This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/flDbCuyKHR3Z3YB0nYbXxt315Cc.roa
File:                     flDbCuyKHR3Z3YB0nYbXxt315Cc.roa (raw, json)
Hash identifier:          oxSWmrsYOFYuNOcYq+hQTqrYZoK+kWG6aq38FOz+tU8=
Subject key identifier:   7E:50:DB:0A:EC:8A:1D:1D:D9:DD:80:74:9D:86:D7:C6:DD:F5:E4:27
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0637
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/flDbCuyKHR3Z3YB0nYbXxt315Cc.roa
Signing time:             Thu 01 Jan 2026 01:53:46 +0000
ROA not before:           Thu 01 Jan 2026 01:53:46 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        180.149.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:53:46 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7E50DB0AEC8A1D1DD9DD80749D86D7C6DDF5E427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:ed:fa:87:b2:cb:0b:dc:92:1f:47:9d:3f:
                    03:83:00:79:8b:5a:c2:82:fa:fc:e1:67:ae:4d:a8:
                    50:ef:e8:f3:af:2d:b6:09:e2:b5:66:a9:d2:81:28:
                    b8:a0:c7:fb:14:cf:5a:e3:e6:f5:b0:67:9b:83:1e:
                    90:5c:f4:72:18:8c:84:6f:7f:17:00:bc:73:49:10:
                    72:e1:84:32:b5:fb:67:83:5c:92:14:d9:26:e3:a1:
                    28:75:02:94:7b:b1:32:43:20:af:8a:2c:73:f1:e6:
                    e1:f5:d7:80:f7:3f:38:b0:ee:7c:e8:ef:3d:7d:d8:
                    a5:9b:cc:cf:42:4a:b6:63:a1:f9:54:9e:27:da:f2:
                    a5:6f:8c:0d:39:1a:af:cb:26:6c:e7:b5:e0:07:8d:
                    fd:54:39:34:67:fe:e1:08:35:ee:3a:6c:f0:e9:3c:
                    39:9d:b9:2e:75:9e:36:47:a6:34:b2:76:da:13:70:
                    66:fa:24:f8:ac:fd:ad:4b:a4:82:f3:40:0d:b1:5d:
                    95:de:54:a4:c3:a8:0d:0a:82:5e:e8:a6:77:1a:e5:
                    04:55:07:5a:27:90:d7:2f:07:6e:1c:70:26:c4:90:
                    07:d4:b9:41:70:d8:8a:04:76:b2:5a:56:a5:ef:a7:
                    0a:c5:b9:f2:8c:c6:35:69:f8:e8:74:a7:03:01:ab:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:DB:0A:EC:8A:1D:1D:D9:DD:80:74:9D:86:D7:C6:DD:F5:E4:27
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/flDbCuyKHR3Z3YB0nYbXxt315Cc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:aa:92:4c:11:2b:2f:18:02:51:e2:6d:a0:21:7a:20:43:bc:
         af:f9:9b:9b:f3:0a:96:7c:7c:2c:d2:ee:ea:64:85:14:12:cf:
         4e:6b:54:c9:4f:bb:d7:ab:8b:71:d5:b4:a6:8a:a8:cf:c3:f4:
         f7:6f:11:36:16:1c:7f:6c:3a:51:51:52:1e:a6:d4:a1:f5:45:
         5f:db:ef:85:e4:d4:dc:54:35:04:5c:02:ad:0b:a4:51:db:8c:
         fe:07:22:4a:72:7d:bc:4a:24:b6:28:f2:d5:94:59:b6:65:c2:
         e5:c1:fa:52:e2:d1:b0:4d:d6:f4:83:95:96:97:20:ac:61:31:
         b9:6e:a2:30:ed:d2:06:ca:97:ad:30:32:2a:94:df:e6:29:7b:
         7e:12:70:42:8d:3c:58:fa:cb:1b:18:ad:c4:2c:e6:27:af:c5:
         cb:9a:b4:a6:9c:d6:63:dc:2e:3c:45:d2:34:16:43:ed:98:20:
         1f:34:e1:81:bb:d6:97:14:81:28:e8:aa:d2:ec:d8:63:0a:88:
         22:3a:44:96:ee:4c:72:dc:c0:9f:12:1b:a3:e0:06:21:00:50:
         67:8e:21:0d:04:a4:bd:a6:54:a9:af:d2:c7:4c:1c:39:af:60:
         ac:b9:b6:11:8c:43:46:ce:9b:ad:78:a0:9d:fc:c7:aa:8a:d1:
         6f:80:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:39 2026 by rpki-client