This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/MEmYYBm-SaBU633T2Znuvnmh_cU.roa
File:                     MEmYYBm-SaBU633T2Znuvnmh_cU.roa (raw, json)
Hash identifier:          OocN9nIbIiKdqxN+PBK3qdkIp43p9LPgRYBBnbNHi1U=
Subject key identifier:   30:49:98:60:19:BE:49:A0:54:EB:7D:D3:D9:99:EE:BE:79:A1:FD:C5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0611
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MEmYYBm-SaBU633T2Znuvnmh_cU.roa
Signing time:             Thu 01 Jan 2026 01:49:54 +0000
ROA not before:           Thu 01 Jan 2026 01:49:54 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        218.40.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:49:54 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3049986019BE49A054EB7DD3D999EEBE79A1FDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:cb:1e:5c:29:78:ca:43:ed:a1:b9:cc:31:
                    d3:66:d8:e3:a5:30:b0:f1:c6:52:64:eb:d0:b9:74:
                    0b:82:32:e0:5b:7e:eb:ef:93:36:39:7b:0a:b4:16:
                    4a:99:b5:ab:5c:67:d7:c9:2f:d4:d3:66:96:84:85:
                    cb:f0:47:c9:a8:54:2c:08:62:f8:10:78:bd:93:d7:
                    1c:fc:1a:03:9d:ba:b2:b7:07:78:4b:70:93:b7:6c:
                    ca:e9:d3:e0:eb:07:95:65:03:a7:7a:20:ec:a4:4b:
                    1b:7a:b3:81:e5:2b:bf:89:81:86:e7:6e:0a:0b:e7:
                    52:f1:21:95:05:f5:20:bc:3e:f0:8b:3c:92:2d:b3:
                    0c:26:64:81:39:c4:78:25:88:45:d1:aa:02:f3:f2:
                    76:09:ad:11:ef:5c:82:fd:03:67:20:8c:30:a1:4f:
                    4e:4e:3e:8c:85:8d:4f:19:48:9b:bc:1d:02:e6:14:
                    8c:8b:77:b7:62:80:df:97:b7:7a:53:c4:86:20:45:
                    35:a2:f6:68:b5:d8:1c:69:b4:5b:e2:34:b4:1a:ee:
                    8c:31:62:5e:9e:a1:8d:7b:10:d0:4a:6e:d1:53:57:
                    0b:d1:4a:36:da:3b:cd:85:6f:cd:3f:a1:41:88:d5:
                    4a:48:fe:a3:cc:f7:3b:a9:43:5e:1b:b3:d7:83:13:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:49:98:60:19:BE:49:A0:54:EB:7D:D3:D9:99:EE:BE:79:A1:FD:C5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MEmYYBm-SaBU633T2Znuvnmh_cU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:6e:0d:92:d1:3c:26:2d:da:88:57:db:b8:7c:06:db:13:9f:
         09:a2:8d:8d:0b:3e:19:36:28:aa:9c:c9:f9:34:db:2b:62:7d:
         8c:2d:33:7c:0d:85:10:0f:86:2e:2d:29:ff:51:d8:eb:1e:60:
         36:10:1f:b8:6d:be:0d:2b:c1:8e:bb:38:a9:79:ab:ef:3f:ed:
         be:a9:54:b2:a6:df:5f:6b:66:10:fc:04:07:56:67:0e:37:23:
         24:75:85:6c:6a:c5:2d:e6:b1:cf:8b:40:fd:7d:bc:eb:20:35:
         f8:86:33:6c:26:0b:87:2c:7c:4e:fa:9d:94:58:f3:0b:12:e2:
         cf:c8:92:46:ee:61:5a:cf:85:6e:8f:13:d2:04:0f:c9:ec:eb:
         b8:80:3e:e9:20:d8:84:18:71:f0:92:15:ad:05:08:5c:ed:14:
         31:95:45:06:a5:26:87:f0:f0:15:52:d8:e5:06:87:8d:d2:30:
         f2:05:3d:55:31:4c:20:00:9e:d1:44:f6:3c:e9:c9:46:d1:97:
         a2:57:b0:5f:80:48:4e:42:b0:72:72:43:3d:de:4e:2e:78:31:
         6b:6b:f0:53:64:e8:5c:8c:f4:bf:61:ce:de:3e:21:d9:96:2c:
         5b:f3:15:76:3b:62:8e:7d:04:45:21:e5:ad:25:cb:7b:07:3f:
         c0:de:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:36 2026 by rpki-client