This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/MpL6ID8KJwavP9A2S9x38G_L7Gg.roa
File:                     MpL6ID8KJwavP9A2S9x38G_L7Gg.roa (raw, json)
Hash identifier:          rYYCm9cAuYAbfjMSrX4D0ocH+BEFcEKQwt26RWaaIW0=
Subject key identifier:   32:92:FA:20:3F:0A:27:06:AF:3F:D0:36:4B:DC:77:F0:6F:CB:EC:68
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0613
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MpL6ID8KJwavP9A2S9x38G_L7Gg.roa
Signing time:             Thu 01 Jan 2026 01:49:56 +0000
ROA not before:           Thu 01 Jan 2026 01:49:56 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        59.86.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:49:56 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3292FA203F0A2706AF3FD0364BDC77F06FCBEC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:72:11:87:86:74:5e:13:a5:60:e4:38:fe:
                    59:b2:47:46:7e:94:18:91:0d:7d:d6:5b:8f:8e:eb:
                    e3:bf:e3:95:66:99:fd:36:20:37:7a:fa:b4:cf:0b:
                    b3:0a:76:77:ec:b3:96:24:1e:34:60:c7:a9:50:bd:
                    9e:95:c6:c2:6d:29:0e:80:8a:5e:77:3b:b3:b9:b1:
                    32:26:ad:ee:35:48:71:4f:d6:d5:04:ad:9a:99:e9:
                    0a:29:b7:bc:f9:1b:b8:02:24:79:f9:ed:25:6b:e4:
                    ea:da:0b:a6:2a:b9:f1:29:e7:70:76:19:45:3b:95:
                    e5:c2:71:db:b2:39:4a:f6:32:d5:de:fb:0c:c0:94:
                    60:ef:d4:4c:e1:fa:03:bb:d0:2b:c7:2c:ea:5b:f4:
                    22:0d:93:87:f8:9d:d0:c3:26:6d:fe:46:8f:aa:3b:
                    c3:30:c1:e0:6c:50:3e:2d:64:04:f4:48:fa:7c:5e:
                    8d:2c:59:28:e1:4f:1a:33:c0:71:7d:99:12:45:d9:
                    ca:1b:4b:93:8b:e9:cc:c5:a0:5d:32:07:2a:82:ed:
                    14:f8:f9:26:c4:8e:82:eb:a5:25:d9:1a:a1:4f:5d:
                    13:22:fa:df:22:3c:4e:fc:f5:96:aa:1d:69:7c:89:
                    5d:54:ae:71:f8:ff:5a:d2:b4:e7:6e:4d:a2:45:a3:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:FA:20:3F:0A:27:06:AF:3F:D0:36:4B:DC:77:F0:6F:CB:EC:68
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MpL6ID8KJwavP9A2S9x38G_L7Gg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:e0:f0:c9:a1:c6:eb:91:79:cf:17:65:46:f7:1a:36:39:16:
         a5:40:9e:63:ec:60:f6:5b:cd:c6:a8:91:9f:70:08:63:06:da:
         33:fe:0c:2c:c9:53:69:26:cd:dd:ad:07:3b:eb:32:db:83:6d:
         0c:7e:e8:e5:9a:55:e1:9b:0b:78:70:8b:d1:92:e2:77:2b:48:
         ff:ed:d8:a5:26:55:a2:ca:d3:51:5d:0c:98:e0:60:82:3a:bc:
         2b:16:3a:b6:3d:66:3a:b2:73:b6:c4:2a:01:4d:7d:cf:57:a9:
         50:21:d9:3d:e8:cb:87:9b:58:81:0a:c6:90:f9:32:d3:88:3c:
         07:92:3e:0e:64:21:39:5a:05:c3:c3:64:5c:9e:e5:13:f8:4a:
         ec:6b:df:ac:97:d4:ef:29:39:8e:e0:2b:fe:12:2d:da:2d:ed:
         75:20:03:15:3a:67:46:db:27:22:5c:94:63:8f:e7:f3:09:0f:
         1c:bf:35:21:1e:b6:91:9c:68:c8:f2:9f:be:00:84:d8:81:3b:
         c9:6c:91:34:b5:67:29:29:79:ba:aa:da:88:68:f5:49:27:b4:
         ee:51:96:fe:da:0e:45:00:58:f1:fa:23:f6:68:7c:a8:81:6c:
         79:27:53:2d:e9:a3:fe:f3:91:ae:fa:02:73:e7:8e:cc:9e:bc:
         d2:f4:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:36 2026 by rpki-client