This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5Qnl84z-2v7AcFTUA0PuC7bRE3Q.roa
File:                     5Qnl84z-2v7AcFTUA0PuC7bRE3Q.roa (raw, json)
Hash identifier:          WHNE9NjmBxdHdvHfcNln7Ku62+j9kNqBXuvAKayJ2As=
Subject key identifier:   E5:09:E5:F3:8C:FE:DA:FE:C0:70:54:D4:03:43:EE:0B:B6:D1:13:74
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0609
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5Qnl84z-2v7AcFTUA0PuC7bRE3Q.roa
Signing time:             Mon 01 Dec 2025 01:45:48 +0000
ROA not before:           Mon 01 Dec 2025 01:45:48 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.9.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:45:48 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E509E5F38CFEDAFEC07054D40343EE0BB6D11374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:0b:84:0c:cc:37:e5:46:de:76:ed:12:04:
                    98:bf:7d:e0:bc:c5:fa:a3:0d:9b:86:34:0c:eb:e6:
                    c9:7a:d3:e7:f9:fb:6b:62:42:04:4a:13:54:4b:70:
                    f2:10:89:0f:a8:c7:1c:d3:5b:d9:e3:c5:25:fb:3d:
                    6b:ec:b6:4b:ec:d9:38:91:3c:61:df:d1:e5:7b:f7:
                    e4:58:32:6b:16:44:fc:91:7a:4e:32:37:55:8f:6c:
                    2f:b0:bf:50:37:b8:06:3d:97:e7:01:e4:3c:ab:e1:
                    d5:c8:47:a0:76:1e:c5:41:26:a8:c5:70:06:b9:19:
                    12:e8:ef:f0:28:db:b0:c5:58:35:b3:78:d9:ac:2d:
                    64:1b:9d:a6:c3:9a:5a:ea:9a:77:88:04:ea:61:ae:
                    c7:93:6b:34:cb:65:4c:83:f1:d8:ce:12:7d:06:74:
                    1c:e7:88:c0:72:e1:a7:9d:5a:0f:ca:b1:f6:fc:2b:
                    0d:1f:4f:18:3e:ac:34:c9:5f:73:06:6e:5b:1a:1e:
                    f4:ee:1e:d2:bb:52:62:9d:92:3a:42:ce:34:97:16:
                    66:ba:e8:74:a1:ae:af:ff:45:18:3b:16:99:5f:d6:
                    bd:99:20:4c:28:78:18:2b:2d:c0:c8:4d:4a:e8:84:
                    48:4f:01:d0:1c:b6:bd:4e:cd:b2:74:08:16:4f:1e:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:E5:F3:8C:FE:DA:FE:C0:70:54:D4:03:43:EE:0B:B6:D1:13:74
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5Qnl84z-2v7AcFTUA0PuC7bRE3Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:b9:6c:65:f5:e6:a8:28:70:37:f7:bd:d5:9e:94:af:53:b3:
         00:83:5f:be:d1:e1:e2:68:d7:7d:16:8b:14:eb:a8:3b:26:a1:
         4b:2c:ab:13:92:34:0d:ba:03:9e:c8:1d:80:b6:49:4a:04:11:
         a0:d0:bd:46:a4:88:5e:3e:7e:41:6b:f2:2f:69:71:41:f1:ac:
         7d:12:75:80:d2:f8:1a:41:5c:53:ef:e2:be:1d:06:39:a9:b7:
         2c:0a:77:79:63:77:b1:34:18:ee:ca:ab:24:7f:a2:4f:a3:fd:
         a9:c6:4a:44:5b:1d:85:60:37:88:23:aa:60:67:31:f5:95:9a:
         73:e2:3e:24:82:86:65:c1:18:9a:9e:38:dc:6d:7e:2e:08:d3:
         0f:28:7b:ea:5d:ce:0e:56:b8:ac:05:54:af:7d:e4:3f:94:e9:
         29:3b:e8:74:58:71:11:c3:5a:f1:c6:1c:8e:07:27:5b:3c:05:
         16:ef:95:ee:d0:55:2d:e1:35:29:4e:ac:82:47:dd:88:56:fd:
         3e:a3:4a:a5:cc:f3:25:41:86:c9:a0:46:e5:70:6b:2d:c9:28:
         d0:2d:21:37:e0:d5:22:64:17:eb:4f:0e:e6:ca:86:a6:7d:92:
         a2:13:c5:52:f3:04:bc:9f:93:7f:20:dc:15:ad:a9:a7:a9:cf:
         2e:4a:28:16
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MTQ1NDhaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU1MDlFNUYzOENGRURB
RkVDMDcwNTRENDAzNDNFRTBCQjZEMTEzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDihwuEDMw35Ubedu0SBJi/feC8xfqjDZuGNAzr5sl60+f5+2ti
QgRKE1RLcPIQiQ+oxxzTW9njxSX7PWvstkvs2TiRPGHf0eV79+RYMmsWRPyRek4y
N1WPbC+wv1A3uAY9l+cB5Dyr4dXIR6B2HsVBJqjFcAa5GRLo7/Ao27DFWDWzeNms
LWQbnabDmlrqmneIBOphrseTazTLZUyD8djOEn0GdBzniMBy4aedWg/Ksfb8Kw0f
Txg+rDTJX3MGblsaHvTuHtK7UmKdkjpCzjSXFma66HShrq//RRg7Fplf1r2ZIEwo
eBgrLcDITUrohEhPAdActr1OzbJ0CBZPHhmVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU5Qnl84z+2v7AcFTUA0PuC7bRE3QwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzVRbmw4NHotMnY3QWNGVFVBMFB1QzdiUkUzUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHTCb4wDQYJKoZIhvcNAQELBQADggEBAK25bGX15qgocDf3vdWelK9TswCD
X77R4eJo130WixTrqDsmoUssqxOSNA26A57IHYC2SUoEEaDQvUakiF4+fkFr8i9p
cUHxrH0SdYDS+BpBXFPv4r4dBjmptywKd3ljd7E0GO7KqyR/ok+j/anGSkRbHYVg
N4gjqmBnMfWVmnPiPiSChmXBGJqeONxtfi4I0w8oe+pdzg5WuKwFVK995D+U6Sk7
6HRYcRHDWvHGHI4HJ1s8BRbvle7QVS3hNSlOrIJH3YhW/T6jSqXM8yVBhsmgRuVw
ay3JKNAtITfg1SJkF+tPDubKhqZ9kqITxVLzBLyfk38g3BWtqaepzy5KKBY=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:56 2025 by rpki-client