This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/02jYkGYZI63KWHKfxwaB-a0qo7A.roa
File:                     02jYkGYZI63KWHKfxwaB-a0qo7A.roa (raw, json)
Hash identifier:          7ALCpgrcRyGX08BKhLdYjfEtiQO4sFdDlka6YnmQCIo=
Subject key identifier:   D3:68:D8:90:66:19:23:AD:CA:58:72:9F:C7:06:81:F9:AD:2A:A3:B0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0695
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/02jYkGYZI63KWHKfxwaB-a0qo7A.roa
Signing time:             Mon 01 Dec 2025 02:09:53 +0000
ROA not before:           Mon 01 Dec 2025 02:09:53 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        27.94.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:09:53 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=D368D890661923ADCA58729FC70681F9AD2AA3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:22:b5:ed:06:fa:6d:ff:3e:59:ea:e8:75:
                    16:64:7c:8c:f4:2e:50:0c:22:19:2a:cc:6b:d5:4f:
                    e2:e3:4b:1e:62:c7:d2:5b:aa:f4:e1:2f:7f:f5:6f:
                    1a:8a:5b:b4:53:bc:db:28:4f:a5:16:6f:23:99:47:
                    7d:bb:23:07:ff:8f:23:e8:44:9a:ab:c8:1c:8b:88:
                    d0:b4:c7:ff:48:62:f6:90:ba:3d:b4:19:0a:f6:ef:
                    9d:a7:1c:f6:db:06:84:1f:a7:65:76:98:9a:13:c1:
                    89:51:49:19:e3:73:f4:5a:f6:47:c3:ad:8f:5d:6b:
                    bc:3c:85:ad:61:94:0c:39:a3:bb:0b:22:59:e1:92:
                    9c:f6:65:01:8d:ab:65:c9:3c:f8:30:af:35:90:43:
                    02:86:b6:2b:cb:af:1b:e5:a4:74:ef:57:87:6e:02:
                    ab:f8:b0:06:27:f0:7a:64:fa:e2:0e:24:74:46:17:
                    fe:cc:6f:cc:51:fd:c9:60:12:e9:00:e0:59:36:fa:
                    00:64:13:3c:ee:8c:aa:57:60:3e:bd:82:19:93:dc:
                    bf:6c:63:f4:6c:96:3f:53:f4:18:97:b6:68:a7:cb:
                    24:64:f7:07:e0:f3:ed:d5:0a:1b:4f:1f:90:2f:55:
                    37:b3:cf:98:7c:b1:35:fa:85:6a:5f:6f:da:cd:7e:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:68:D8:90:66:19:23:AD:CA:58:72:9F:C7:06:81:F9:AD:2A:A3:B0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/02jYkGYZI63KWHKfxwaB-a0qo7A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:82:ba:a5:24:24:d8:f2:5d:53:98:85:04:ed:30:15:1f:81:
         71:4e:07:b7:62:8b:b9:d5:e1:35:b1:4d:63:78:a2:0a:c0:3f:
         66:e3:eb:a7:de:b3:9c:7c:72:4f:c9:84:cb:db:79:9f:a0:e5:
         b3:3a:da:8f:6c:94:92:3e:3a:83:3f:e4:cf:67:f1:b3:fd:40:
         a7:ee:26:fe:e8:04:1f:cd:78:aa:16:73:42:fc:5b:00:5b:e5:
         e0:de:10:a4:cf:57:31:fe:ea:fa:f9:99:3a:d9:38:b4:be:f5:
         fd:62:42:7c:7b:a7:9a:d6:87:15:c0:98:dd:e2:34:bf:27:65:
         ad:45:b8:80:10:4c:f3:ba:14:94:57:81:dc:8b:bb:bb:ba:dc:
         d0:1c:34:d2:05:0c:d7:0a:68:87:75:2b:4f:73:29:4e:79:7c:
         da:9a:fb:8b:30:0e:2c:cc:7c:dc:e2:78:5f:45:61:3d:cd:67:
         60:e5:62:d4:ee:fd:9d:7b:f7:0d:4c:c6:8f:33:d2:a2:cc:39:
         ed:15:fd:1a:6a:4e:eb:9e:fa:82:ff:ea:bb:b6:72:5a:00:d3:
         6f:68:97:b7:c5:9b:fe:8b:e1:c6:6d:df:aa:cf:be:02:1d:86:
         82:9b:e7:7e:3e:c3:46:fb:f2:a7:9c:86:8a:02:0a:9c:cf:00:
         08:19:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:31 2025 by rpki-client