This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3LKk3IARKv6HT5pDH4Ndy1-QI2A.roa
File:                     3LKk3IARKv6HT5pDH4Ndy1-QI2A.roa (raw, json)
Hash identifier:          b5N9onNQsnfG4uNOMi08IXKeSc5rJSnC2OSxP56t5C0=
Subject key identifier:   DC:B2:A4:DC:80:11:2A:FE:87:4F:9A:43:1F:83:5D:CB:5F:90:23:60
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06E1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3LKk3IARKv6HT5pDH4Ndy1-QI2A.roa
Signing time:             Mon 01 Dec 2025 02:21:56 +0000
ROA not before:           Mon 01 Dec 2025 02:21:56 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.172.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:21:56 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=DCB2A4DC80112AFE874F9A431F835DCB5F902360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:ef:33:cc:31:d4:d7:8c:78:f2:b1:34:04:
                    23:44:02:de:51:67:d3:32:51:b9:98:cc:ee:b6:de:
                    14:57:ec:c2:5c:8d:3a:5a:a0:50:3e:fa:3e:69:81:
                    11:bd:a1:27:75:d0:7d:05:39:6e:3e:3d:02:27:63:
                    ba:b1:c5:5c:dd:dc:55:32:c1:18:f3:1e:92:35:c4:
                    ad:15:74:a7:d8:d0:d7:7f:32:08:b7:34:42:6d:0b:
                    a6:4c:c2:d8:b8:ad:8b:da:c7:36:74:46:2b:4b:fb:
                    e8:41:c2:f7:e4:e0:05:5a:50:54:7a:99:87:60:6d:
                    21:1e:53:09:00:62:58:f9:97:55:35:10:c2:bd:71:
                    8a:63:61:88:f7:04:42:06:11:17:f5:90:38:d7:48:
                    89:ec:59:29:15:4c:21:aa:6b:85:f5:fb:d6:25:2b:
                    e8:1e:b7:37:1c:98:a9:1a:9a:fa:31:9c:ef:db:6c:
                    3c:27:df:8e:ea:de:99:2d:33:d1:c4:23:6f:81:2a:
                    39:1d:0a:66:0f:39:07:f0:5e:a9:4b:6a:88:e0:ba:
                    79:15:5e:86:e7:7d:79:bc:e8:fe:b2:02:08:8f:67:
                    15:81:2b:0a:ae:83:86:70:9f:54:46:b9:9f:16:e7:
                    53:6a:9c:83:18:02:fd:51:36:45:76:53:d8:39:54:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B2:A4:DC:80:11:2A:FE:87:4F:9A:43:1F:83:5D:CB:5F:90:23:60
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3LKk3IARKv6HT5pDH4Ndy1-QI2A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.172.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:20:3d:78:fb:cf:18:72:2f:4b:db:d4:b5:54:40:1c:d0:a1:
         64:e4:33:0d:b6:2a:ea:e6:7e:9b:50:82:fb:9e:ce:ff:41:84:
         b1:46:49:55:60:c2:09:e5:d6:a6:c0:7c:3d:fc:1c:91:43:c6:
         ea:49:87:16:20:8a:a5:f0:b1:39:92:98:83:ab:c7:14:c7:35:
         f7:41:ba:b6:55:6f:03:e9:e6:30:77:93:29:a9:6e:59:14:41:
         42:53:f0:5f:ef:44:da:05:42:4d:5a:f9:d4:f7:ce:24:9f:81:
         68:cf:9c:b5:ab:c9:97:fd:9d:21:32:ea:b9:c1:3f:be:76:96:
         49:1b:20:19:c7:9d:a5:6f:79:a4:2b:8b:02:96:1a:2c:e4:88:
         7e:ff:b2:a2:0d:d9:6b:e7:c1:00:a9:ce:43:69:60:2c:12:55:
         08:ba:9b:08:4a:21:9e:aa:d0:ce:05:34:08:cc:e6:42:45:e4:
         ed:2b:54:e6:d6:2b:2c:c1:43:f3:e0:72:50:50:ce:1d:40:d6:
         73:2b:a2:21:bf:6a:85:71:a0:c1:5e:cd:5c:61:23:68:ab:b2:
         c2:7e:09:87:ee:f5:80:d8:d0:98:31:66:86:fd:f3:c4:62:80:
         0e:f5:de:8b:ca:7f:f8:cf:6d:b1:9d:b3:f9:b8:73:b8:7a:af:
         c2:f1:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:36 2025 by rpki-client