This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2kbCTefQXpm4sTM7qMQUzGq-lZY.roa
File:                     2kbCTefQXpm4sTM7qMQUzGq-lZY.roa (raw, json)
Hash identifier:          WJADvm4jwz9cuFI9wXOiNIXEPZJ/GZ7yoiS6G9ICoxI=
Subject key identifier:   DA:46:C2:4D:E7:D0:5E:99:B8:B1:33:3B:A8:C4:14:CC:6A:BE:95:96
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0668
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2kbCTefQXpm4sTM7qMQUzGq-lZY.roa
Signing time:             Mon 01 Dec 2025 01:58:13 +0000
ROA not before:           Mon 01 Dec 2025 01:58:13 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:58:13 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=DA46C24DE7D05E99B8B1333BA8C414CC6ABE9596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9a:8e:65:5e:45:04:b2:43:25:bb:c2:a9:aa:
                    15:69:a3:5d:1e:fc:74:ee:79:6c:2c:78:c7:a2:80:
                    7f:cd:73:f0:45:e0:29:f5:ff:b5:8d:33:d8:b0:82:
                    db:11:63:88:fd:50:f4:ec:19:e0:ed:ee:20:ae:10:
                    e5:fb:a9:82:a9:a6:69:8b:f6:74:bf:a8:7d:16:67:
                    96:30:5e:32:3f:05:1a:3a:ff:ef:e7:01:c1:1e:f8:
                    1e:8b:62:ea:4c:14:c2:35:de:c2:57:5d:75:8a:6c:
                    9a:39:6b:fd:2d:37:56:a9:82:3d:91:af:5c:c9:4d:
                    7f:bd:88:52:e6:71:ad:ab:9f:e4:bf:c0:09:fd:26:
                    7e:7c:2f:56:fd:88:fc:11:99:39:bd:f6:d6:9f:86:
                    4b:a1:00:64:e7:db:c1:42:8d:f2:de:1e:41:a7:09:
                    59:56:b8:88:ea:1b:87:68:5c:e4:60:03:88:73:6d:
                    58:a5:66:5e:ad:b3:67:aa:a5:9c:0f:41:b4:1f:0a:
                    e4:03:84:b0:33:f6:5b:b0:f9:3a:d3:5d:f3:01:bc:
                    e1:a2:98:f1:7d:24:30:8a:bd:8c:de:ae:7a:6a:07:
                    e3:20:1d:5b:96:95:9d:c0:55:d7:ed:74:2e:61:bb:
                    0e:08:c4:52:db:61:0f:11:b3:78:26:12:82:c1:5f:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:46:C2:4D:E7:D0:5E:99:B8:B1:33:3B:A8:C4:14:CC:6A:BE:95:96
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2kbCTefQXpm4sTM7qMQUzGq-lZY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:2f:59:28:bd:8a:3f:0f:ea:98:29:8b:fe:e6:cd:bb:56:d7:
         e1:75:5d:34:6f:ec:32:53:3b:a6:de:b7:a4:2f:c9:d6:0d:17:
         96:ad:0e:f3:5b:95:3a:69:04:ed:42:d4:49:23:37:76:f8:9a:
         ec:be:d4:92:45:ee:1a:37:d3:3a:96:28:47:d2:76:bc:a6:fe:
         c6:52:0e:40:d1:b1:6f:2d:f9:87:b7:34:8e:ef:59:0b:38:c4:
         a4:13:db:35:37:a9:7c:cf:7b:8b:1f:51:76:4f:ae:fc:14:ae:
         01:87:43:02:bc:c3:66:3c:c6:95:8f:a1:e0:bb:8f:d4:03:7d:
         9f:66:25:4e:6d:6d:cd:f9:9c:21:ce:d8:54:d0:27:48:20:2f:
         4c:62:9d:7d:db:0a:5a:37:d0:7b:74:ea:84:08:a9:9a:c7:3d:
         f2:91:12:28:df:4b:35:0e:7e:29:2b:50:e6:15:cf:cb:26:16:
         28:d7:41:7a:0f:0b:a6:59:b6:06:3d:22:c2:08:f1:3e:d3:8c:
         b8:91:d1:47:c1:ae:f8:21:b4:2c:76:21:bb:be:7b:95:02:dc:
         31:6e:26:fa:bc:b5:76:31:ce:7d:42:5a:48:75:3b:91:be:24:
         c3:1d:36:3b:9e:46:e0:5f:6b:69:3f:e4:80:a8:8d:e8:1c:6e:
         fc:43:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:55 2025 by rpki-client