This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/86OrSn6lxcmoX4w3X946U7tgPlg.roa
File:                     86OrSn6lxcmoX4w3X946U7tgPlg.roa (raw, json)
Hash identifier:          yeoz+D0bcFgTD29qwKbPk3D0OGH45LogGyVa35ALQn8=
Subject key identifier:   F3:A3:AB:4A:7E:A5:C5:C9:A8:5F:8C:37:5F:DE:3A:53:BB:60:3E:58
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       067B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/86OrSn6lxcmoX4w3X946U7tgPlg.roa
Signing time:             Mon 01 Dec 2025 02:02:03 +0000
ROA not before:           Mon 01 Dec 2025 02:02:03 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:02:03 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=F3A3AB4A7EA5C5C9A85F8C375FDE3A53BB603E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:c4:db:c9:7a:b4:c8:21:45:1b:da:ca:16:
                    bf:50:9c:3d:d8:b1:13:47:ee:b6:28:5c:52:d6:e3:
                    db:64:e8:a4:a2:f2:b2:7c:62:1e:fb:35:7e:b9:5e:
                    d4:8d:99:40:51:3e:09:a7:e4:65:3d:cf:c9:8e:83:
                    67:58:6c:4f:ad:23:0e:73:ee:1a:b7:85:21:4d:15:
                    47:da:31:d7:22:a5:9e:70:30:f1:77:b8:60:e1:a9:
                    6e:9b:5a:15:2f:04:58:04:94:c8:d6:05:e5:d5:ca:
                    60:ec:88:3b:aa:4b:90:65:24:f0:47:bf:0a:26:bb:
                    55:59:0a:75:ca:2e:f4:3d:87:98:a8:ef:54:69:06:
                    89:50:c6:95:6a:8f:52:5c:0f:e2:50:11:90:e1:76:
                    6b:4f:a8:a1:84:06:82:ff:76:2b:29:38:96:c8:8a:
                    0a:f5:be:53:95:f1:5c:db:33:21:d4:71:33:7e:0e:
                    a9:14:55:2f:2b:ca:ba:1a:63:e1:be:80:00:54:79:
                    d7:77:56:39:d9:aa:c9:e4:c3:66:d7:ff:90:09:85:
                    8e:a4:06:f4:be:44:95:3e:dc:5f:3d:48:d6:3e:76:
                    92:8a:38:31:7e:af:45:13:c7:1b:15:9f:46:86:85:
                    91:43:d3:cd:27:f7:44:0a:c1:d8:f3:62:7f:3e:1a:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A3:AB:4A:7E:A5:C5:C9:A8:5F:8C:37:5F:DE:3A:53:BB:60:3E:58
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/86OrSn6lxcmoX4w3X946U7tgPlg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:62:eb:49:ef:78:ad:4a:97:42:33:b7:bc:db:84:50:29:4b:
         5b:f6:50:ca:0a:6d:6f:96:56:31:f5:bb:a0:61:e5:b5:c4:48:
         3c:64:0a:03:60:43:d4:14:65:b4:bb:23:01:df:53:dd:5d:14:
         23:00:4f:21:e0:a5:22:2c:45:a3:92:5c:dc:90:1a:db:66:b8:
         19:a6:96:5e:55:10:e1:c9:d2:92:a1:90:c5:89:4a:ea:40:d5:
         cd:06:02:2e:d2:0d:8e:5d:ac:db:23:80:f5:31:4a:2e:18:ae:
         1c:4d:b7:54:3e:52:94:56:53:0b:13:a0:11:5f:0b:1a:4e:d8:
         9b:00:df:85:37:4e:4b:83:70:2d:d4:5b:c3:5b:8e:34:a2:9a:
         b3:bb:86:e1:57:d0:99:88:f3:9f:de:a7:e8:f9:09:28:51:fd:
         51:76:fa:2d:e7:a7:41:10:8a:c2:2f:2d:3f:a1:49:9a:d7:b1:
         4d:41:7b:35:b7:e4:0b:12:ed:8d:ac:ea:5b:a0:11:06:a0:2d:
         9c:22:e1:85:49:e1:e9:9c:3d:a4:04:40:3e:2e:d3:67:ed:d4:
         ee:fe:cf:be:d1:07:82:11:72:6a:b3:31:38:12:41:ad:27:e7:
         36:6e:14:da:d7:49:e1:c5:55:26:44:06:97:cb:b2:25:7e:cf:
         2e:cc:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:31 2025 by rpki-client