This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/uRFNUjb3WeLFGpyQYdLiKxiZzyI.roa
File:                     uRFNUjb3WeLFGpyQYdLiKxiZzyI.roa (raw, json)
Hash identifier:          SuKoy5Fz+UbzeWYmdHI17k8KNfqHikpoYoqu1T47z3E=
Subject key identifier:   B9:11:4D:52:36:F7:59:E2:C5:1A:9C:90:61:D2:E2:2B:18:99:CF:22
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0622
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/uRFNUjb3WeLFGpyQYdLiKxiZzyI.roa
Signing time:             Thu 01 Jan 2026 01:50:06 +0000
ROA not before:           Thu 01 Jan 2026 01:50:06 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570 (0x622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:50:06 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=B9114D5236F759E2C51A9C9061D2E22B1899CF22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:9d:e4:5e:e1:e6:10:48:96:63:8a:0a:7d:
                    90:9b:04:f1:c6:97:ef:81:05:ba:62:5d:75:da:dc:
                    77:82:13:06:3e:2b:ea:eb:d5:bd:00:66:c7:03:0c:
                    e2:7b:7e:7d:a3:09:13:81:31:d9:46:25:fc:bd:05:
                    a6:2b:87:1e:d2:ab:13:c0:7e:cb:53:d0:60:b8:82:
                    86:a0:1a:8c:d2:23:c2:30:1d:4d:0a:8d:c1:74:d7:
                    bf:ba:34:72:9c:52:a3:5a:d5:ab:00:93:eb:8c:27:
                    5f:ab:f8:43:2f:54:5f:94:b6:02:a0:a6:5f:0a:58:
                    17:d1:ec:ce:ff:38:40:41:61:e9:cd:f4:0f:ce:e1:
                    df:3e:af:72:3b:77:48:6f:f5:40:cf:94:bd:aa:93:
                    7b:84:45:fc:d6:e9:17:60:d0:79:1c:23:ea:d6:88:
                    1b:fc:dc:4c:44:c0:6c:3f:19:a8:4d:c4:cc:d5:d3:
                    eb:ed:71:0f:76:03:3f:0e:0b:73:2e:80:80:51:e6:
                    b2:43:e4:c8:20:56:6e:cb:f5:53:14:d4:d1:41:ac:
                    ad:7f:56:ca:ef:a1:fa:31:a2:bd:fc:12:f5:0d:21:
                    3f:92:24:18:fb:a8:2c:98:7b:c6:db:c1:b5:76:0c:
                    10:ec:ae:18:47:33:a8:d3:96:23:72:13:d2:a7:7b:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:11:4D:52:36:F7:59:E2:C5:1A:9C:90:61:D2:E2:2B:18:99:CF:22
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/uRFNUjb3WeLFGpyQYdLiKxiZzyI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:e4:80:fe:8c:62:8e:33:06:3d:69:4f:3d:51:ae:f4:a1:18:
         13:36:ec:79:db:20:ae:dc:0b:50:ca:5b:08:1b:dd:dd:ff:4d:
         d2:b1:0b:42:4b:3c:db:86:25:d5:63:ad:4c:df:f7:5c:0b:ea:
         fd:10:7a:89:a5:75:dc:9b:ff:ae:24:02:27:b2:c8:e1:48:01:
         db:76:e0:b1:30:9f:1d:d8:c9:b6:d5:a6:6e:f8:4f:08:42:aa:
         20:64:77:f9:9f:1b:ee:c4:da:29:cc:25:a9:a4:03:c5:c6:0e:
         1c:2b:7a:e5:5b:1e:c2:ec:f8:f5:f5:2a:c9:5e:7e:74:a3:36:
         49:f3:61:61:ca:9b:61:d9:9a:be:a2:86:dc:ac:58:bf:12:64:
         7e:10:be:60:1f:a2:5a:91:f5:e8:6c:9d:4e:fd:5f:db:ba:7c:
         4a:e2:67:3e:f6:cd:80:aa:85:09:51:17:42:f7:2e:c4:23:fe:
         21:30:c9:33:0c:2e:fe:48:04:5e:28:0e:83:53:5a:b7:57:c4:
         a0:fb:4c:26:77:ac:3f:ec:67:21:a2:6b:bc:c9:81:4a:63:78:
         ce:5e:4b:c7:01:39:ed:66:13:96:a7:ed:eb:26:3d:3a:4d:9d:
         e4:95:f6:44:b1:3d:cb:0a:ed:78:a4:55:48:48:bb:51:bc:11:
         9b:05:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:41 2026 by rpki-client