This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/56A-vbtKxU1F9GzpDrL-Dnkmqoo.roa
File:                     56A-vbtKxU1F9GzpDrL-Dnkmqoo.roa (raw, json)
Hash identifier:          FkCfOl+E7hTECMyWDLkvGHggBFKH1PxK7A7ZCtxwODc=
Subject key identifier:   E7:A0:3E:BD:BB:4A:C5:4D:45:F4:6C:E9:0E:B2:FE:0E:79:26:AA:8A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0714
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/56A-vbtKxU1F9GzpDrL-Dnkmqoo.roa
Signing time:             Mon 01 Dec 2025 02:29:54 +0000
ROA not before:           Mon 01 Dec 2025 02:29:54 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        222.225.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:29:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E7A03EBDBB4AC54D45F46CE90EB2FE0E7926AA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:59:36:18:cd:c8:58:5e:92:d2:48:be:70:
                    45:7d:d1:8d:e6:ad:43:11:7b:c3:34:10:3d:3c:3d:
                    1f:b2:40:16:fe:6f:59:a5:46:6f:70:79:d4:b8:21:
                    01:5e:32:32:aa:63:f5:25:17:02:67:a7:4f:da:81:
                    ec:74:10:90:ca:06:77:34:6b:a4:14:4b:42:96:47:
                    00:1c:3a:69:0d:a3:fe:5e:ed:ef:c8:cb:e9:21:4a:
                    17:2c:37:27:a1:d4:39:50:a6:d6:e2:d0:8b:a9:a3:
                    92:15:f3:e9:df:a6:4c:d0:3d:4a:85:1f:48:11:a8:
                    97:07:e0:a5:e3:36:2e:96:13:68:39:f9:88:20:5c:
                    ad:e7:b3:6b:90:bc:f7:1f:2f:8e:1e:78:ba:fc:af:
                    8c:9d:da:b5:65:4b:6c:be:68:20:59:90:72:c8:24:
                    41:11:28:5a:5f:a3:d0:38:ec:a2:cf:af:50:a7:e5:
                    18:89:8b:fb:ff:2f:33:7e:8a:47:ff:1e:fa:2b:56:
                    35:f4:a4:bd:1c:21:f9:22:14:a0:bc:58:e3:1e:19:
                    a7:45:d5:f0:d8:f7:5a:05:19:b4:5a:ae:f5:2b:5b:
                    e0:07:39:1e:c5:94:d1:3b:e0:80:8b:79:af:7a:6d:
                    81:47:f4:e0:43:26:57:1a:da:97:2a:03:37:e2:92:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:3E:BD:BB:4A:C5:4D:45:F4:6C:E9:0E:B2:FE:0E:79:26:AA:8A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/56A-vbtKxU1F9GzpDrL-Dnkmqoo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:ea:2a:d4:cd:13:e7:ed:03:2a:f5:0c:9a:fd:c0:89:9c:
         e0:4c:c6:c3:da:b0:77:27:f8:bf:de:70:8c:2b:b0:fb:30:cd:
         9b:21:0e:61:c1:01:44:e0:c0:f4:ed:74:a0:df:f7:8b:ef:19:
         3d:11:a6:f6:64:b8:5f:78:28:92:46:ef:a8:45:92:25:68:62:
         a2:4f:66:79:59:7d:b3:b9:73:14:b0:c8:c8:7f:55:f7:8d:63:
         dc:c8:6d:ac:10:42:49:68:dd:d1:2d:09:1d:7e:5b:fc:74:60:
         3e:ff:c0:3f:43:92:a5:25:18:0d:d2:28:b4:54:a4:fb:8f:02:
         aa:fa:8b:eb:47:df:40:b7:61:bb:d3:cd:7f:28:42:77:4b:2b:
         ac:5f:69:95:4a:02:01:92:80:ee:15:07:d6:2d:7c:97:b3:1f:
         63:1e:5b:6d:c9:7c:47:21:76:c7:79:8d:30:86:51:e6:84:7d:
         d5:a5:91:1c:8a:19:4b:9f:83:c3:03:97:3e:6f:f7:e5:d4:77:
         df:66:80:85:e4:1a:09:69:fa:7e:88:68:15:24:be:fc:8b:cd:
         e3:99:88:d0:a8:28:3a:97:3b:33:aa:f4:21:1c:d3:11:53:8f:
         a4:5b:77:de:4a:0d:41:93:94:95:1c:b2:71:47:a9:0a:af:90:
         b7:48:64:bd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MjI5NTRaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU3QTAzRUJEQkI0QUM1
NEQ0NUY0NkNFOTBFQjJGRTBFNzkyNkFBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYOlk2GM3IWF6S0ki+cEV90Y3mrUMRe8M0ED08PR+yQBb+b1ml
Rm9wedS4IQFeMjKqY/UlFwJnp0/agex0EJDKBnc0a6QUS0KWRwAcOmkNo/5e7e/I
y+khShcsNyeh1DlQptbi0Iupo5IV8+nfpkzQPUqFH0gRqJcH4KXjNi6WE2g5+Ygg
XK3ns2uQvPcfL44eeLr8r4yd2rVlS2y+aCBZkHLIJEERKFpfo9A47KLPr1Cn5RiJ
i/v/LzN+ikf/HvorVjX0pL0cIfkiFKC8WOMeGadF1fDY91oFGbRarvUrW+AHOR7F
lNE74ICLea96bYFH9OBDJlca2pcqAzfikp5HAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU56A+vbtKxU1F9GzpDrL+DnkmqoowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzU2QS12YnRLeFUxRjlHenBEckwtRG5rbXFvby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDe4TANBgkqhkiG9w0BAQsFAAOCAQEAK+jqKtTNE+ftAyr1DJr9wImc4EzG
w9qwdyf4v95wjCuw+zDNmyEOYcEBRODA9O10oN/3i+8ZPRGm9mS4X3gokkbvqEWS
JWhiok9meVl9s7lzFLDIyH9V941j3MhtrBBCSWjd0S0JHX5b/HRgPv/AP0OSpSUY
DdIotFSk+48CqvqL60ffQLdhu9PNfyhCd0srrF9plUoCAZKA7hUH1i18l7MfYx5b
bcl8RyF2x3mNMIZR5oR91aWRHIoZS5+DwwOXPm/35dR332aAheQaCWn6fohoFSS+
/IvN45mI0KgoOpc7M6r0IRzTEVOPpFt33koNQZOUlRyycUepCq+Qt0hkvQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:44 2025 by rpki-client