This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1AnZh2k7QbEbaQlqLC80hEY0TyI.roa
File:                     1AnZh2k7QbEbaQlqLC80hEY0TyI.roa (raw, json)
Hash identifier:          0e+Cnd6UYGx3T3S2PcjkijfjSS18cILM3zYTrXgZGGw=
Subject key identifier:   D4:09:D9:87:69:3B:41:B1:1B:69:09:6A:2C:2F:34:84:46:34:4F:22
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05EC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1AnZh2k7QbEbaQlqLC80hEY0TyI.roa
Signing time:             Mon 01 Dec 2025 01:38:24 +0000
ROA not before:           Mon 01 Dec 2025 01:38:24 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        124.210.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:38:24 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=D409D987693B41B11B69096A2C2F348446344F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:c3:4b:60:7b:7b:28:6b:44:06:4e:22:43:
                    35:d2:57:02:32:59:db:2a:96:e7:ce:bb:43:81:da:
                    33:4b:43:c7:8f:82:02:84:16:73:73:72:41:8e:a1:
                    cd:5a:61:36:7d:b5:55:88:b0:30:1c:b9:88:27:1a:
                    2f:c5:c3:5c:0a:b2:16:d0:26:46:cd:2b:61:ab:a8:
                    db:e5:e7:30:5e:8c:bf:e6:af:29:8f:af:de:0e:80:
                    7f:d3:b6:dc:43:54:e9:63:bc:84:90:3d:b6:91:76:
                    b8:95:68:d3:25:c6:09:0d:e4:56:52:5f:b5:9e:e7:
                    68:91:44:8d:f4:0a:96:eb:66:b9:ac:10:0e:b1:8b:
                    1a:d4:c0:b5:c3:93:8f:a0:13:fa:0c:77:ff:3f:46:
                    bc:3d:7e:c7:6e:48:67:29:b3:86:9d:e9:f4:bf:fd:
                    fb:74:8c:ef:4b:7e:ff:b4:e1:01:99:27:4c:9c:a5:
                    a8:34:4e:c7:46:8b:09:6a:01:46:7d:f5:87:ca:5e:
                    86:5d:cc:a5:c4:fd:db:91:2e:a1:5b:2e:62:56:bc:
                    f1:bb:19:eb:4b:60:12:0c:1c:3c:6e:6f:9d:03:65:
                    4e:71:f3:35:35:57:c6:b9:3e:14:6b:f2:85:ed:78:
                    69:2e:78:e7:07:97:33:06:d5:db:00:8a:c6:af:d4:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:09:D9:87:69:3B:41:B1:1B:69:09:6A:2C:2F:34:84:46:34:4F:22
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1AnZh2k7QbEbaQlqLC80hEY0TyI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:43:48:78:46:bd:57:76:2b:2b:dc:3d:cf:58:1d:ab:a2:3f:
         06:64:68:65:3e:85:3e:0e:74:aa:31:b1:68:eb:1b:a9:0a:76:
         b8:a4:3b:2f:82:4f:af:98:07:36:94:a1:47:c0:40:11:b2:d1:
         2c:0e:47:89:cb:ed:eb:dc:43:9e:69:30:97:e9:4e:1e:53:1e:
         3c:dc:55:27:fa:67:26:2e:ee:d2:72:72:0b:ae:cf:d5:aa:e8:
         11:e3:19:58:b1:aa:ad:f8:3a:72:9b:d7:48:92:45:41:c6:dd:
         3e:97:7a:6d:f2:b9:88:41:72:74:6d:da:ff:bf:57:e7:c2:a1:
         6a:d9:8b:6c:32:ae:c3:78:8a:df:80:b4:a0:98:1b:cd:78:cb:
         7c:9f:bb:95:b1:21:c1:42:c6:45:8a:1f:7e:de:23:a5:cb:de:
         eb:e8:d1:83:88:87:f5:b2:00:09:ae:12:a1:a0:74:60:6d:95:
         7e:30:62:29:ec:cf:06:c8:fd:6a:4f:ff:9b:ef:01:8d:05:9d:
         83:5e:76:30:07:a6:66:0a:27:65:92:d0:b1:40:3a:61:40:48:
         10:f5:64:ed:40:2c:38:ac:2c:63:04:ad:67:dd:81:cb:80:c0:
         f4:2f:1e:66:b2:eb:1f:93:53:52:0b:8f:0d:ad:f8:d3:db:d7:
         5c:55:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:01 2025 by rpki-client