This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CKd7UFmwNMCzvP5N-NXAmnC_7wQ.roa
File:                     CKd7UFmwNMCzvP5N-NXAmnC_7wQ.roa (raw, json)
Hash identifier:          aixHnzOlXDdLNy3o35bTWwXGMmMNatHCFKfYyqMlm2Y=
Subject key identifier:   08:A7:7B:50:59:B0:34:C0:B3:BC:FE:4D:F8:D5:C0:9A:70:BF:EF:04
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       070D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CKd7UFmwNMCzvP5N-NXAmnC_7wQ.roa
Signing time:             Mon 01 Dec 2025 02:25:55 +0000
ROA not before:           Mon 01 Dec 2025 02:25:55 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.167.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:25:55 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=08A77B5059B034C0B3BCFE4DF8D5C09A70BFEF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:47:9f:71:ff:7e:4c:48:b2:68:f1:2c:87:
                    ed:95:46:d6:a5:6e:e0:d1:e7:74:f2:80:12:dc:6f:
                    c6:c8:98:f4:78:ba:61:0f:02:c6:2b:dc:5b:e9:71:
                    0e:c8:2d:eb:41:89:59:82:bf:da:b9:af:70:a0:26:
                    36:2f:88:28:5e:93:70:cc:59:f1:98:87:2d:25:2b:
                    c1:b2:5e:a7:10:01:84:bc:1a:9a:98:e2:3e:b1:cc:
                    73:c2:da:85:61:51:6e:e4:54:c7:c0:e0:a0:a7:e8:
                    cf:9a:6f:40:5a:c4:fd:26:fd:f5:6f:ff:30:0a:89:
                    6d:be:0c:cc:6c:73:bd:a9:18:36:16:96:1f:39:e1:
                    6b:f1:06:91:a6:46:e9:8d:a5:d7:36:8b:95:95:43:
                    c7:f4:d3:9c:70:27:38:9e:5b:1e:79:2c:e3:ca:19:
                    5c:67:8c:51:28:e3:82:52:58:b4:74:66:0f:77:42:
                    d6:6b:4b:60:dd:9d:1b:53:93:95:6f:5e:46:3c:77:
                    33:27:32:61:60:83:ba:a2:91:0f:00:38:d6:ba:2e:
                    5d:19:d5:f4:09:0f:32:74:d0:03:ad:1e:35:b5:c3:
                    65:bc:bd:e0:dc:ed:2c:c4:ff:de:25:8d:82:99:b4:
                    08:f1:c5:39:a0:02:aa:0a:8c:44:d6:77:f9:88:67:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:7B:50:59:B0:34:C0:B3:BC:FE:4D:F8:D5:C0:9A:70:BF:EF:04
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CKd7UFmwNMCzvP5N-NXAmnC_7wQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.167.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:1c:a3:5c:15:a1:a6:7b:9b:d9:18:fb:90:6b:f1:02:62:
         d7:11:26:6e:fd:89:6a:d3:83:e6:f5:9f:12:2f:c3:7e:69:8d:
         1e:4d:34:c3:b1:f7:f5:b2:6c:ee:60:00:59:4b:e7:a9:f7:65:
         a0:f5:d4:63:7f:7f:98:c1:3b:ea:78:28:27:f3:1c:68:6b:43:
         4b:2a:80:69:1d:74:2c:4b:cb:ff:46:57:9b:15:11:45:0a:7e:
         d8:6a:f3:30:ac:d5:f2:8b:3f:ba:c3:da:2d:22:db:94:1e:61:
         73:36:69:9d:71:30:59:4c:03:76:6f:02:de:b6:02:69:7f:45:
         85:9b:78:1e:f5:d7:62:80:23:91:02:a8:f8:39:2f:82:e0:bc:
         c9:ec:f0:78:d1:ae:8c:ca:48:10:e6:16:1d:d8:94:3f:55:c7:
         c1:e3:a6:5a:07:9e:1f:80:91:cf:3f:9e:e0:5d:e9:2f:7f:bf:
         6a:18:73:7b:5d:3d:a3:e5:47:57:6f:23:ee:c8:88:d1:bf:aa:
         55:a6:d9:e4:41:6d:80:41:28:3c:5a:96:3f:fc:73:ce:51:9f:
         f4:1b:72:87:88:5d:73:46:59:5f:84:5b:3b:be:eb:74:71:cd:
         27:08:14:65:67:c3:95:09:00:f7:12:e9:d4:27:93:5b:69:d1:
         12:d1:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:42 2025 by rpki-client