This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/27b9_uGJ301x_L6I1rC_A95-rSw.roa
File:                     27b9_uGJ301x_L6I1rC_A95-rSw.roa (raw, json)
Hash identifier:          av+7PwdI+4FXyt28Fw2XtZLUhAggB49zMMbdWnBQYB0=
Subject key identifier:   DB:B6:FD:FE:E1:89:DF:4D:71:FC:BE:88:D6:B0:BF:03:DE:7E:AD:2C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       068A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/27b9_uGJ301x_L6I1rC_A95-rSw.roa
Signing time:             Mon 01 Dec 2025 02:06:13 +0000
ROA not before:           Mon 01 Dec 2025 02:06:13 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        111.87.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:06:13 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=DBB6FDFEE189DF4D71FCBE88D6B0BF03DE7EAD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:62:ee:9f:21:37:37:a1:2a:1d:72:e3:72:
                    63:9b:71:a4:47:75:75:cf:78:38:41:8c:d0:aa:eb:
                    a2:4d:d2:5f:51:2a:f3:68:80:97:e8:26:5f:67:5c:
                    64:db:2b:df:7d:04:cf:e0:eb:30:e7:d6:2e:f7:8e:
                    59:69:a6:15:ab:d0:f6:4e:b7:48:bc:8f:f2:91:ab:
                    b4:3e:c2:f1:fb:a3:aa:86:65:8f:cc:7a:28:d7:44:
                    4f:54:24:84:e0:08:af:2a:41:de:91:54:fa:9a:94:
                    c5:b8:4d:89:f9:a8:53:d8:1a:00:c5:88:4f:8c:10:
                    a8:fa:12:f7:c2:e0:f7:36:55:5c:fb:84:86:7b:a5:
                    9a:b7:4a:73:c2:05:77:a9:cb:7e:9c:bc:ee:0a:1e:
                    c7:9f:f8:2f:20:3e:c6:7b:b8:29:cd:9d:f8:61:1f:
                    b5:27:a1:8c:ba:78:9d:b5:df:d4:bf:25:a6:ec:ae:
                    4d:67:f4:c8:91:20:03:31:a3:1e:4e:e0:94:11:85:
                    8e:7c:6a:18:cb:13:ea:f0:b9:12:1e:0e:e8:44:42:
                    e9:45:c7:aa:77:03:3f:d9:8c:01:5a:b5:21:d5:6c:
                    6f:0c:5b:f8:a7:f6:d4:e7:a4:9f:1c:3c:65:58:cc:
                    16:da:5a:45:36:2f:76:5d:01:8c:53:40:cb:73:a0:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B6:FD:FE:E1:89:DF:4D:71:FC:BE:88:D6:B0:BF:03:DE:7E:AD:2C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/27b9_uGJ301x_L6I1rC_A95-rSw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.87.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         87:9e:0c:85:41:fa:3c:ac:f0:64:65:72:51:66:13:05:43:67:
         d4:17:e9:c2:c2:db:f1:1e:5d:51:19:00:96:8d:20:3b:4e:59:
         a3:71:e5:9d:30:0f:9a:01:22:ae:0b:3a:98:1b:df:f6:48:91:
         5a:cb:e6:f1:4e:59:05:01:41:84:01:c7:fd:49:ee:5d:7b:a9:
         30:0b:40:c6:7e:bf:d1:d1:42:ed:43:5d:b6:36:d8:b5:ef:21:
         6e:fc:b3:5e:16:ec:b1:68:eb:54:21:bd:ac:4c:7f:2c:d4:17:
         ca:d2:42:8a:c5:ab:9e:75:34:58:b7:45:6f:91:32:66:30:e6:
         84:fd:25:68:fd:58:5f:04:18:ce:0f:45:0c:2e:9b:51:32:6d:
         e8:cc:0a:39:22:d5:b9:27:7b:e9:fd:9d:3a:1a:ab:cd:ce:89:
         60:46:b4:21:5e:b3:4e:9d:35:68:c8:67:cc:13:f9:bc:7e:66:
         55:b1:74:f6:b8:e5:2d:47:30:ea:b7:3c:13:93:8f:ef:05:d1:
         a5:c3:50:f3:db:27:e3:a2:30:08:f3:e0:91:7f:49:2f:69:4d:
         22:04:e6:c6:09:f2:07:62:95:49:e8:a4:59:b7:f8:a1:10:48:
         df:d0:47:aa:5c:1a:15:52:63:01:65:49:dd:c3:68:77:e1:eb:
         f4:ba:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:35 2025 by rpki-client