This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/857/Ih8EP5titRoVwAfML69FjWFe3vc.roa
File:                     Ih8EP5titRoVwAfML69FjWFe3vc.roa (raw, json)
Hash identifier:          +jH9rox/FOpRBRpJi7llefBDeJGKFiAQCMQQtDc+PPs=
Subject key identifier:   22:1F:04:3F:9B:62:B5:1A:15:C0:07:CC:2F:AF:45:8D:61:5E:DE:F7
Certificate issuer:       /CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Certificate serial:       4A
Authority key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/Ih8EP5titRoVwAfML69FjWFe3vc.roa
Signing time:             Wed 03 Dec 2025 06:37:24 +0000
ROA not before:           Wed 03 Dec 2025 06:37:24 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     23780
IP address blocks:        49.128.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 12:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
        Validity
            Not Before: Dec  3 06:37:24 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=221F043F9B62B51A15C007CC2FAF458D615EDEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e5:4f:e5:8d:d1:e2:20:07:32:99:7f:15:22:
                    b1:f3:99:16:f7:89:1d:0f:fd:ed:94:c7:2a:81:ac:
                    91:01:1b:92:45:6b:65:54:5d:2b:cf:a0:8f:c2:8a:
                    49:25:87:bf:13:12:9a:a3:67:a0:8f:8b:0f:3c:87:
                    74:6a:34:69:24:71:03:35:61:ce:c6:ff:38:d7:9e:
                    f7:f3:f4:99:30:56:8e:09:f3:b1:3d:1d:6f:7c:d4:
                    1e:0e:70:48:cb:61:57:99:20:11:79:85:2b:b5:1a:
                    23:ad:8f:d4:08:1a:a1:7a:2f:a9:4b:17:71:a0:4d:
                    48:10:61:b5:cc:86:a7:e6:fa:bf:b9:f2:e2:cf:e6:
                    37:86:7b:39:35:33:c6:4c:79:d5:37:46:c2:3b:d8:
                    d6:8c:fd:72:96:32:ab:9d:b4:2d:d6:13:fa:8e:57:
                    9c:55:9d:62:53:2b:31:54:72:27:d4:ad:ef:b5:cc:
                    be:61:07:15:8f:aa:63:b5:43:0b:ee:17:c2:7f:8f:
                    b6:20:e0:2b:22:10:82:4c:ae:61:fc:7c:17:b0:85:
                    66:9d:9a:7a:64:c8:7f:f1:a2:fe:43:9c:a3:62:ef:
                    2c:3e:08:73:64:c6:0c:ec:db:bc:69:6e:da:86:0a:
                    3a:e8:ae:96:27:80:4d:ef:8b:5c:36:cd:89:f8:f3:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1F:04:3F:9B:62:B5:1A:15:C0:07:CC:2F:AF:45:8D:61:5E:DE:F7
            X509v3 Authority Key Identifier:
                keyid:A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/Ih8EP5titRoVwAfML69FjWFe3vc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cf:d9:8e:69:3f:83:da:d0:ae:b4:44:f0:ae:06:42:41:32:74:
         ad:9f:a8:2b:93:fd:ea:62:ad:a6:a5:08:91:a0:76:9e:b1:8c:
         ac:1f:91:03:62:82:74:6b:a7:b5:3f:7e:46:c2:4a:9a:a6:fa:
         07:b9:e3:73:cb:aa:47:db:81:ca:3a:ed:bc:ac:9f:22:96:bf:
         5c:9c:d0:0b:21:86:a8:52:2d:9f:63:17:4a:79:6d:66:04:1a:
         c0:3f:bd:84:3b:75:15:49:10:0c:01:7a:ba:97:38:ab:81:03:
         d3:25:59:15:44:fa:64:4e:d1:8f:9c:92:23:4f:5f:84:df:c2:
         39:c7:8c:de:2e:7a:6f:01:0b:90:bf:d6:84:4a:85:55:6e:4e:
         a1:df:6a:7f:3d:7a:68:f0:69:48:91:cc:77:1e:43:37:23:2c:
         e4:33:fe:b5:fe:2f:45:a0:4a:ca:b9:a0:e1:f3:71:d3:81:67:
         23:e0:1a:9d:2a:6f:6a:c2:c8:f9:fb:7b:96:1b:78:58:30:aa:
         03:04:14:b5:8f:b7:ab:1c:ee:c4:3f:c4:53:88:c1:69:4e:a8:
         5d:07:cd:7c:a0:2b:6c:dc:9a:2c:bd:77:d8:84:3c:fb:f4:df:
         b2:1d:a6:75:7c:33:fa:a1:fc:fe:5f:b2:bc:22:a1:25:9d:11:
         c5:ee:68:14
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOURF
N0MxMzM4MTIzN0M1Qjg5OEQ1QTI0RjJDOUE2Q0IzQzE5NzFCMB4XDTI1MTIwMzA2
MzcyNFoXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoMjIxRjA0M0Y5QjYyQjUx
QTE1QzAwN0NDMkZBRjQ1OEQ2MTVFREVGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOflT+WN0eIgBzKZfxUisfOZFveJHQ/97ZTHKoGskQEbkkVrZVRd
K8+gj8KKSSWHvxMSmqNnoI+LDzyHdGo0aSRxAzVhzsb/ONee9/P0mTBWjgnzsT0d
b3zUHg5wSMthV5kgEXmFK7UaI62P1AgaoXovqUsXcaBNSBBhtcyGp+b6v7ny4s/m
N4Z7OTUzxkx51TdGwjvY1oz9cpYyq520LdYT+o5XnFWdYlMrMVRyJ9St77XMvmEH
FY+qY7VDC+4Xwn+PtiDgKyIQgkyuYfx8F7CFZp2aemTIf/Gi/kOco2LvLD4Ic2TG
DOzbvGlu2oYKOuiulieATe+LXDbNifjzfEMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQiHwQ/m2K1GhXAB8wvr0WNYV7e9zAfBgNVHSMEGDAWgBSp3nwTOBI3xbiY1aJP
LJpss8GXGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODU3L3FkNThFemdTTjhXNG1OV2lUeXlhYkxQQmx4cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FkNThFemdTTjhXNG1OV2lUeXlhYkxQ
Qmx4cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTcvSWg4RVA1dGl0Um9Wd0FmTUw2OUZqV0ZlM3ZjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAzGAGDANBgkqhkiG9w0BAQsFAAOCAQEAz9mOaT+D2tCutETwrgZCQTJ0rZ+o
K5P96mKtpqUIkaB2nrGMrB+RA2KCdGuntT9+RsJKmqb6B7njc8uqR9uByjrtvKyf
Ipa/XJzQCyGGqFItn2MXSnltZgQawD+9hDt1FUkQDAF6upc4q4ED0yVZFUT6ZE7R
j5ySI09fhN/COceM3i56bwELkL/WhEqFVW5Ood9qfz16aPBpSJHMdx5DNyMs5DP+
tf4vRaBKyrmg4fNx04FnI+AanSpvasLI+ft7lht4WDCqAwQUtY+3qxzuxD/EU4jB
aU6oXQfNfKArbNyaLL132IQ8+/Tfsh2mdXwz+qH8/l+yvCKhJZ0Rxe5oFA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:28:17 2025 by rpki-client