This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/759o3nSW5TFUJXeXAN2Xdxp5HNs.roa
File:                     759o3nSW5TFUJXeXAN2Xdxp5HNs.roa (raw, json)
Hash identifier:          T1mDprt7Ivi1eL+Egrk+Cl7tttvj7j041Zoeez6RaI0=
Subject key identifier:   EF:9F:68:DE:74:96:E5:31:54:25:77:97:00:DD:97:77:1A:79:1C:DB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0664
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/759o3nSW5TFUJXeXAN2Xdxp5HNs.roa
Signing time:             Mon 01 Dec 2025 01:58:10 +0000
ROA not before:           Mon 01 Dec 2025 01:58:10 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        113.152.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:58:10 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=EF9F68DE7496E5315425779700DD97771A791CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:fb:c1:06:95:bf:50:2f:e8:16:2e:40:f2:
                    e9:9b:77:84:f5:6a:55:ea:61:6e:a0:ca:b7:99:45:
                    fc:0f:2b:f4:89:31:6d:e0:7e:1b:bd:ef:30:71:7f:
                    c4:8d:fe:a2:51:3b:47:9e:8c:c3:0e:33:57:3c:6d:
                    f5:3e:eb:ba:36:0f:6e:be:98:55:c3:de:96:1e:99:
                    c6:49:cc:e8:0f:95:b5:2a:0e:6f:0d:51:3d:18:73:
                    8d:35:71:dd:67:31:93:85:59:6e:97:72:6f:c1:b7:
                    b3:ce:aa:3c:0c:d5:1b:ed:a7:68:76:c4:d2:f7:32:
                    21:3f:e8:9e:dc:f8:34:bb:15:42:65:84:8e:89:90:
                    d6:97:63:1f:63:f4:a8:1a:4b:1a:99:80:b3:98:d1:
                    79:3a:9d:15:c7:64:aa:53:20:3d:d6:67:07:b0:43:
                    97:31:4d:fc:39:21:61:99:56:4f:ad:a2:90:b0:49:
                    a8:c4:b6:ff:ad:b6:7a:fc:c4:4d:0a:23:3f:fc:57:
                    d4:99:08:aa:e7:8f:8e:e1:72:80:7d:4c:84:26:c8:
                    af:e6:4c:83:bb:b1:c4:27:39:63:2e:12:44:9e:dd:
                    6d:71:4a:18:54:ed:40:78:4e:0b:a2:f0:6a:47:6b:
                    50:db:8b:77:b7:7d:ce:b9:7a:29:71:58:b0:e8:e6:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9F:68:DE:74:96:E5:31:54:25:77:97:00:DD:97:77:1A:79:1C:DB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/759o3nSW5TFUJXeXAN2Xdxp5HNs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:6f:89:4f:6f:e2:bc:b5:68:26:36:7c:37:e1:82:56:7f:
         35:e2:ed:b7:11:21:b8:45:ad:db:d8:63:34:6e:e4:05:19:0c:
         c4:6b:e4:ab:8a:db:a2:9c:09:a4:cf:57:e1:95:f2:d2:7a:a7:
         39:43:14:09:8a:54:c6:ce:89:ce:bb:8b:52:87:2a:59:84:f4:
         e8:26:b4:0b:d7:6e:82:7c:05:f9:7b:d9:b9:48:42:e0:82:c5:
         9d:4a:d6:df:b4:f7:87:1e:84:60:09:3b:ea:72:2a:45:1f:b0:
         1a:3a:9f:fa:8d:3e:94:99:a9:47:f0:2b:4f:eb:55:07:a2:ee:
         06:a1:28:ce:f4:92:16:09:c5:07:9b:9c:36:bc:8f:51:ee:9c:
         53:2e:4a:e1:f2:63:0c:51:95:47:6b:ca:ca:45:48:35:14:0a:
         9c:92:03:f3:a3:31:18:af:33:07:1e:bc:d1:ba:84:df:7c:7d:
         5a:79:db:88:74:f3:bf:64:3f:43:92:ce:69:08:22:4d:75:ea:
         5c:99:85:9a:f7:28:56:f9:2c:a5:3f:16:d4:dd:24:20:21:88:
         de:21:91:f1:d0:b5:ee:89:a0:c3:4e:85:8f:62:6a:05:c3:c4:
         52:15:cc:94:e7:70:8f:cf:2a:b1:94:b8:57:cb:8d:b6:e7:e9:
         6b:00:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:02 2025 by rpki-client