This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5UCDIkPPdE5CY-EDgQQ6PryGGI4.roa
File:                     5UCDIkPPdE5CY-EDgQQ6PryGGI4.roa (raw, json)
Hash identifier:          IIR11SKlyuS2MxbTEnVzpEE/ok5R4CdGGZUM8nMFYPA=
Subject key identifier:   E5:40:83:22:43:CF:74:4E:42:63:E1:03:81:04:3A:3E:BC:86:18:8E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05E5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5UCDIkPPdE5CY-EDgQQ6PryGGI4.roa
Signing time:             Mon 01 Dec 2025 01:38:21 +0000
ROA not before:           Mon 01 Dec 2025 01:38:21 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        118.155.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:38:21 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E540832243CF744E4263E10381043A3EBC86188E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:c8:af:83:42:df:89:40:f0:a9:ab:c8:93:
                    ee:6c:61:f5:1c:aa:88:74:fb:0e:42:c9:d5:f7:ef:
                    58:f4:73:25:37:6e:56:b7:c4:8f:3a:9e:79:3f:c8:
                    e7:63:8a:db:6f:1f:01:1c:16:ca:47:20:24:c8:1e:
                    fb:ed:6f:01:c2:49:60:1e:ab:bf:91:1f:64:6b:1a:
                    a6:a7:f2:54:48:c1:16:09:d0:e1:4d:90:ea:38:00:
                    c0:b1:ee:1d:82:0a:59:d5:71:f6:ce:b1:b0:9f:b4:
                    10:7d:9e:2c:81:9c:89:c5:09:f8:6f:8c:86:84:ca:
                    62:b9:8e:c4:18:12:11:32:0d:7e:72:45:f9:e3:7b:
                    3d:22:b8:8d:c6:f9:4f:6e:21:8b:67:92:1d:77:ea:
                    0a:9e:6f:c6:36:7d:40:0c:ad:a9:97:2d:84:2c:ad:
                    d2:4b:2e:92:aa:b3:95:dd:b9:d1:15:37:24:0f:be:
                    ad:72:e4:fe:ef:fe:2a:c0:e1:9b:18:2d:c1:1a:08:
                    fc:07:76:40:12:57:03:00:32:08:09:22:fd:77:7f:
                    59:7b:e0:18:f8:6b:ed:eb:c4:0e:b3:8e:ed:26:d7:
                    b8:08:26:3d:12:ba:1b:6f:44:c6:21:ae:3a:51:2e:
                    66:30:fa:1e:da:31:1b:7a:49:87:5a:07:f4:79:39:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:40:83:22:43:CF:74:4E:42:63:E1:03:81:04:3A:3E:BC:86:18:8E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5UCDIkPPdE5CY-EDgQQ6PryGGI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.155.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:f1:5c:31:9e:ff:3a:46:78:cb:c1:62:67:0a:bb:f3:72:
         fe:01:71:76:07:35:fa:dc:8f:6b:3f:20:6f:f0:ff:33:d9:6d:
         1d:29:9f:ed:33:30:e0:95:55:0e:d5:7c:4f:6e:14:51:35:be:
         81:dd:b4:b1:50:03:16:9c:84:73:95:30:54:71:8c:64:f9:86:
         0a:9f:0c:1b:a1:c8:97:56:31:9b:7d:3c:41:b7:78:c4:bd:99:
         5d:fe:36:86:29:8d:e5:f0:8b:f1:e5:0f:ae:08:71:d2:db:1f:
         d1:76:dd:38:cd:63:a4:be:73:03:19:05:76:9b:97:72:c4:8d:
         4b:2d:cd:05:2d:e4:31:d1:8c:46:ad:47:c8:b8:76:6b:7a:db:
         e4:22:c3:4d:7e:c5:8a:ab:1a:b4:f1:8e:38:ba:97:7c:f3:56:
         e2:6a:05:bc:61:33:5b:a9:1e:e5:f1:9b:1c:b4:5b:20:0a:ae:
         22:09:79:c6:dc:cd:48:e2:8c:e3:2a:35:26:a4:b1:f2:41:ad:
         43:9c:73:35:03:57:55:53:85:8e:7e:77:3c:1a:82:d7:16:8f:
         40:87:51:6f:ef:bc:0f:4f:cf:af:f8:72:6d:e4:89:5b:21:76:
         a2:ea:02:a1:95:f6:35:70:af:67:fd:55:de:73:fb:79:68:dd:
         dd:7f:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:31 2025 by rpki-client