This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/XSN2BBVeUUUulrm3oLadHYF12dg.roa
File:                     XSN2BBVeUUUulrm3oLadHYF12dg.roa (raw, json)
Hash identifier:          VsTWCmKDDY3Qqi3VQif3XbgMlMcrZHU5lzrsUkMteDw=
Subject key identifier:   5D:23:76:04:15:5E:51:45:2E:96:B9:B7:A0:B6:9D:1D:81:75:D9:D8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05EC
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XSN2BBVeUUUulrm3oLadHYF12dg.roa
Signing time:             Thu 01 Jan 2026 01:41:24 +0000
ROA not before:           Thu 01 Jan 2026 01:41:24 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        42.124.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:41:24 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=5D237604155E51452E96B9B7A0B69D1D8175D9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:da:b0:a9:5c:3e:06:b4:35:a3:38:4c:0c:
                    44:2c:c1:25:e5:b6:51:3a:03:00:72:e8:97:da:67:
                    ae:f4:92:c8:bb:b5:fa:69:9e:c6:98:3b:bf:44:a3:
                    18:08:04:08:30:b4:4a:94:11:ea:63:43:c9:c0:ca:
                    33:68:2c:e5:e1:7f:d1:82:17:4d:2a:78:6d:7d:5d:
                    1b:26:b8:0b:42:8e:98:4d:54:6a:53:a8:e4:8e:2a:
                    e9:bd:c1:05:9a:7d:ca:5e:59:8d:de:82:cb:dd:55:
                    ab:0d:c5:7c:3c:1b:d2:54:1a:0c:0a:41:c9:5b:8c:
                    60:75:f4:92:54:77:bb:24:a8:f8:36:33:14:77:3d:
                    b8:a1:76:13:4f:81:54:e2:dd:15:5f:b0:09:2e:0e:
                    16:48:1d:a1:5b:32:4f:65:3a:90:19:2c:13:48:ce:
                    29:14:e5:d7:11:ec:e1:55:e9:26:61:c2:90:72:61:
                    44:f2:e3:f8:b7:c1:dc:ee:14:8a:8b:e5:ab:af:35:
                    2b:81:c2:f2:ff:c4:8e:49:c3:b7:b9:bd:cb:e6:c4:
                    51:0a:4a:be:70:2f:b1:91:6f:d8:41:20:5f:04:49:
                    8c:e3:23:7b:3b:ed:8e:a5:83:59:a3:f8:78:f6:e5:
                    10:40:ec:74:e9:ba:39:28:14:6c:8d:c6:9d:52:be:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:23:76:04:15:5E:51:45:2E:96:B9:B7:A0:B6:9D:1D:81:75:D9:D8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XSN2BBVeUUUulrm3oLadHYF12dg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:77:f7:f5:b4:eb:51:f0:67:83:dd:53:c3:47:6c:bd:b4:c8:
         a4:bb:b0:5e:26:2c:c1:62:88:bb:78:28:bb:76:3e:b3:1c:c6:
         62:4c:79:08:8f:11:5d:4a:35:fa:15:ad:64:dd:14:24:cc:9d:
         b6:e6:70:d4:f2:a6:12:44:57:a1:11:19:59:e3:30:47:6e:0c:
         eb:c9:1b:2f:4a:7c:87:4e:2c:49:4f:4b:b2:db:a4:e4:92:57:
         42:a4:cf:b6:91:55:57:2c:68:a0:3e:5d:7c:4c:37:bd:bf:16:
         fb:6f:93:4b:5d:8c:2c:f5:de:41:6e:55:df:05:fa:ee:6e:66:
         3a:8c:df:34:7e:e2:e9:31:3f:90:90:43:4b:77:39:22:c7:ed:
         b0:a3:ca:93:de:2a:e9:99:1b:bd:65:88:0b:50:ae:83:c9:f7:
         f5:06:da:ca:0f:16:a1:b5:04:ed:d2:92:3d:23:1d:25:a8:9d:
         00:5b:21:34:4e:08:25:b0:b1:23:9e:1f:66:1d:18:c1:b9:bf:
         4f:13:94:63:6a:4c:52:e7:e3:a3:cb:20:e8:88:c4:ce:42:7e:
         df:78:68:2d:17:2e:ff:d7:bb:35:71:b7:f3:bb:43:b9:73:ff:
         7b:bc:ea:c7:fa:f2:f6:ec:88:17:ce:b3:2f:c5:45:ff:a4:dc:
         72:ce:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:39 2026 by rpki-client