This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/oaecAbdFphHGKgOg1VZ6PazW7zM.roa
File:                     oaecAbdFphHGKgOg1VZ6PazW7zM.roa (raw, json)
Hash identifier:          2DAy2k9m9RIwGmKcwQQwV1HfRk/sWgbKQxUj+6SyBog=
Subject key identifier:   A1:A7:9C:01:B7:45:A6:11:C6:2A:03:A0:D5:56:7A:3D:AC:D6:EF:33
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0614
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/oaecAbdFphHGKgOg1VZ6PazW7zM.roa
Signing time:             Thu 01 Jan 2026 01:49:56 +0000
ROA not before:           Thu 01 Jan 2026 01:49:56 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        218.219.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:49:56 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=A1A79C01B745A611C62A03A0D5567A3DACD6EF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:ec:38:d9:ce:bc:b4:0d:6a:46:4e:23:b6:
                    24:e1:e1:d7:e0:45:74:96:72:a4:a0:44:cc:32:bb:
                    f4:1e:de:0f:5b:08:56:00:bf:08:5b:63:b3:df:f0:
                    e1:33:83:c1:eb:de:e8:50:69:ed:12:26:7c:62:74:
                    71:d8:bd:25:dd:99:6b:d5:e3:ab:2f:dd:68:3b:73:
                    da:26:7f:be:34:0b:90:4e:8d:01:40:f9:1d:6e:5b:
                    00:4d:76:3b:40:55:b8:3d:5d:cb:f7:a6:68:14:73:
                    ad:fb:3f:5a:b1:95:b1:d4:a9:24:c3:6c:d3:97:b1:
                    52:fd:08:a9:eb:95:a7:08:c3:ed:cd:85:7c:60:3a:
                    10:f1:1d:d7:4f:1c:7d:27:74:df:16:ce:9b:3a:ea:
                    b6:8b:89:83:4b:17:9a:a9:6c:90:64:c2:fb:54:f8:
                    b7:d6:21:da:25:32:34:85:a5:d1:4f:c5:2d:8e:f9:
                    55:83:19:db:db:65:7b:60:6f:df:16:38:9f:07:00:
                    d4:43:e2:df:d5:b8:d3:26:f4:b6:44:ac:8d:2e:2e:
                    0a:ae:cf:76:16:7e:11:cf:a8:6a:26:d2:88:53:13:
                    1a:06:b6:45:1b:80:ac:d6:f8:5d:7d:cc:7f:0e:c8:
                    d2:98:54:03:6a:c5:a4:57:a7:d6:e1:91:40:3d:df:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A7:9C:01:B7:45:A6:11:C6:2A:03:A0:D5:56:7A:3D:AC:D6:EF:33
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/oaecAbdFphHGKgOg1VZ6PazW7zM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:05:ce:15:13:c8:d5:3f:54:a8:40:ba:75:3e:66:7a:c3:4c:
         5e:9b:8e:29:3a:e3:01:aa:d8:29:39:fc:ef:1e:dc:15:33:c6:
         52:d2:81:8f:fd:b8:b4:21:92:a1:b0:9e:f7:c0:0a:4f:52:07:
         ae:bf:1d:4c:ed:2e:6c:4f:a7:72:f4:95:c9:d0:04:56:7a:66:
         fa:00:3c:e2:a3:53:06:9d:80:f1:84:72:14:1f:39:11:ef:cd:
         8c:d0:48:22:91:a7:94:69:60:81:d9:86:e5:7e:92:7c:5b:3a:
         46:2b:09:7d:06:ec:44:d2:37:0a:c0:99:45:da:ae:03:40:2f:
         a2:04:99:1b:03:5f:6a:10:9a:37:99:9f:08:46:0a:b6:cb:2f:
         f6:dc:ad:7b:74:bf:fe:dc:8a:41:a4:26:8c:40:10:aa:09:8a:
         bd:e4:4c:50:e2:a1:d3:00:b5:f6:16:aa:d0:3b:6d:a9:63:6e:
         69:82:b2:2b:7b:b7:89:25:96:ae:60:0e:5a:dd:92:a1:59:35:
         d9:de:6d:dd:2c:e6:c5:80:47:c5:e6:c0:b1:2d:7c:15:2b:3f:
         e5:d8:b6:2c:cf:ff:8b:26:bb:eb:93:dd:75:d0:98:b6:6d:70:
         1f:65:be:44:45:3e:b1:99:95:f3:9e:e8:50:fc:7b:3d:78:87:
         f6:9c:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:43 2026 by rpki-client