This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5JJU9yDwIy1SlPoPB6QVUwp0Qds.roa
File:                     5JJU9yDwIy1SlPoPB6QVUwp0Qds.roa (raw, json)
Hash identifier:          u9Ae0cvKilYEfREuUhd0eBUKnF+Xgogy14HqaqOHBmc=
Subject key identifier:   E4:92:54:F7:20:F0:23:2D:52:94:FA:0F:07:A4:15:53:0A:74:41:DB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06CB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5JJU9yDwIy1SlPoPB6QVUwp0Qds.roa
Signing time:             Mon 01 Dec 2025 02:17:54 +0000
ROA not before:           Mon 01 Dec 2025 02:17:54 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.228.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:17:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E49254F720F0232D5294FA0F07A415530A7441DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:f6:b3:c2:d5:22:98:44:0f:c7:79:14:88:
                    99:6d:e2:61:1d:cc:11:db:1a:8b:e0:4e:a2:31:ae:
                    8c:50:62:52:1c:b2:66:36:3f:48:9f:35:99:e1:cb:
                    e0:c7:9c:5c:45:53:0b:1e:e1:c5:ae:bb:a6:4e:be:
                    8d:24:52:3d:bd:25:d0:be:60:7b:26:e1:c0:d5:b3:
                    58:82:53:d7:1e:bf:ae:d1:c3:4f:90:77:fb:80:0c:
                    3e:61:a2:76:b9:5e:63:a3:cf:d4:87:3a:1a:0a:62:
                    09:61:ae:af:73:2d:bd:66:ab:ab:8b:09:a8:0d:29:
                    d5:34:16:45:69:85:51:bd:bc:f4:f1:bc:2a:d3:e0:
                    81:4e:99:69:7d:fb:2c:11:26:0b:6d:cf:40:72:c7:
                    ca:46:7e:59:e2:6b:b5:30:86:2c:08:e3:18:9b:40:
                    f6:42:db:0b:e4:77:a2:7a:b4:97:e3:eb:eb:ef:b0:
                    66:6e:fb:cf:6a:52:50:2c:bd:84:68:3e:57:1f:db:
                    aa:85:38:c5:7b:03:10:7b:27:ea:6f:3b:71:36:0d:
                    eb:52:10:15:34:76:ff:c8:22:4c:fd:56:c4:79:5e:
                    b0:e1:fe:b8:34:08:3b:fa:cd:32:24:e5:9f:cb:58:
                    77:25:a9:db:ef:82:18:2f:d1:1a:9f:86:68:b4:3d:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:92:54:F7:20:F0:23:2D:52:94:FA:0F:07:A4:15:53:0A:74:41:DB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5JJU9yDwIy1SlPoPB6QVUwp0Qds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:38:03:e2:e0:c2:89:19:98:b2:e7:67:33:2e:bf:82:70:
         1d:a5:cf:92:06:82:69:cb:2a:54:b0:8d:8c:ea:3b:63:f5:73:
         f9:7b:53:d1:f9:42:f9:d8:c7:74:39:f1:5b:b9:e2:a4:42:76:
         e7:6e:21:48:2a:d2:0d:a6:13:c0:ac:a7:cf:3c:59:ee:0d:3d:
         cb:04:e6:97:4a:40:1d:4d:91:1c:a7:03:e5:58:45:04:94:40:
         49:60:6f:74:c9:a0:34:91:ae:53:2e:67:a9:56:86:5a:a5:fb:
         11:86:62:0c:fe:6b:cf:3c:0c:fa:08:76:1d:89:44:11:c6:08:
         32:13:6d:78:fe:d1:e4:8c:1f:a0:53:22:1a:20:9b:71:33:06:
         7c:ef:b2:df:59:c0:3c:27:59:26:4e:6f:20:1e:02:b9:73:f9:
         1a:9d:4e:81:ee:3f:bb:fe:8c:75:b1:f2:ce:55:d2:d8:3c:5b:
         0f:7a:63:e0:a3:9f:c6:b8:3d:37:b8:26:f6:30:c7:5f:20:8a:
         03:93:7d:b8:23:24:2e:48:84:79:4c:7c:58:90:22:61:64:ec:
         88:c8:ee:25:67:63:1a:02:49:df:c3:36:53:77:d9:99:f0:20:
         8c:a3:6b:e4:ab:50:d9:dd:44:17:17:9c:c1:cb:df:3f:7d:c6:
         b8:b4:cc:72
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MjE3NTRaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU0OTI1NEY3MjBGMDIz
MkQ1Mjk0RkEwRjA3QTQxNTUzMEE3NDQxREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpO/azwtUimEQPx3kUiJlt4mEdzBHbGovgTqIxroxQYlIcsmY2
P0ifNZnhy+DHnFxFUwse4cWuu6ZOvo0kUj29JdC+YHsm4cDVs1iCU9cev67Rw0+Q
d/uADD5hona5XmOjz9SHOhoKYglhrq9zLb1mq6uLCagNKdU0FkVphVG9vPTxvCrT
4IFOmWl9+ywRJgttz0Byx8pGflnia7UwhiwI4xibQPZC2wvkd6J6tJfj6+vvsGZu
+89qUlAsvYRoPlcf26qFOMV7AxB7J+pvO3E2DetSEBU0dv/IIkz9VsR5XrDh/rg0
CDv6zTIk5Z/LWHclqdvvghgv0Rqfhmi0PRPtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU5JJU9yDwIy1SlPoPB6QVUwp0QdswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzVKSlU5eUR3SXkxU2xQb1BCNlFWVXdwMFFkcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbS5EAwDQYJKoZIhvcNAQELBQADggEBAG/VOAPi4MKJGZiy52czLr+CcB2l
z5IGgmnLKlSwjYzqO2P1c/l7U9H5QvnYx3Q58Vu54qRCduduIUgq0g2mE8Csp888
We4NPcsE5pdKQB1NkRynA+VYRQSUQElgb3TJoDSRrlMuZ6lWhlql+xGGYgz+a888
DPoIdh2JRBHGCDITbXj+0eSMH6BTIhogm3EzBnzvst9ZwDwnWSZObyAeArlz+Rqd
ToHuP7v+jHWx8s5V0tg8Ww96Y+Cjn8a4PTe4JvYwx18gigOTfbgjJC5IhHlMfFiQ
ImFk7IjI7iVnYxoCSd/DNlN32ZnwIIyja+SrUNndRBcXnMHL3z99xri0zHI=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:32 2025 by rpki-client