This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/GrtnlVI1AveOBln4udcncMMpu-0.roa
File:                     GrtnlVI1AveOBln4udcncMMpu-0.roa (raw, json)
Hash identifier:          4Hny9kCdNYnifRaFMRcCgpujXxZFpl3IeeoAwbUrfhY=
Subject key identifier:   1A:BB:67:95:52:35:02:F7:8E:06:59:F8:B9:D7:27:70:C3:29:BB:ED
Certificate issuer:       /CN=32DB70FFB8A72289F56450768644658C54AA64E9
Certificate serial:       4B
Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/GrtnlVI1AveOBln4udcncMMpu-0.roa
Signing time:             Thu 11 Dec 2025 06:46:41 +0000
ROA not before:           Thu 11 Dec 2025 06:46:41 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     18135
IP address blocks:        219.100.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 12:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9
        Validity
            Not Before: Dec 11 06:46:41 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=1ABB6795523502F78E0659F8B9D72770C329BBED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:d3:11:e5:7a:0e:5f:a1:dc:6f:e5:da:39:
                    39:87:a8:d4:27:3c:8a:3e:37:91:31:8f:1f:7c:c6:
                    49:7b:dc:79:45:6e:ad:7d:31:aa:e9:ad:94:d0:cc:
                    75:13:11:b2:36:fd:d9:0b:93:37:3f:8d:6f:4a:bd:
                    22:71:1c:47:0a:7b:04:d4:d3:ca:92:ff:f7:c9:49:
                    59:14:63:da:e6:af:aa:7f:ae:f5:da:06:7a:81:90:
                    8f:19:f7:71:47:08:80:89:c8:3f:05:01:e0:50:7d:
                    1a:70:2f:c6:b2:9f:51:a4:b2:78:46:4c:b0:3e:a2:
                    20:5a:66:e9:1c:33:ae:10:ea:81:54:49:56:0f:b4:
                    7d:0c:7d:85:28:b7:03:61:83:ef:0a:82:8e:f9:58:
                    c6:1a:71:a5:79:fc:99:94:44:c7:1e:24:ea:65:85:
                    a7:0e:a6:43:0f:76:d3:6d:d5:1a:b5:28:f8:75:2d:
                    e6:a1:2a:6b:94:55:8d:a8:81:a6:b7:d6:94:d6:56:
                    08:d2:b7:6a:fc:87:ee:4a:d1:78:6c:23:96:5a:d3:
                    87:a5:be:63:39:e0:d4:92:3b:f1:df:dd:2e:28:c2:
                    23:cf:e2:33:40:60:14:9a:ee:1c:2e:8f:be:7b:49:
                    ef:c4:13:a8:09:6c:51:1b:55:d1:cd:0f:8a:aa:28:
                    15:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BB:67:95:52:35:02:F7:8E:06:59:F8:B9:D7:27:70:C3:29:BB:ED
            X509v3 Authority Key Identifier:
                keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/GrtnlVI1AveOBln4udcncMMpu-0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:03:69:b7:bb:bf:87:a7:1e:36:a5:81:42:36:5a:58:c2:
         cf:b3:bd:3c:94:e1:6d:f2:07:dd:b8:a1:ea:97:bf:cc:95:33:
         e5:9b:62:06:f9:b5:cd:49:af:02:f4:88:86:50:b1:71:d3:eb:
         64:4e:bb:77:d8:d9:66:09:67:d9:db:ff:02:dc:77:35:8b:15:
         de:86:58:1d:19:2a:fb:b5:4b:e3:64:8f:7c:a2:da:53:21:29:
         0c:ba:68:43:ed:20:f1:6f:38:e7:e9:1b:a9:6d:1e:65:18:1b:
         68:3b:48:bb:ab:c6:74:56:b3:ec:75:48:24:5f:f6:5c:91:a2:
         6f:bb:6b:6d:c0:11:1a:80:5e:5e:5a:72:3c:e4:86:40:46:46:
         b6:f0:cb:3a:42:10:4e:dc:d2:0f:c7:85:5c:67:39:7e:2a:d9:
         86:37:6c:48:26:e1:05:23:10:35:0e:9b:64:bd:c2:fe:8c:5d:
         bf:4a:0e:aa:1b:4d:25:54:a4:59:aa:c4:8e:e7:25:8a:45:91:
         b4:04:e7:24:c5:9c:94:26:d3:6a:de:1a:de:b2:ec:79:99:ab:
         88:46:33:31:5c:50:62:f7:75:57:c8:8a:4f:0a:e4:63:0e:15:
         20:8e:7a:4f:ce:63:38:f9:37:08:79:37:ac:b5:48:54:ec:a4:
         59:38:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:28 2025 by rpki-client