This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3BsgaQo4h1RPA6DzB3lKlp6GYC0.roa
File:                     3BsgaQo4h1RPA6DzB3lKlp6GYC0.roa (raw, json)
Hash identifier:          +3QPj1/ByabUPhTe8GR21Nc8jhTTmQtTtInVP6w9aD0=
Subject key identifier:   DC:1B:20:69:0A:38:87:54:4F:03:A0:F3:07:79:4A:96:9E:86:60:2D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       061A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3BsgaQo4h1RPA6DzB3lKlp6GYC0.roa
Signing time:             Mon 01 Dec 2025 01:45:59 +0000
ROA not before:           Mon 01 Dec 2025 01:45:59 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.15.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:45:59 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=DC1B20690A3887544F03A0F307794A969E86602D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:a2:51:5f:ba:3a:60:26:c1:92:a1:0b:bf:
                    74:28:6c:d5:8e:a2:1c:3e:2d:18:76:c1:f7:27:5b:
                    64:a1:ed:36:86:63:19:e7:9c:96:52:0f:d6:4f:ea:
                    85:50:1d:90:a2:07:a7:36:8b:2f:d5:a2:1a:c8:39:
                    9d:10:77:4a:7d:c1:53:65:b3:4d:cb:00:57:e0:62:
                    e7:5c:5c:7a:a1:55:a4:56:f5:d3:b4:85:ff:ec:eb:
                    90:f9:8d:1b:bd:09:2b:27:9a:48:96:7c:80:96:91:
                    ee:86:3e:1c:04:e2:b6:22:e5:ce:cd:d5:8a:d6:0a:
                    4d:4b:7c:93:b3:0a:3d:a2:9e:54:ad:97:57:a1:9e:
                    2a:29:b9:18:6d:26:1e:53:eb:7d:4d:95:88:be:d9:
                    87:a1:cc:4d:66:6f:75:27:5e:04:58:45:bc:c6:93:
                    37:07:0f:a0:33:d5:30:33:a0:d4:f2:86:f8:77:ed:
                    30:67:ef:63:c9:64:c4:d2:dd:f2:7e:ba:4a:0a:8a:
                    d0:13:aa:67:ab:a5:b6:75:a0:89:e2:6b:30:4c:94:
                    b9:60:75:0b:b8:1a:05:4e:26:11:69:df:90:82:97:
                    3e:56:a8:1f:3e:70:ba:16:e1:0c:32:a4:79:39:67:
                    ea:c9:ee:7b:f4:50:f2:63:0f:c7:b2:c6:c9:6a:98:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1B:20:69:0A:38:87:54:4F:03:A0:F3:07:79:4A:96:9E:86:60:2D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3BsgaQo4h1RPA6DzB3lKlp6GYC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.15.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         12:31:2f:9e:86:91:2a:91:fa:fa:7c:8d:4a:63:b1:fa:29:bc:
         9e:93:6c:27:fd:a0:d4:ec:e7:ee:4f:a1:f9:51:5e:71:d7:00:
         6b:22:d8:73:ae:54:a6:34:25:d1:60:97:c8:ce:64:e8:82:b4:
         d0:bb:0e:b4:18:61:3c:42:2c:a3:40:5b:aa:c9:00:0d:c6:7b:
         2e:1f:ed:87:68:73:2d:af:ce:63:16:ac:42:46:89:c4:b9:ef:
         7f:6c:d1:f5:42:99:0d:3b:72:63:2e:60:be:82:0c:af:0f:61:
         ce:f8:e6:89:47:b0:70:8a:cc:54:a3:1a:95:61:be:f5:76:a8:
         32:6f:2a:41:7c:6c:1a:22:1f:84:af:0a:b8:3d:97:9f:b4:7a:
         8b:aa:4d:94:2a:dc:76:90:b8:fd:9a:9c:a0:48:bd:b4:5b:09:
         28:ab:42:df:93:8c:da:60:1c:36:39:6a:a2:36:64:76:ab:5e:
         db:96:57:c5:d0:ea:98:16:70:1d:5f:44:41:36:b0:24:35:2f:
         2c:29:92:de:f4:7f:61:ca:3e:72:e8:9b:85:c3:89:00:a5:c5:
         c7:11:98:7d:61:7c:3c:37:0c:86:0e:23:06:38:ff:48:d1:5c:
         17:57:a8:d6:4d:dc:f8:e1:b7:b7:fc:c8:58:d8:36:b5:af:65:
         3a:9e:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:43 2025 by rpki-client