This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/9vQM865Eb5AubxJF0WrOcLNP1lg.roa
File:                     9vQM865Eb5AubxJF0WrOcLNP1lg.roa (raw, json)
Hash identifier:          LoUNhH0Hl0aJKCb05wIHW0jjOKNrXk2TMp420lvFY1g=
Subject key identifier:   F6:F4:0C:F3:AE:44:6F:90:2E:6F:12:45:D1:6A:CE:70:B3:4F:D6:58
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       072E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9vQM865Eb5AubxJF0WrOcLNP1lg.roa
Signing time:             Mon 01 Dec 2025 02:33:37 +0000
ROA not before:           Mon 01 Dec 2025 02:33:37 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        59.129.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838 (0x72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:33:37 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=F6F40CF3AE446F902E6F1245D16ACE70B34FD658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:74:59:49:b0:bf:33:90:08:fe:20:94:ec:
                    c2:04:58:63:4f:cb:92:5a:38:9c:76:ba:14:ea:24:
                    2c:54:f5:9e:12:24:5c:f5:cf:0a:02:6f:0b:39:20:
                    48:e1:ba:c4:4c:ea:4f:f4:52:cf:3b:e8:4d:77:ad:
                    ca:f3:cb:fa:eb:64:75:96:89:fe:e3:fa:99:32:3b:
                    37:a7:ed:2d:19:71:d2:4c:ce:77:6d:e8:6e:99:5a:
                    bf:e6:dd:10:a7:22:40:8c:77:1c:43:a0:63:1b:57:
                    70:82:41:3e:57:35:44:20:2e:f9:d3:92:01:ec:95:
                    36:ab:f0:9d:0b:3e:56:d8:0b:1c:ea:17:01:f5:6c:
                    5f:0b:85:87:7d:f2:ea:4f:b6:3f:b6:ae:49:40:bd:
                    cc:08:53:12:d6:de:8d:d8:12:c3:01:e1:60:7f:5b:
                    36:15:3a:b5:5c:d6:b2:cf:ec:0b:3c:76:fd:1c:7a:
                    33:6b:f5:3e:8a:04:f5:ea:56:a4:e0:ff:41:87:a5:
                    a4:d4:8e:10:c2:77:96:2f:09:13:a1:85:44:3c:d3:
                    05:f7:b0:97:69:79:df:35:54:34:e8:de:a8:e0:4e:
                    42:9f:50:50:bb:ba:2f:a6:50:10:28:7a:a5:57:60:
                    dc:d9:d6:e8:5b:20:68:11:e7:83:b9:95:c1:a8:98:
                    d3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:0C:F3:AE:44:6F:90:2E:6F:12:45:D1:6A:CE:70:B3:4F:D6:58
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9vQM865Eb5AubxJF0WrOcLNP1lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:c3:ba:0c:5a:c3:b3:d8:17:31:a9:a7:43:97:2f:19:06:14:
         57:c1:a7:31:8a:a4:d0:3f:8f:5c:df:34:8a:cb:2b:68:00:8d:
         e0:0a:6a:8d:ea:f7:db:d6:2b:4f:d8:e1:97:42:d3:d1:f2:42:
         bc:12:48:a2:0f:59:f0:42:27:e5:2e:af:c0:74:8f:c8:b1:96:
         bc:29:71:ef:d4:e0:d4:6c:1c:53:84:f3:5b:dc:9d:36:0a:97:
         b6:df:28:3b:9c:7d:81:77:aa:0c:f6:fb:a8:6a:e6:a5:40:0d:
         cb:61:59:06:11:5f:e0:03:90:a5:a9:bc:51:9b:14:92:3d:0f:
         ed:9e:5b:fe:9b:c8:2e:ae:9f:e4:fd:03:93:67:e5:8f:0e:e8:
         e0:cd:6b:a5:f0:28:29:7e:79:0a:f1:a7:ef:c3:20:cc:27:19:
         74:21:5d:65:76:5f:22:fd:e0:c0:63:21:1d:bf:f0:7a:85:7f:
         8d:e9:fe:ed:ad:e9:29:9f:6e:12:09:a4:73:b2:0d:46:d7:6d:
         57:80:5b:4d:4b:bf:4a:51:6c:af:53:06:66:37:5f:e7:e7:5e:
         67:14:46:8b:6a:1a:b9:ae:35:37:3d:18:ac:00:82:f2:b5:77:
         4b:5c:45:52:8d:77:fd:3c:85:23:ac:cf:01:ad:75:8c:82:b8:
         41:fd:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:48 2025 by rpki-client