This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2-RO9o-Zfno-QObtiUbtxZ9niXE.roa
File:                     2-RO9o-Zfno-QObtiUbtxZ9niXE.roa (raw, json)
Hash identifier:          GbeEO6reF1gl+p236REvb82fManCNV/yTxPDSVayjbI=
Subject key identifier:   DB:E4:4E:F6:8F:99:7E:7A:3E:40:E6:ED:89:46:ED:C5:9F:67:89:71
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       067E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2-RO9o-Zfno-QObtiUbtxZ9niXE.roa
Signing time:             Mon 01 Dec 2025 02:06:04 +0000
ROA not before:           Mon 01 Dec 2025 02:06:04 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        118.159.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:06:04 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=DBE44EF68F997E7A3E40E6ED8946EDC59F678971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:67:3b:e8:75:ec:51:24:ce:fb:a1:d4:d5:
                    13:78:2d:22:e8:2b:3e:f1:62:9e:c2:c7:60:09:aa:
                    ca:b1:3c:e2:e6:13:40:07:e8:c9:6a:13:33:27:0a:
                    72:63:ae:63:12:e5:73:e6:2f:dd:ae:10:cf:c6:ee:
                    74:8d:09:9d:a8:ba:4a:9f:cb:80:4b:90:76:0a:40:
                    fe:76:c2:6f:9c:e8:a6:d3:c6:17:32:0b:bc:e5:78:
                    fe:7a:4e:92:a4:93:e7:ce:af:66:70:20:52:6b:d4:
                    eb:fd:d9:15:b5:0c:8a:44:71:07:df:d6:49:a4:22:
                    7b:86:58:30:e6:09:e4:6e:ba:be:fe:54:79:fb:17:
                    8f:83:77:e3:d6:e6:48:11:3a:23:3b:b4:2d:ca:80:
                    8e:7e:bb:4d:4f:f2:db:68:fb:f3:fb:04:e0:9a:ac:
                    6e:db:b3:e4:92:1c:2b:c9:e4:07:b7:39:1e:b3:b9:
                    ae:7b:79:80:dd:af:d8:ec:44:47:cd:1a:f2:d4:17:
                    38:47:22:82:80:87:fa:07:ea:ae:a9:17:8d:fe:41:
                    aa:4c:da:94:e6:03:3f:27:25:f1:26:82:0c:69:df:
                    aa:6b:9b:84:19:6c:e3:9e:24:26:02:36:9c:76:6f:
                    b9:6f:99:61:3d:f4:ea:70:e9:39:b9:37:48:71:a2:
                    b2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:4E:F6:8F:99:7E:7A:3E:40:E6:ED:89:46:ED:C5:9F:67:89:71
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2-RO9o-Zfno-QObtiUbtxZ9niXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:99:a5:be:90:aa:ea:9d:98:7d:cc:87:cf:f8:54:19:80:58:
         48:9e:3f:13:83:22:6f:5c:45:e4:94:b5:88:d0:26:82:9b:9e:
         60:a0:30:8d:26:4c:c8:3a:65:5d:cb:3e:44:f4:62:27:2e:46:
         fc:d1:ab:30:f2:97:64:0b:ee:7c:c2:94:2b:7e:aa:16:db:58:
         5a:eb:13:c7:38:b9:39:d6:61:ef:6a:67:63:75:ef:9c:c7:e6:
         9d:fc:65:57:61:7f:a9:27:43:95:22:92:8d:9f:8f:49:35:09:
         0e:f6:1d:99:09:82:08:c8:d9:72:74:f6:26:2b:d8:1c:d0:45:
         55:12:e9:d8:0c:c7:d9:75:20:0f:2d:a5:eb:36:ec:a6:ef:86:
         2f:5b:2e:bd:ca:42:17:d7:d0:bd:64:a6:3b:96:c6:34:66:9b:
         16:d2:67:12:4c:3b:11:d8:32:7e:f6:8d:da:0c:33:09:19:6d:
         2b:1a:8a:4e:b4:f8:b6:d8:75:f9:1a:c4:53:ca:7b:7e:eb:2b:
         7e:4c:5a:b6:f2:f3:27:06:1c:2d:0f:dd:73:e5:20:a6:fc:f8:
         d6:9e:1b:c0:91:28:65:6a:5c:b9:39:ba:06:c5:36:ee:ad:86:
         02:96:4f:c1:92:91:59:fa:3b:29:73:2c:ea:cb:bd:6a:01:79:
         4f:f2:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:56 2025 by rpki-client