This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ddpFw9IC4b-nQfDboJ32o6iFGmk.roa
File:                     ddpFw9IC4b-nQfDboJ32o6iFGmk.roa (raw, json)
Hash identifier:          kcDfENzlCbM7jtq0QcfPeLw8MT0X5U2oKJsr+OzlcAE=
Subject key identifier:   75:DA:45:C3:D2:02:E1:BF:A7:41:F0:DB:A0:9D:F6:A3:A8:85:1A:69
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05E8
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ddpFw9IC4b-nQfDboJ32o6iFGmk.roa
Signing time:             Thu 01 Jan 2026 01:41:23 +0000
ROA not before:           Thu 01 Jan 2026 01:41:23 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        202.136.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1512 (0x5e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:41:23 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=75DA45C3D202E1BFA741F0DBA09DF6A3A8851A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:92:04:19:f8:9c:63:7d:f8:c9:84:c7:93:
                    71:9e:06:d7:c2:84:9b:a1:76:0c:f3:25:62:6e:97:
                    e1:5b:a2:da:ec:b7:10:ee:a4:69:4d:c3:5f:32:71:
                    0c:84:fe:6f:4a:0a:3b:5d:86:59:64:6b:a7:25:48:
                    b2:b8:c0:15:a1:d9:2e:22:5b:89:bc:6e:71:b1:08:
                    9f:ec:ad:ff:e9:52:63:4d:8f:b2:56:32:0c:3c:23:
                    d2:75:c1:10:53:88:bf:65:5b:45:87:96:60:dd:09:
                    8d:8f:67:0e:36:56:ab:83:97:87:54:4b:f8:2e:dc:
                    3e:95:74:f7:3c:25:7f:5f:e7:27:16:4e:1b:22:9c:
                    a3:a5:8c:77:be:7c:8a:57:d8:2c:9b:b3:d9:06:51:
                    7b:85:9b:84:11:6e:81:9b:d2:e7:44:68:a5:cd:a2:
                    8c:10:e6:34:a5:7b:62:51:81:ba:c6:d7:4c:3d:74:
                    10:6a:77:1f:30:c4:a6:c6:17:0d:42:ec:10:23:ec:
                    bb:fe:08:06:ad:a5:a1:06:ed:79:01:a9:35:b5:97:
                    7b:ff:3d:17:94:a9:11:d5:e8:49:d1:cb:bf:9c:76:
                    63:05:57:06:f5:43:a4:84:f2:e7:20:c0:9e:2e:d9:
                    af:60:f1:13:ab:29:88:b9:83:77:ae:d3:3e:5d:09:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:45:C3:D2:02:E1:BF:A7:41:F0:DB:A0:9D:F6:A3:A8:85:1A:69
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ddpFw9IC4b-nQfDboJ32o6iFGmk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.136.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:e6:df:b9:58:4c:13:43:18:29:2e:71:88:eb:a7:7c:6f:b6:
         75:38:05:b8:4c:b3:a6:7d:ca:55:76:ce:25:e2:af:c5:e2:c2:
         2a:bc:cd:82:df:f0:a9:e2:e0:f4:10:05:fe:d3:65:ca:0a:62:
         85:72:fc:8b:0b:1d:b7:2b:18:33:68:a4:73:d5:e5:91:9f:4f:
         43:83:86:78:69:81:77:49:22:13:b2:c2:18:ec:6b:98:69:9c:
         53:16:aa:c9:3e:24:5c:3b:c4:31:57:e1:da:56:1a:81:65:1a:
         ef:7f:44:8f:c8:71:6d:25:00:99:22:84:a5:d6:0a:b1:fc:7e:
         b5:a8:98:2a:82:10:ec:86:69:d1:a4:65:93:c9:ac:9e:62:12:
         7f:d9:62:3a:5d:74:7b:21:56:ca:69:92:28:9f:2c:8c:db:a8:
         cd:8d:2e:66:8f:5e:e9:ce:72:32:9a:dc:ca:19:e5:a9:52:2e:
         c3:fc:e1:57:3f:12:23:85:35:c6:85:75:67:1f:25:34:ac:16:
         5e:64:fa:43:7b:31:d7:27:8e:7b:e4:29:c6:16:f4:05:68:d0:
         5c:3c:6c:b2:15:93:8e:80:de:77:c7:bb:55:f0:3a:ae:e2:43:
         aa:59:7d:d3:37:d7:5b:9d:53:0f:99:42:46:10:9c:e1:d2:07:
         8a:69:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:38 2026 by rpki-client