This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BdHi7Ftg8j-7T-I9xaGoz-PNrn4.roa
File:                     BdHi7Ftg8j-7T-I9xaGoz-PNrn4.roa (raw, json)
Hash identifier:          G+dXscXrtTQ20NNImvq19+Omw70/RCmORQLSVmBsv10=
Subject key identifier:   05:D1:E2:EC:5B:60:F2:3F:BB:4F:E2:3D:C5:A1:A8:CF:E3:CD:AE:7E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05D8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BdHi7Ftg8j-7T-I9xaGoz-PNrn4.roa
Signing time:             Mon 01 Dec 2025 01:38:15 +0000
ROA not before:           Mon 01 Dec 2025 01:38:15 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.224.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:38:15 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=05D1E2EC5B60F23FBB4FE23DC5A1A8CFE3CDAE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a1:e9:a7:fa:b3:45:bf:28:bd:fe:67:b9:89:
                    c0:5a:4e:b9:c3:fc:a7:85:72:6a:d9:a4:49:32:11:
                    1f:d6:3a:9f:20:6a:2d:cd:d3:cd:14:d4:ba:84:91:
                    7d:f4:b6:c6:8c:b3:8e:77:a6:46:b8:6a:bc:c3:ff:
                    83:f6:d2:05:38:42:15:3f:4d:c6:c9:e2:11:45:06:
                    8a:15:26:86:47:92:ae:d7:81:a6:7b:49:19:df:10:
                    a8:da:c3:b6:49:08:ab:a8:f4:a4:a1:a6:b5:60:76:
                    7c:16:4c:89:42:1f:a0:e5:06:7c:7b:ea:1f:4c:53:
                    47:78:eb:87:0b:24:f5:ad:21:b2:a0:8a:2f:2d:33:
                    b1:3c:b5:18:dc:90:24:6e:4b:34:19:9e:26:83:32:
                    07:ce:fa:84:d6:81:68:5a:25:bb:b0:b0:32:a8:42:
                    1e:bf:c6:92:5a:77:16:e4:bd:c9:c9:13:c4:2d:a4:
                    22:a8:05:6c:1a:58:97:4e:17:2e:fd:ae:e8:89:50:
                    1c:f5:93:82:19:88:d5:a8:79:6c:0d:eb:48:a7:bb:
                    a9:64:b7:5d:6f:7c:9a:75:11:bf:5b:92:1f:0e:47:
                    65:24:e0:c1:38:ee:aa:fe:48:e5:fd:bc:f9:80:ee:
                    72:aa:26:6f:8a:59:dd:ac:e3:20:29:74:cf:d7:4e:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D1:E2:EC:5B:60:F2:3F:BB:4F:E2:3D:C5:A1:A8:CF:E3:CD:AE:7E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BdHi7Ftg8j-7T-I9xaGoz-PNrn4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a5:ab:1a:fe:a1:c5:e0:cd:ca:4f:d1:48:4c:c5:56:e0:40:ae:
         ec:6d:b7:68:c0:c5:29:92:c4:1e:f1:3e:d0:23:f6:f1:8f:60:
         ce:41:2b:f8:87:96:16:83:a6:4d:7c:6f:22:04:3b:4c:5b:d3:
         21:9e:76:6e:e5:00:02:15:24:3e:b0:07:f5:55:d1:3e:52:46:
         74:ae:af:d6:e6:cd:f2:e1:0c:23:8f:1e:b1:9b:67:25:ab:38:
         d6:a8:e5:d6:b2:fb:06:68:11:c2:a2:4e:ca:65:ae:5e:3e:58:
         bd:6f:2e:e4:6e:a8:e4:50:f2:52:8f:3e:c3:45:36:1d:11:03:
         85:ad:58:6b:4d:a4:b5:66:80:98:c2:64:b4:6a:66:08:94:ee:
         2e:32:df:35:ac:ab:be:c6:3c:9b:70:33:ec:0c:3c:ef:bb:24:
         9e:5f:41:d2:f7:79:80:b8:3c:a9:ab:89:90:82:7a:b1:82:37:
         3c:67:87:c2:d5:84:7c:12:6d:9b:16:7e:d5:a8:39:98:cb:78:
         41:af:1f:f6:5c:b5:11:9a:63:cb:39:8d:c6:ef:a3:3a:6e:ce:
         9d:cf:3e:9b:c4:1f:2f:39:65:46:20:2a:18:ca:b4:7a:74:4f:
         f0:b7:e0:c9:b5:66:56:fc:65:cd:c0:a6:24:a5:1e:6c:8f:cb:
         10:2d:9e:0e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MTM4MTVaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1RDFFMkVDNUI2MEYy
M0ZCQjRGRTIzREM1QTFBOENGRTNDREFFN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUoemn+rNFvyi9/me5icBaTrnD/KeFcmrZpEkyER/WOp8gai3N
080U1LqEkX30tsaMs453pka4arzD/4P20gU4QhU/TcbJ4hFFBooVJoZHkq7XgaZ7
SRnfEKjaw7ZJCKuo9KShprVgdnwWTIlCH6DlBnx76h9MU0d464cLJPWtIbKgii8t
M7E8tRjckCRuSzQZniaDMgfO+oTWgWhaJbuwsDKoQh6/xpJadxbkvcnJE8QtpCKo
BWwaWJdOFy79ruiJUBz1k4IZiNWoeWwN60inu6lkt11vfJp1Eb9bkh8OR2Uk4ME4
7qr+SOX9vPmA7nKqJm+KWd2s4yApdM/XTmeDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBdHi7Ftg8j+7T+I9xaGoz+PNrn4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0JkSGk3RnRnOGotN1QtSTl4YUdvei1QTnJuNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfS4AAwDQYJKoZIhvcNAQELBQADggEBAKWrGv6hxeDNyk/RSEzFVuBAruxt
t2jAxSmSxB7xPtAj9vGPYM5BK/iHlhaDpk18byIEO0xb0yGedm7lAAIVJD6wB/VV
0T5SRnSur9bmzfLhDCOPHrGbZyWrONao5day+wZoEcKiTsplrl4+WL1vLuRuqORQ
8lKPPsNFNh0RA4WtWGtNpLVmgJjCZLRqZgiU7i4y3zWsq77GPJtwM+wMPO+7JJ5f
QdL3eYC4PKmriZCCerGCNzxnh8LVhHwSbZsWftWoOZjLeEGvH/ZctRGaY8s5jcbv
ozpuzp3PPpvEHy85ZUYgKhjKtHp0T/C34Mm1Zlb8Zc3ApiSlHmyPyxAtng4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:27 2025 by rpki-client