This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7Of0gh_-x7D-1PGM-LcAPRpRxIY.roa
File:                     7Of0gh_-x7D-1PGM-LcAPRpRxIY.roa (raw, json)
Hash identifier:          gYGJNMkVc3qvJGU0nu1WNA3q0lx88pMR9aby1dTt1lU=
Subject key identifier:   EC:E7:F4:82:1F:FE:C7:B0:FE:D4:F1:8C:F8:B7:00:3D:1A:51:C4:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       070A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7Of0gh_-x7D-1PGM-LcAPRpRxIY.roa
Signing time:             Mon 01 Dec 2025 02:25:53 +0000
ROA not before:           Mon 01 Dec 2025 02:25:53 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        125.28.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:25:53 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=ECE7F4821FFEC7B0FED4F18CF8B7003D1A51C486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:09:3c:b2:b4:cf:7a:e7:7c:18:a6:5a:63:
                    01:ce:ce:c9:50:14:a0:ba:2d:dc:46:f1:82:84:16:
                    f8:f1:1c:74:e6:0a:8f:03:bf:0d:88:1d:ba:60:20:
                    fe:00:c1:4d:42:07:d6:e9:7c:a8:3c:3f:90:3e:8f:
                    58:b0:47:0c:ab:b0:d7:e8:ba:02:fa:23:3a:ba:df:
                    87:cf:e9:35:ca:e0:2d:9b:63:92:3d:03:ba:6b:fd:
                    23:d5:2d:dc:d5:8e:8b:ea:ee:8a:b1:e8:37:18:dc:
                    a4:30:db:58:47:72:d4:f0:a9:61:57:b1:ec:69:a3:
                    13:9d:de:c8:a1:ad:5d:52:48:ce:93:2f:b6:98:1b:
                    cb:e0:62:a2:fb:bc:c5:78:b8:d9:ce:aa:07:94:64:
                    37:e3:27:77:a5:24:74:96:1f:78:45:54:23:21:03:
                    fa:c7:31:06:35:24:2e:fc:6d:22:4a:b8:57:74:03:
                    85:c2:af:d2:fb:4f:db:cc:76:b4:97:dd:7a:61:ed:
                    8c:79:b7:e6:5f:76:66:5c:c9:91:7d:7e:84:da:73:
                    66:d9:b0:54:07:18:4e:eb:18:67:65:85:19:4f:37:
                    17:1f:31:e9:69:28:a3:f9:f6:78:18:93:b1:16:b3:
                    1e:e5:45:89:82:b2:07:28:b9:a4:a8:45:34:c0:71:
                    c5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E7:F4:82:1F:FE:C7:B0:FE:D4:F1:8C:F8:B7:00:3D:1A:51:C4:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7Of0gh_-x7D-1PGM-LcAPRpRxIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.28.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:e7:15:be:fe:95:60:df:27:55:9d:e3:1e:c8:38:1a:6a:
         35:00:d4:02:05:9b:5f:11:e7:65:b9:6a:62:e3:b9:33:9f:34:
         f1:d0:de:3a:d6:c1:4f:7b:cb:7a:db:3b:a6:6b:27:40:3a:a3:
         c7:1c:46:54:6a:34:fd:5b:ee:bd:fd:22:6b:07:9d:2d:83:bb:
         b3:e1:44:ab:5f:4d:42:86:7d:ef:01:ba:a7:b0:fb:05:b7:95:
         d2:29:67:55:1a:46:0b:e1:1b:14:c1:16:b5:0c:50:48:67:73:
         45:00:16:54:2c:7b:4f:9d:cd:95:66:72:1e:84:b2:67:61:88:
         62:5c:6d:d8:b2:8c:a4:37:54:76:39:4f:c1:a3:7f:4b:7d:8b:
         cc:41:b2:43:0e:f6:10:5d:5b:dd:4b:1d:c6:bc:41:52:75:83:
         f0:ad:e6:76:82:1c:22:18:6f:c9:93:a4:58:47:ed:1c:f1:56:
         0d:e8:56:33:78:b0:0b:83:95:d3:05:7c:ea:8c:e5:ff:0f:09:
         4b:62:e5:48:46:c6:e1:93:7b:09:e8:29:84:6d:8c:a0:6a:2d:
         0f:aa:b8:10:1f:81:72:4c:20:a4:35:4a:f4:fa:6a:f0:c0:9e:
         81:cd:42:30:00:70:c7:c4:64:93:2c:54:67:fd:80:21:0d:63:
         b8:a4:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:51 2025 by rpki-client