This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ziOFHQAz3RsuzwZElWqxTcvTnU4.roa
File:                     ziOFHQAz3RsuzwZElWqxTcvTnU4.roa (raw, json)
Hash identifier:          hiWL5X0XRgeMaSGaywQXJeI4kKfNlnZur7F867YGjfI=
Subject key identifier:   CE:23:85:1D:00:33:DD:1B:2E:CF:06:44:95:6A:B1:4D:CB:D3:9D:4E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05F8
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ziOFHQAz3RsuzwZElWqxTcvTnU4.roa
Signing time:             Thu 01 Jan 2026 01:45:48 +0000
ROA not before:           Thu 01 Jan 2026 01:45:48 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:45:48 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=CE23851D0033DD1B2ECF0644956AB14DCBD39D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:9c:47:48:b5:52:3f:c7:47:8f:9d:d7:70:
                    a2:0f:43:e5:28:33:3a:35:72:62:10:0b:e9:2e:09:
                    5c:60:13:e8:d1:44:2e:07:b3:6f:ca:be:f2:94:8f:
                    91:e2:f9:07:84:be:c5:2d:cd:c1:e0:a9:44:90:f4:
                    41:9f:1a:47:07:3e:4b:95:e4:23:77:6d:e8:f7:74:
                    f7:8c:53:09:4e:b6:e3:fd:eb:2b:e9:fb:3e:0b:18:
                    14:6a:a6:0c:a7:f4:36:8d:f9:46:7f:30:3b:a2:32:
                    61:b3:ab:6f:f8:ed:f0:fb:1b:78:87:0e:26:0b:79:
                    e8:9c:1e:46:10:07:4e:85:b9:85:0a:36:4f:f9:33:
                    23:44:0b:84:0f:fe:8c:99:c6:81:ed:95:0c:c4:5d:
                    6a:76:4a:fd:44:6e:bc:7c:3c:c6:d9:f4:84:68:ac:
                    75:fe:a9:ee:9e:d2:1d:f5:95:27:14:3c:f4:77:5f:
                    cb:86:84:66:d3:25:0e:4b:6d:39:b6:f9:ba:69:b3:
                    0e:85:47:94:61:ff:3d:ad:47:30:4e:1c:6d:98:60:
                    cb:99:22:44:b7:05:15:da:9a:2b:57:b6:46:e4:eb:
                    cb:11:da:99:cd:62:dd:23:07:d8:7a:4f:78:5d:67:
                    78:90:37:9f:cc:95:11:9f:fb:f7:d8:6d:52:32:a2:
                    d8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:85:1D:00:33:DD:1B:2E:CF:06:44:95:6A:B1:4D:CB:D3:9D:4E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ziOFHQAz3RsuzwZElWqxTcvTnU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:08:49:83:6e:bd:9d:9e:41:9d:55:48:bb:e2:19:2a:55:
         61:ed:3a:04:b8:f9:ca:50:33:a9:74:09:9b:57:5d:f5:af:04:
         0e:af:4e:93:e9:d0:cd:4f:ce:ff:60:24:ba:b0:7f:fb:9d:fd:
         1f:16:84:eb:90:d3:42:c1:c4:da:42:6a:8e:a9:19:c5:03:cb:
         d8:eb:fe:6e:9c:a4:09:8d:5d:24:54:2d:cb:0f:5d:6b:2e:7f:
         82:4b:a6:29:dc:e3:d9:20:17:ea:64:81:82:19:31:ac:61:9e:
         62:59:d2:95:4c:1c:9e:93:cd:61:ce:17:72:19:f4:da:fe:ff:
         b2:e6:38:07:84:e9:a7:a2:5e:35:c9:b2:c3:af:5b:6b:36:15:
         69:f5:ac:d7:7f:81:53:54:a0:10:a8:ea:49:ef:a0:59:f8:a3:
         f5:f1:e6:bd:c0:e0:33:2e:a2:78:1c:84:0c:9d:ab:ee:da:85:
         c8:4b:ac:d7:47:c9:75:43:88:fe:c2:d8:38:ab:a8:62:7e:29:
         79:89:61:89:47:92:6a:4e:e8:2c:48:ec:51:f3:ef:b8:ec:d2:
         d6:9a:6a:f3:71:6d:61:1f:96:ed:66:d9:e7:aa:62:2d:d5:96:
         16:6d:69:c3:86:8f:d3:0a:b2:fd:04:8e:14:cd:14:4a:6d:ce:
         11:82:44:7e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAxMDEw
MTQ1NDhaFw0yNjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENFMjM4NTFEMDAzM0RE
MUIyRUNGMDY0NDk1NkFCMTREQ0JEMzlENEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZw5xHSLVSP8dHj53XcKIPQ+UoMzo1cmIQC+kuCVxgE+jRRC4H
s2/KvvKUj5Hi+QeEvsUtzcHgqUSQ9EGfGkcHPkuV5CN3bej3dPeMUwlOtuP96yvp
+z4LGBRqpgyn9DaN+UZ/MDuiMmGzq2/47fD7G3iHDiYLeeicHkYQB06FuYUKNk/5
MyNEC4QP/oyZxoHtlQzEXWp2Sv1Ebrx8PMbZ9IRorHX+qe6e0h31lScUPPR3X8uG
hGbTJQ5LbTm2+bppsw6FR5Rh/z2tRzBOHG2YYMuZIkS3BRXamitXtkbk68sR2pnN
Yt0jB9h6T3hdZ3iQN5/MlRGf+/fYbVIyotgXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUziOFHQAz3RsuzwZElWqxTcvTnU4wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L3ppT0ZIUUF6M1JzdXp3WkVsV3F4VGN2VG5VNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADbYDswDQYJKoZIhvcNAQELBQADggEBABD1CEmDbr2dnkGdVUi74hkqVWHt
OgS4+cpQM6l0CZtXXfWvBA6vTpPp0M1Pzv9gJLqwf/ud/R8WhOuQ00LBxNpCao6p
GcUDy9jr/m6cpAmNXSRULcsPXWsuf4JLpinc49kgF+pkgYIZMaxhnmJZ0pVMHJ6T
zWHOF3IZ9Nr+/7LmOAeE6aeiXjXJssOvW2s2FWn1rNd/gVNUoBCo6knvoFn4o/Xx
5r3A4DMuongchAydq+7ahchLrNdHyXVDiP7C2DirqGJ+KXmJYYlHkmpO6CxI7FHz
77js0taaavNxbWEflu1m2eeqYi3VlhZtacOGj9MKsv0EjhTNFEptzhGCRH4=
-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:40 2026 by rpki-client