This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6YEUgvgQNalTYPp0LD8hy6p52Sg.roa
File:                     6YEUgvgQNalTYPp0LD8hy6p52Sg.roa (raw, json)
Hash identifier:          LnpVCpwKo8mtiMXrazXHAxLB4i9xPx52knT0pRVBpj8=
Subject key identifier:   E9:81:14:82:F8:10:35:A9:53:60:FA:74:2C:3F:21:CB:AA:79:D9:28
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0673
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6YEUgvgQNalTYPp0LD8hy6p52Sg.roa
Signing time:             Mon 01 Dec 2025 02:01:58 +0000
ROA not before:           Mon 01 Dec 2025 02:01:58 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        121.111.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:01:58 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E9811482F81035A95360FA742C3F21CBAA79D928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:62:2d:bc:07:79:d8:53:87:af:ee:45:80:c9:
                    c7:77:ba:cc:3d:fc:8c:06:bb:73:dc:8f:5c:d9:cc:
                    29:f4:58:51:ce:32:ae:65:73:4b:7f:c5:b1:75:75:
                    77:57:59:90:0e:a9:1c:b1:b0:cb:f7:fe:30:9c:56:
                    0c:43:12:d7:cd:a9:2f:7d:c5:d0:8c:18:2b:22:67:
                    a5:be:e4:95:67:f8:c5:f5:6e:c3:67:eb:1d:30:d6:
                    d1:fc:fa:f9:cf:e9:6f:0f:cf:16:74:e4:38:b5:f8:
                    79:f4:fe:ed:d5:9c:45:60:2e:3d:8f:e9:e3:4e:22:
                    f7:78:b4:8a:f8:0e:2a:a8:5f:f4:4e:ed:ed:d9:20:
                    f4:1e:08:82:98:7a:a9:49:a3:cd:91:46:32:5d:4e:
                    bb:66:d4:ce:37:79:fb:a3:09:38:fe:c0:2c:5a:60:
                    9f:44:f5:b1:d0:1a:ae:97:3b:e2:64:9a:27:16:6b:
                    05:94:a3:89:46:62:87:94:ac:c5:ba:d7:90:67:29:
                    ad:6e:23:b2:bb:17:0e:cf:a1:64:63:95:d3:19:73:
                    be:1b:4e:12:2b:ea:97:e2:f6:39:5e:8e:80:f1:d7:
                    ea:d9:fc:92:a1:b8:55:ac:7a:e1:6f:5f:c8:bf:d2:
                    9c:db:06:da:5d:71:59:68:99:85:5e:be:e9:56:05:
                    08:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:14:82:F8:10:35:A9:53:60:FA:74:2C:3F:21:CB:AA:79:D9:28
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6YEUgvgQNalTYPp0LD8hy6p52Sg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:8c:ae:b1:16:13:8e:a8:b0:cd:76:37:9d:dc:6f:32:6f:42:
         55:1b:97:38:7d:27:d7:75:66:1d:53:fc:fb:0b:92:12:81:ea:
         9c:33:1c:dd:1b:2a:b8:c7:3d:92:13:50:60:dd:b4:8d:d8:e1:
         b2:b8:cd:d6:e1:da:e5:ba:42:12:d6:dc:ac:f9:18:23:43:f9:
         60:f8:e8:d2:fe:08:7e:8a:81:1d:9f:7f:48:31:78:57:09:63:
         aa:bf:66:13:57:82:9e:76:8f:8e:f9:c3:30:54:48:97:0f:02:
         48:b5:0b:9e:21:1b:74:a9:5a:ac:40:aa:5f:94:07:98:d2:a7:
         dd:a7:51:af:d1:df:25:be:4c:f6:75:72:8f:d1:7b:a7:fc:9c:
         51:ce:12:64:cb:5a:7d:a5:9e:fc:29:cb:ce:eb:18:c6:8e:11:
         c3:82:37:b5:2f:d2:81:06:f6:3d:47:7c:5b:c5:91:26:ff:4c:
         c1:9a:72:fd:7d:21:e7:7e:a0:5f:6a:53:4e:0c:06:b5:3a:60:
         06:ab:7d:f0:96:e5:17:8c:9c:f0:41:1c:b6:ec:0f:3e:75:46:
         46:ef:db:53:43:58:5d:dd:bd:80:a2:05:13:96:37:76:fb:16:
         fe:b8:2b:a5:68:8e:0c:e3:b4:43:29:d5:c3:4a:db:9b:a8:5c:
         a5:a3:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:54 2025 by rpki-client