This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/A6SaKmOlQS2PkE5XKSk2TAnzZK0.roa
File:                     A6SaKmOlQS2PkE5XKSk2TAnzZK0.roa (raw, json)
Hash identifier:          v9uKM832KJbSECgNUmiCs/YfrK/PLpkVt/XcQnMDpg4=
Subject key identifier:   03:A4:9A:2A:63:A5:41:2D:8F:90:4E:57:29:29:36:4C:09:F3:64:AD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0703
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A6SaKmOlQS2PkE5XKSk2TAnzZK0.roa
Signing time:             Mon 01 Dec 2025 02:25:48 +0000
ROA not before:           Mon 01 Dec 2025 02:25:48 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:25:48 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=03A49A2A63A5412D8F904E572929364C09F364AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:8b:22:95:f8:ca:79:74:0b:c7:b7:99:75:
                    99:a8:cb:0f:20:39:04:9f:e3:d8:80:d1:34:db:44:
                    26:a7:3d:62:00:62:95:3e:90:9e:e8:3c:33:65:33:
                    ea:22:ca:0c:50:ab:ac:a1:a2:87:ca:e9:6b:06:25:
                    8a:c2:2b:b9:d4:fe:a7:4d:b3:84:18:9e:f9:70:68:
                    31:5f:d5:a8:89:ed:bd:52:13:e9:ae:f5:86:e8:36:
                    34:d1:5b:e9:4e:46:e2:8f:5f:a5:94:35:90:ad:32:
                    37:c0:9f:d8:44:ed:1c:09:9c:a1:f8:16:45:21:09:
                    c4:1a:d9:40:b7:ba:a7:aa:6c:09:e3:43:56:39:ca:
                    f1:fd:d0:cb:89:01:62:a8:0b:34:7a:7f:34:66:c7:
                    51:b5:5a:7d:b4:87:b8:53:6c:3f:36:a4:4b:67:1e:
                    b3:a2:07:f4:46:88:c8:57:55:a5:18:90:07:ad:cf:
                    68:a6:69:c8:65:9c:91:8f:6e:5d:a3:4f:7e:da:7b:
                    9f:1b:ec:3d:cf:eb:5b:b2:76:02:5d:2e:42:d3:38:
                    db:b7:5c:9c:8b:f7:43:0c:70:73:74:2d:25:2e:45:
                    c3:7a:15:8c:76:80:33:99:06:bc:07:1d:2c:40:fd:
                    4a:5c:73:3d:65:2e:60:0f:1d:54:8b:2e:51:64:14:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A4:9A:2A:63:A5:41:2D:8F:90:4E:57:29:29:36:4C:09:F3:64:AD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A6SaKmOlQS2PkE5XKSk2TAnzZK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:75:41:e5:15:ba:ca:06:b6:58:16:21:07:20:6e:56:f4:6f:
         02:c1:b1:6d:c8:80:cd:61:cf:72:63:9d:74:a4:73:ea:70:94:
         d4:82:93:4f:6c:fb:c9:56:be:8c:d9:ee:da:14:58:3b:f6:3d:
         48:d2:35:8e:26:73:f1:18:cd:a6:92:a9:5a:04:83:63:7e:be:
         9f:13:f4:61:f0:65:39:d2:94:9d:63:0e:a7:f8:4c:88:c4:70:
         7a:77:19:41:4b:0d:e4:d2:97:7c:40:7b:96:0a:04:c8:bb:77:
         0e:24:91:cb:c8:1a:5b:3d:0a:db:b5:10:6f:d0:f7:21:4d:44:
         f8:1b:95:c6:28:1f:14:ec:5a:18:62:46:cc:2f:68:5c:7d:74:
         0e:1f:90:df:b1:d6:02:7c:30:fd:44:89:5c:ee:71:3f:a7:51:
         53:9f:d3:3d:d5:d9:ce:95:e0:31:f2:40:0b:c8:15:0f:b9:05:
         95:c8:16:6c:c2:07:a2:b2:ee:ec:8e:f7:a4:4f:76:27:10:48:
         44:a4:f4:81:09:88:e7:76:5b:53:be:d5:fb:9f:c0:3a:ea:5c:
         05:f9:ed:97:7b:2f:9a:6b:ac:87:ee:65:2c:42:e6:d7:8f:31:
         c5:0e:c2:dd:f9:a7:fb:cd:8a:80:d1:eb:26:5c:06:9b:7e:4e:
         26:15:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:26 2025 by rpki-client