This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/fg1PM7uUDIGcxqWA9-56Cixu9_8.roa
File:                     fg1PM7uUDIGcxqWA9-56Cixu9_8.roa (raw, json)
Hash identifier:          5F/vW+aEix5r7mSTL2AU/vB8ymtEHUsfDZsMr/NRj7c=
Subject key identifier:   7E:0D:4F:33:BB:94:0C:81:9C:C6:A5:80:F7:EE:7A:0A:2C:6E:F7:FF
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05CD
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fg1PM7uUDIGcxqWA9-56Cixu9_8.roa
Signing time:             Thu 01 Jan 2026 01:34:12 +0000
ROA not before:           Thu 01 Jan 2026 01:34:12 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:12 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7E0D4F33BB940C819CC6A580F7EE7A0A2C6EF7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:40:c1:e3:31:94:c7:a4:b9:5c:12:ec:86:
                    94:a0:37:21:b1:4f:95:51:d0:93:9f:d6:83:6c:9c:
                    e6:e6:be:d4:cc:bb:15:48:a7:c7:f9:13:6d:cf:32:
                    52:23:70:09:07:71:e5:3d:3e:21:43:e7:bc:11:66:
                    df:5d:e9:8c:5e:9b:a7:71:7d:23:47:8a:54:21:c4:
                    89:72:f4:15:d4:0b:0c:e6:25:09:6a:99:43:aa:60:
                    95:71:6b:11:31:a7:1e:89:4d:ae:53:b6:f9:4f:ad:
                    e2:9b:e7:f7:d6:e3:49:68:60:44:24:a5:13:6b:85:
                    58:45:4b:85:8f:b2:10:40:f2:dc:04:87:a2:43:ee:
                    ea:75:4e:08:d8:71:b9:19:d1:20:58:d4:b1:30:3d:
                    65:d6:c0:92:9d:72:c5:5f:8c:0c:8d:6b:e0:9b:15:
                    10:12:43:67:17:8d:9a:de:58:b1:7d:9e:15:4f:db:
                    61:af:7d:03:39:e6:d5:20:15:d5:08:9d:18:59:da:
                    6f:2d:06:c8:78:4d:6f:f0:85:02:3d:ac:99:63:9e:
                    60:28:64:45:d9:c2:1b:aa:58:68:5f:3c:cd:0f:de:
                    ec:86:88:36:5b:03:73:4c:ef:d3:0f:59:a1:4a:a2:
                    02:e0:bb:d4:89:9d:3d:f2:de:4d:7f:aa:dd:6f:ac:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:4F:33:BB:94:0C:81:9C:C6:A5:80:F7:EE:7A:0A:2C:6E:F7:FF
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fg1PM7uUDIGcxqWA9-56Cixu9_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:e4:6d:6b:f2:c1:15:d6:c8:f1:ab:4c:78:99:55:16:0d:
         d4:37:2b:a4:1b:e7:f4:52:ce:0c:57:e3:ac:c9:a0:1e:18:37:
         f7:df:94:ad:06:9d:d8:f8:69:9d:8e:02:6c:66:52:d9:f9:0f:
         be:0b:83:4a:80:40:71:a7:d8:38:32:fe:bf:b1:3b:d0:1a:5f:
         20:25:cf:ab:81:02:27:0a:70:e6:d0:b0:95:77:5b:92:9f:78:
         14:33:c1:73:b3:8e:fa:98:c8:bd:49:f0:bb:82:c3:e4:1c:c3:
         96:80:86:ae:41:5a:ca:3f:25:c2:6d:37:02:be:c2:35:56:46:
         7a:a9:9c:c2:ac:f0:eb:d3:37:9f:94:e9:6d:28:2d:c4:11:af:
         ce:81:a6:d4:a1:48:e9:69:44:d9:d3:eb:48:62:64:08:1e:eb:
         81:68:ad:e3:b4:df:d0:cf:be:e1:72:cc:a2:3b:24:4e:33:e6:
         28:1f:98:f3:12:00:e7:b0:8a:9b:b7:87:01:ad:1a:03:e9:7e:
         11:13:3c:b7:d7:41:c5:bd:d9:13:e3:9f:6e:da:a5:16:4d:0e:
         92:5f:73:28:05:39:b5:9a:e3:56:0e:78:d4:b9:1f:fb:88:a7:
         64:4b:22:3c:77:61:fc:71:0e:52:a4:30:b7:7d:9d:8b:5c:06:
         22:5c:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:35 2026 by rpki-client