This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7dI9sGGACVKfdDiaH8-jF05dYKs.roa
File:                     7dI9sGGACVKfdDiaH8-jF05dYKs.roa (raw, json)
Hash identifier:          b+E+gce5KM4PwqFlm2QS4+xEoYfhqDsPmkUHIqxJCZA=
Subject key identifier:   ED:D2:3D:B0:61:80:09:52:9F:74:38:9A:1F:CF:A3:17:4E:5D:60:AB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0627
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7dI9sGGACVKfdDiaH8-jF05dYKs.roa
Signing time:             Mon 01 Dec 2025 01:49:59 +0000
ROA not before:           Mon 01 Dec 2025 01:49:59 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:49:59 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=EDD23DB0618009529F74389A1FCFA3174E5D60AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:c2:11:46:7a:5f:a3:e5:4e:c5:f0:6a:37:
                    cc:d5:e3:8f:e3:3a:ab:84:57:dc:bc:a5:40:18:03:
                    47:2c:ed:4f:f6:ff:9b:f4:2b:aa:16:51:c7:aa:ba:
                    2a:fa:2c:f5:81:af:1e:63:38:cf:7c:b5:54:e5:3f:
                    9a:ef:8b:78:d3:94:b6:9d:66:46:34:f3:e2:4f:29:
                    08:05:57:85:34:4c:41:ea:a5:e3:38:46:57:ef:5a:
                    69:f1:d9:8e:62:15:b2:f7:a0:b2:42:d8:3f:6f:46:
                    de:60:cf:08:7e:cb:bc:ec:cf:9d:a7:1c:d8:b3:3d:
                    f3:46:e1:4e:b1:2d:2e:20:cf:bc:d6:97:56:8a:cc:
                    83:5f:bc:fd:a8:35:88:2f:81:67:9b:25:be:23:d5:
                    51:a2:dc:9a:d8:48:57:fc:9f:22:06:ba:a1:d9:19:
                    15:fa:0c:85:b0:eb:d7:9c:0b:b8:cb:e0:c1:74:eb:
                    06:55:80:cb:e6:05:ed:2c:7b:08:e2:44:b4:29:6a:
                    86:5e:3a:b2:ff:da:9c:53:3d:18:4e:ff:c0:9b:6a:
                    2b:14:fa:da:7c:0e:ad:4f:40:09:cf:d1:ee:7d:cd:
                    75:cc:6c:57:80:85:a9:96:67:be:d0:89:a9:2e:01:
                    6d:fa:1f:19:f4:91:ba:91:fa:c3:30:45:dc:81:da:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D2:3D:B0:61:80:09:52:9F:74:38:9A:1F:CF:A3:17:4E:5D:60:AB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7dI9sGGACVKfdDiaH8-jF05dYKs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:e1:33:36:c4:47:9d:18:43:6d:87:71:da:82:f6:5d:08:d2:
         21:c8:6f:8c:fd:2a:ac:c4:ea:3c:af:24:60:3d:9a:a2:88:80:
         0a:f0:02:4d:45:6b:25:1c:9d:59:b5:8a:08:b3:25:0e:ea:93:
         ed:85:4d:35:73:38:ef:70:a9:d2:62:0b:45:61:9f:51:f7:6c:
         ab:90:8d:25:12:ab:5b:a5:96:2e:b9:c3:4b:83:03:83:0a:cf:
         a9:d1:62:8d:72:3e:e6:1e:8d:ac:7e:25:91:80:66:c1:a1:03:
         95:85:83:a9:37:f6:3b:97:38:1d:5b:5f:bd:4a:7f:db:96:18:
         d1:e0:f3:b3:2f:78:31:f5:96:6c:b8:ad:47:8b:fd:05:26:e5:
         fe:6c:55:51:3c:b7:db:f7:4e:af:41:38:b7:9f:36:9c:8f:24:
         2f:3f:8f:19:8e:cf:33:42:b5:df:14:6b:f6:99:41:56:74:a5:
         75:fb:40:d3:8d:f4:e6:8e:5f:80:72:a9:0f:31:af:23:60:2f:
         9f:4c:ab:99:76:63:61:70:16:d1:4b:bc:88:29:2e:35:fa:e2:
         e2:75:ae:ae:82:67:84:6c:8c:5f:86:f4:5b:56:92:49:9e:b2:
         8c:e6:9b:73:20:1d:c8:1a:0c:eb:29:1b:3e:45:d7:6b:dc:d2:
         e4:67:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:55 2025 by rpki-client