This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4CtPFHpcHuk8YwcXo17DUZ5Eg5o.roa
File:                     4CtPFHpcHuk8YwcXo17DUZ5Eg5o.roa (raw, json)
Hash identifier:          DKuy4Z5I57GDqsLUpPh98211+/V4XJSTg8Q8BLIncXk=
Subject key identifier:   E0:2B:4F:14:7A:5C:1E:E9:3C:63:07:17:A3:5E:C3:51:9E:44:83:9A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05F9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4CtPFHpcHuk8YwcXo17DUZ5Eg5o.roa
Signing time:             Mon 01 Dec 2025 01:42:07 +0000
ROA not before:           Mon 01 Dec 2025 01:42:07 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:42:07 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E02B4F147A5C1EE93C630717A35EC3519E44839A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:89:64:90:1f:60:b2:20:56:dd:89:70:54:
                    72:d7:d2:28:4b:9a:13:41:11:49:f5:ec:9a:8a:64:
                    d0:99:1c:b3:dd:c7:f7:d5:a6:15:77:fa:37:42:4c:
                    06:5b:de:a9:cf:3c:8a:8b:42:f9:13:fe:e1:95:a0:
                    a6:71:0d:05:bd:86:41:03:ac:46:d9:9b:50:ba:e6:
                    a6:25:53:78:5e:58:fc:0f:56:84:33:32:97:8a:4c:
                    62:f7:e6:fa:8b:0b:e3:f8:a4:fb:2f:00:c9:29:07:
                    ed:54:f0:32:36:aa:53:e6:79:32:b7:be:35:2a:dc:
                    e9:e7:67:82:4d:12:3b:ee:62:4d:eb:a8:85:c8:0f:
                    d9:8c:68:51:6a:5a:04:2e:69:a7:9b:4a:b8:79:a9:
                    3e:9a:5f:fe:44:f6:2b:21:8c:54:7e:7b:d5:45:2d:
                    bf:df:05:1e:1d:cf:d7:21:61:24:7a:b9:45:3f:90:
                    01:17:a4:04:05:3d:15:b7:42:72:b9:8f:a5:af:f3:
                    f8:a5:17:c3:24:f6:45:b6:28:a7:76:f4:ad:c9:f5:
                    57:74:86:d9:5d:7a:fc:70:41:aa:a6:06:7e:6d:12:
                    96:dc:ed:f1:da:65:8f:4c:d6:61:62:e5:dc:2d:81:
                    46:36:4b:20:d1:d2:bf:32:c3:eb:f9:26:fe:74:c7:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:4F:14:7A:5C:1E:E9:3C:63:07:17:A3:5E:C3:51:9E:44:83:9A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4CtPFHpcHuk8YwcXo17DUZ5Eg5o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:b5:19:6d:7d:37:6e:73:ad:e2:bb:65:33:e7:28:49:cd:49:
         3e:18:ff:a3:d4:92:cb:02:60:73:fd:c8:19:91:80:32:15:3c:
         51:18:ab:30:75:cb:64:24:df:6d:57:0f:4c:b0:b6:ad:12:a6:
         60:c3:f0:d2:1b:bd:c1:95:ef:42:fe:3c:12:ff:0e:ab:85:de:
         b2:77:31:d4:3d:7e:30:01:f9:28:7b:27:b8:42:01:27:cf:83:
         94:c7:b5:84:c2:51:3f:e2:df:4b:ed:35:13:a5:75:86:42:6f:
         fd:4c:9f:b8:fd:6d:5a:9c:32:3f:68:6c:01:99:ce:38:39:32:
         24:6d:bb:3f:6b:e4:9d:bd:08:71:cf:4e:84:62:63:74:dc:c8:
         77:aa:8d:ac:b7:74:76:cb:03:45:5d:8a:b9:70:07:62:d8:b8:
         4c:54:98:0c:24:81:81:40:dd:a0:f9:99:8d:ad:c2:6f:fc:c7:
         2a:c6:58:a8:32:64:5a:f4:d5:43:c7:ca:40:a5:32:30:44:19:
         13:88:e3:ab:45:b9:c4:b6:2b:1a:4d:b1:92:a4:19:69:77:8f:
         06:ba:9d:ac:05:79:5f:18:08:ab:0f:69:ce:33:72:fd:ca:81:
         87:f7:2a:3b:88:37:75:05:20:91:36:e6:f9:e5:68:70:e8:72:
         c7:0f:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:37 2025 by rpki-client