This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/kFW7ulbMZ8Pd2Dv5KQiNaTrLDdU.roa
File:                     kFW7ulbMZ8Pd2Dv5KQiNaTrLDdU.roa (raw, json)
Hash identifier:          4jzMJtqIqxFDzLrQDE2RchFCAHb8Vd0usuKRvaiQY/8=
Subject key identifier:   90:55:BB:BA:56:CC:67:C3:DD:D8:3B:F9:29:08:8D:69:3A:CB:0D:D5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05BA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kFW7ulbMZ8Pd2Dv5KQiNaTrLDdU.roa
Signing time:             Thu 01 Jan 2026 01:34:02 +0000
ROA not before:           Thu 01 Jan 2026 01:34:02 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        112.140.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:34:02 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=9055BBBA56CC67C3DDD83BF929088D693ACB0DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:d8:9c:9e:bd:58:e4:f5:7b:6c:8e:e5:e3:
                    4d:14:a0:05:a7:c3:fe:6f:bd:e7:23:89:29:1c:3d:
                    dd:14:ef:05:bb:47:54:db:ff:ea:d9:4c:7f:25:7f:
                    1f:b1:a7:2a:d2:47:5d:4a:3c:9a:de:c7:5f:bf:78:
                    f3:59:49:ad:f3:83:bb:65:bd:9b:04:d9:d8:cb:5b:
                    61:1e:ea:c6:27:ca:62:6f:5d:db:21:0b:ee:01:28:
                    6f:8e:1a:ef:ac:d5:13:79:51:d3:a6:74:e6:e3:98:
                    4e:28:76:78:dd:05:f6:62:df:c0:2b:0d:ff:7d:39:
                    8a:2d:dd:6f:a1:f1:25:4f:6f:7d:5d:37:df:2b:8d:
                    2b:63:fb:06:bd:0d:5c:59:aa:e7:7d:f2:58:c6:b7:
                    5d:ac:7c:a6:77:f1:66:0e:6e:47:ed:37:ef:a5:15:
                    7d:b1:ff:19:f9:58:fa:f9:89:c5:d0:4a:68:fa:f7:
                    71:87:a7:6a:1f:4e:a4:7a:26:ba:ab:35:33:dc:db:
                    6c:9f:f1:1e:ef:7f:11:9c:11:45:ef:e6:51:d2:1a:
                    aa:8f:28:ee:54:40:ab:dc:aa:36:3d:10:46:6c:88:
                    ce:2d:b2:c8:52:5d:38:40:59:4f:d0:60:94:e7:5e:
                    ee:b8:3e:21:5d:c3:23:c2:bb:3f:4b:bf:26:71:dd:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:55:BB:BA:56:CC:67:C3:DD:D8:3B:F9:29:08:8D:69:3A:CB:0D:D5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kFW7ulbMZ8Pd2Dv5KQiNaTrLDdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:75:e3:e6:e3:d4:74:cb:ba:39:c0:fb:2c:49:48:07:8b:6f:
         4e:c7:f8:8b:72:e1:f0:4e:9f:df:40:86:12:51:32:f6:f3:61:
         2a:f9:bd:be:71:07:2d:25:5a:6f:b0:93:03:90:b4:b0:af:10:
         84:9e:ef:78:5f:c2:52:3a:c9:73:13:34:db:dd:0f:d4:5f:54:
         e8:1a:7d:7c:bf:6c:ab:48:ab:03:fd:7a:a4:e1:41:2d:5e:c6:
         1f:ec:f9:09:4e:09:ae:10:c3:88:c0:b5:36:b7:9b:87:5c:5e:
         c6:10:bb:cc:03:c2:5e:5a:62:9b:95:a8:63:a8:58:3a:60:0c:
         68:92:d7:dd:e5:1e:c3:7f:4d:d1:7b:ee:61:2b:d8:34:27:67:
         9d:3f:40:ae:ea:78:45:8f:64:55:0b:8d:ce:70:0e:d9:77:f0:
         c9:4d:3f:7e:eb:e8:31:65:59:fb:42:33:9e:ed:f8:91:94:71:
         86:bf:14:38:ef:87:84:3f:d5:25:ef:3b:56:e9:34:5b:bc:96:
         eb:68:f0:e6:f1:87:5e:9b:08:f7:cf:c6:ce:5b:03:8c:a5:89:
         9c:5b:e9:76:69:d9:11:5c:77:95:5c:f9:74:71:99:6a:cc:1f:
         5f:6d:c7:ae:21:f1:09:46:ba:11:29:19:b9:7d:58:57:36:fa:
         99:d9:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:42 2026 by rpki-client