoQIR0l1us3b1_q1goPhlY.roa (raw, json)
Hash identifier:          fTFChbNtQDdQCA1ZazRSpgS3GvJDkZgOzStdpzpycBI=
Subject key identifier:   33:67:12:54:8A:10:21:1D:25:D6:EB:37:6F:5F:EA:D6:0A:0F:86:56
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0628
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/M2cSVIoQIR0l1us3b1_q1goPhlY.roa
Signing time:             Thu 01 Jan 2026 01:53:37 +0000
ROA not before:           Thu 01 Jan 2026 01:53:37 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        120.137.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:53:37 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=336712548A10211D25D6EB376F5FEAD60A0F8656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:a0:5e:93:14:9a:94:e3:ef:03:9e:ce:20:
                    e9:34:0c:f2:5a:9b:fc:c8:f4:30:37:28:02:a2:fe:
                    0b:af:2d:00:a4:03:96:95:95:77:2b:af:ac:b8:6c:
                    e4:9d:29:5b:e6:de:1a:b5:17:47:08:6f:fd:c6:e8:
                    3a:38:bb:00:d2:cb:10:23:ef:bb:3c:7b:03:bc:b4:
                    49:33:ff:2a:89:07:9a:59:3b:62:70:df:90:cb:95:
                    67:b7:f3:a9:5a:b7:46:a0:ec:6f:0b:c6:92:c6:c0:
                    c3:42:aa:7e:4a:0b:2e:9b:36:89:36:22:0c:f7:1e:
                    11:8e:a4:2a:df:e2:64:8e:eb:20:b0:ed:0e:96:77:
                    2d:3d:a2:03:7e:39:cd:87:53:17:65:c7:21:e4:63:
                    d0:0f:49:08:e9:83:ac:21:42:df:e7:15:08:70:94:
                    47:e0:9d:e3:eb:04:bc:b9:c4:4f:ff:fa:03:2e:dc:
                    d9:12:f7:45:af:ad:4b:3b:81:8a:74:11:ee:a2:79:
                    27:66:34:64:62:fc:05:1d:08:1a:d5:76:9e:e7:b7:
                    f6:53:3b:85:b4:76:3d:4b:cb:2e:07:96:c5:66:c5:
                    75:81:96:05:65:d7:a4:07:df:78:6d:79:55:06:86:
                    bd:b8:31:81:40:55:34:df:d6:94:18:03:01:77:bb:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:67:12:54:8A:10:21:1D:25:D6:EB:37:6F:5F:EA:D6:0A:0F:86:56
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/M2cSVIoQIR0l1us3b1_q1goPhlY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.137.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:42:3a:6f:03:0f:2d:4d:7e:f7:c4:7c:21:e5:e3:db:8f:
         44:f6:11:09:41:26:62:da:a5:67:80:17:59:7d:f8:7d:28:ff:
         2c:77:fa:95:0c:0b:bc:99:32:e7:6b:a9:10:a5:e9:e4:bb:9e:
         ab:3b:06:39:ae:f9:b9:d2:3c:fe:c8:fc:5d:4d:a2:2b:29:dd:
         f7:fb:84:85:11:4d:fd:a2:32:34:68:e9:7d:0e:2b:d2:c7:00:
         9f:3e:18:40:87:85:18:50:20:45:04:66:71:8c:1d:a6:90:01:
         27:6b:a5:1a:c0:1f:22:e1:08:a2:71:62:90:76:1e:fe:fe:ba:
         e3:d6:05:6b:07:3e:0c:9c:35:07:3e:e3:dc:fb:35:bc:19:2d:
         43:66:68:9e:86:e6:cd:34:55:47:f7:34:54:60:ed:7a:d0:01:
         b5:f4:0d:a9:5a:4f:a3:d6:3d:a9:ca:1b:b0:6b:1c:78:00:18:
         ec:2b:4e:76:2e:eb:03:a1:88:5a:0d:a2:cc:1b:cd:eb:41:6a:
         25:9e:66:a2:74:2f:cd:d7:f4:1d:6f:e0:3a:28:fc:89:a5:74:
         ca:6a:66:25:70:d5:25:d2:6d:4a:28:0a:59:10:39:12:9e:70:
         07:15:9a:90:72:f8:48:4f:ec:10:e1:7c:b0:06:89:ee:ab:af:
         3a:18:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:35 2026 by rpki-client