This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/C1E2sF-XVJtf3yPkQyrX3ehg11Q.roa
File:                     C1E2sF-XVJtf3yPkQyrX3ehg11Q.roa (raw, json)
Hash identifier:          rA3bK4iSMXnxs/elTHZEnt6qc4sgSfvy1ZdWZMMGko4=
Subject key identifier:   0B:51:36:B0:5F:97:54:9B:5F:DF:23:E4:43:2A:D7:DD:E8:60:D7:54
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05F3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/C1E2sF-XVJtf3yPkQyrX3ehg11Q.roa
Signing time:             Mon 01 Dec 2025 01:42:03 +0000
ROA not before:           Mon 01 Dec 2025 01:42:03 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.166.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523 (0x5f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:42:03 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=0B5136B05F97549B5FDF23E4432AD7DDE860D754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:04:7d:9e:e2:ab:cc:4e:08:aa:a0:82:b6:8d:
                    6b:6a:a6:0c:72:ff:d3:3e:93:09:85:d3:49:3b:f9:
                    4a:e8:3d:79:82:28:e2:c7:53:fa:9d:12:59:2f:13:
                    03:a6:73:3e:bd:73:bf:fc:0e:a2:f4:9f:f6:55:24:
                    48:39:f5:d9:36:29:33:e3:c0:7e:09:5f:d1:f2:52:
                    da:07:a3:3a:86:00:77:4e:62:3f:d6:0c:98:53:9f:
                    d0:01:e4:42:8a:97:b1:97:54:af:3b:94:64:e4:8d:
                    96:ab:94:b5:27:78:d2:6e:4b:57:f6:c2:13:7e:8a:
                    aa:97:78:4d:c3:fe:e7:91:4a:de:11:6b:61:fb:18:
                    8d:97:d8:cc:83:42:58:dc:a6:c0:31:43:32:cf:5a:
                    45:e8:93:61:4c:63:43:fa:34:bd:61:4d:f8:af:a4:
                    77:7f:bf:97:51:20:0d:a9:08:ff:50:24:1a:c7:bc:
                    a3:ef:e3:62:6b:ff:95:29:99:55:14:3c:93:aa:a4:
                    0c:5c:36:0b:1a:a2:5b:6b:90:66:8b:23:dc:aa:26:
                    fe:20:fd:c3:61:c6:3f:6f:95:e5:2f:7f:3c:37:49:
                    42:0d:43:f2:b2:e8:51:be:01:df:1e:55:a3:25:da:
                    3e:a4:1e:cf:a3:17:cf:9c:f8:df:8b:8d:cf:bd:a2:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:51:36:B0:5F:97:54:9B:5F:DF:23:E4:43:2A:D7:DD:E8:60:D7:54
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/C1E2sF-XVJtf3yPkQyrX3ehg11Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:bc:dd:bd:ce:fe:71:da:14:a9:07:50:60:57:e8:79:0c:
         69:26:6c:3e:4a:2f:78:a6:16:6d:8f:40:38:aa:46:2c:d7:0e:
         3f:2a:f2:31:c7:dc:c3:43:b2:93:71:c7:f1:2a:09:03:b2:70:
         37:72:59:2f:5f:57:25:26:6d:01:52:8b:22:c5:4d:5d:0b:5f:
         3d:67:8a:5c:7a:9d:c3:12:50:e2:1f:6f:87:3a:80:7f:d7:24:
         39:32:7e:4f:70:20:e0:ec:4a:f4:a8:6d:9b:90:9c:18:8b:a7:
         c6:4b:4a:e9:10:61:91:08:5f:43:2f:a0:b0:a4:82:84:31:7a:
         93:7d:b3:84:08:24:ac:c3:0e:b2:c7:34:49:ba:c8:c4:a6:dd:
         2d:1c:c0:72:df:c0:21:99:9c:60:74:be:cc:26:90:80:1f:8e:
         16:34:05:47:86:54:4f:08:b6:28:e3:43:e4:16:f7:41:e6:c9:
         a8:25:52:28:a0:f4:90:07:f8:11:f2:92:87:22:72:c0:2c:d1:
         eb:05:b7:5c:a2:09:34:2d:94:d3:ab:ce:78:92:63:8c:c3:1d:
         35:49:5b:90:39:29:e8:0e:86:d6:3a:cc:e3:12:71:7a:2f:59:
         40:cc:85:73:20:76:8b:df:88:d7:b5:e1:4e:32:ed:4b:64:5b:
         cb:d7:22:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:34 2025 by rpki-client