This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/yZbjQrlVsPytgsYD_lW3WedUTAY.roa
File:                     yZbjQrlVsPytgsYD_lW3WedUTAY.roa (raw, json)
Hash identifier:          PRDjgBtoHuHwsj5zs2ogHYqWThkHb8fRlZ96rB1YB48=
Subject key identifier:   C9:96:E3:42:B9:55:B0:FC:AD:82:C6:03:FE:55:B7:59:E7:54:4C:06
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05FE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/yZbjQrlVsPytgsYD_lW3WedUTAY.roa
Signing time:             Thu 01 Jan 2026 01:45:51 +0000
ROA not before:           Thu 01 Jan 2026 01:45:51 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:45:51 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=C996E342B955B0FCAD82C603FE55B759E7544C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:d9:06:9a:48:8e:9b:0b:68:bc:b1:f9:68:
                    d7:bf:4c:0a:7d:c4:e3:d2:1f:ab:ac:83:b7:66:5a:
                    41:6c:d8:dd:d7:22:1a:70:d4:cf:12:f8:f6:aa:5a:
                    0c:27:0a:44:64:81:f8:a9:e0:31:76:11:6a:30:73:
                    ce:df:1b:50:a1:82:a9:3e:66:7c:c5:e2:e1:bf:a9:
                    83:f7:28:95:8f:04:1b:f5:00:cb:37:2c:3c:fc:83:
                    fc:84:84:2b:13:42:1b:83:5b:3d:d3:02:68:a8:3d:
                    bd:b5:4c:7f:a5:9a:5b:21:f3:d2:8f:5b:11:6e:3b:
                    9a:3f:22:17:b7:45:08:c7:a6:23:6e:71:3a:1f:89:
                    68:4c:5f:1b:e1:b1:74:e4:e0:95:8f:43:9c:9b:12:
                    3f:fd:c9:48:3b:b4:29:fd:33:d5:36:de:b2:2e:8a:
                    11:6f:5e:b4:ae:92:65:19:23:c5:df:73:24:73:94:
                    1c:33:0e:8b:2d:48:95:2f:c1:2a:ed:ec:ce:e1:f4:
                    a7:db:ba:30:28:9d:b3:ca:e7:9d:8f:d3:ea:16:fd:
                    8f:b7:d8:db:3a:6e:ab:bc:1e:fd:93:8f:6e:3a:34:
                    df:15:7e:04:97:a1:1e:7d:4e:85:a5:12:57:d4:90:
                    9e:68:1d:f4:2c:19:9f:c2:14:12:10:b2:85:27:29:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:96:E3:42:B9:55:B0:FC:AD:82:C6:03:FE:55:B7:59:E7:54:4C:06
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/yZbjQrlVsPytgsYD_lW3WedUTAY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:b4:16:b7:4f:02:04:f0:73:b6:8b:36:fc:42:ff:e4:70:
         16:c4:6f:8e:e3:bc:76:b9:88:fd:cd:4e:ac:ae:86:b0:99:2d:
         b2:e2:9e:dd:11:7e:35:a9:4d:a9:5e:63:11:22:16:7b:18:c3:
         83:7f:9f:9e:ce:c2:1f:6d:3c:ee:1d:ba:b9:0e:3a:01:79:21:
         42:c3:7c:a1:e2:2f:60:5a:5b:4d:39:1b:bc:81:3f:03:f4:e7:
         cc:1a:fe:6f:6b:70:13:31:cd:7a:d7:85:af:9a:24:59:8b:3a:
         7d:45:b6:a2:41:fc:c8:0b:4b:c8:89:d5:00:93:4a:85:72:6a:
         bf:23:38:8c:ff:99:fe:38:c9:20:33:56:98:cf:fd:4b:27:30:
         27:29:08:d4:49:9d:f8:95:30:df:ef:b4:e5:aa:d2:43:fb:63:
         3d:fa:c8:8e:0b:ed:53:dd:8f:9a:de:e2:1c:e1:20:16:9c:1f:
         74:ac:e4:c9:46:44:bf:1c:06:cc:cb:d0:dc:48:ca:25:e2:24:
         a7:21:40:e2:b5:72:6e:b6:79:35:5f:07:fa:8a:10:f3:1f:f6:
         86:52:df:2d:62:b0:2e:d0:1b:58:0e:df:50:07:46:ca:15:66:
         97:09:a1:3d:65:29:9d:3c:14:88:dd:18:73:68:10:15:99:1f:
         97:0e:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:42 2026 by rpki-client