This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/D57aWZ5IWli-_qpz4HCS8yK63Ek.roa
File:                     D57aWZ5IWli-_qpz4HCS8yK63Ek.roa (raw, json)
Hash identifier:          vivTlJtZxjFtACZK71nSxC/i/WOqQa8fJ18rFYEJA8M=
Subject key identifier:   0F:9E:DA:59:9E:48:5A:58:BE:FE:AA:73:E0:70:92:F3:22:BA:DC:49
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       070E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D57aWZ5IWli-_qpz4HCS8yK63Ek.roa
Signing time:             Mon 01 Dec 2025 02:29:51 +0000
ROA not before:           Mon 01 Dec 2025 02:29:51 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.255.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:29:51 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=0F9EDA599E485A58BEFEAA73E07092F322BADC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:7c:c9:32:90:46:b1:56:89:48:61:4e:23:
                    2b:57:0b:e1:32:c2:fc:bc:76:e4:50:7d:92:4e:11:
                    e9:61:fd:67:d3:33:6c:d8:f8:07:06:75:b4:08:b3:
                    59:eb:96:c6:4e:7d:69:c0:f9:df:9d:44:81:3c:0f:
                    5a:aa:85:33:ad:44:30:1d:48:8d:62:f4:c6:94:77:
                    bc:e5:a5:a2:7d:c7:18:d6:9d:bb:03:89:37:cc:79:
                    e3:53:19:65:a7:0d:0c:bb:c5:6f:ec:ac:a5:af:b0:
                    fb:57:c3:78:9a:79:0a:bf:5f:26:f2:1f:72:5c:64:
                    f1:f9:27:9e:5e:c1:c3:b7:5e:0d:3d:d4:81:c7:a7:
                    31:e1:c0:0d:2c:a0:1c:76:ed:f4:27:5d:c1:07:71:
                    2e:3b:2b:55:db:7a:ec:40:af:80:3d:40:17:82:c9:
                    3a:34:9c:18:86:e6:30:41:35:3d:25:43:7a:76:7a:
                    02:42:1b:b1:30:58:26:5e:e1:db:75:d4:88:22:21:
                    4a:74:da:5d:e1:ea:69:f0:5a:7c:41:9c:a6:5c:21:
                    68:c1:8f:e6:9c:50:92:5c:5d:03:63:17:f6:0f:3d:
                    cd:c0:c7:b9:af:8d:57:9f:c8:ec:81:f6:88:c1:4b:
                    9f:3d:5f:be:76:f9:37:76:64:c3:0a:59:5b:04:63:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9E:DA:59:9E:48:5A:58:BE:FE:AA:73:E0:70:92:F3:22:BA:DC:49
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D57aWZ5IWli-_qpz4HCS8yK63Ek.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:8f:fb:c8:f1:4d:b5:3c:d4:de:47:a8:08:1b:3e:e9:09:a2:
         69:21:c4:11:04:6d:6f:7d:11:0b:4e:ec:dd:01:9e:5a:f3:60:
         9f:f3:39:40:66:1c:f6:5d:77:8c:4f:a5:0c:c8:74:0d:05:35:
         6b:d0:44:b1:af:53:f5:65:0e:06:83:2b:fd:7d:69:50:26:e0:
         f6:d3:a5:76:9d:fe:c2:85:86:4f:ec:f9:0c:72:12:16:73:70:
         aa:66:38:84:da:18:28:cc:d2:1b:63:b2:25:d2:78:d9:4e:1b:
         92:f4:49:53:00:45:ba:d9:f6:6e:89:3d:b3:42:89:28:06:e0:
         6b:0f:98:38:be:59:89:48:28:c8:93:24:28:04:c8:6c:fc:f7:
         9b:40:d9:6f:f7:41:89:6a:8e:00:5d:ab:67:a3:25:ab:4e:60:
         bf:1d:73:82:31:7f:42:52:43:18:93:62:27:87:34:6e:83:88:
         7b:af:47:d4:da:07:f9:9d:a9:26:3b:c5:9a:43:8b:29:71:a4:
         bf:87:69:bb:cc:ea:ab:64:db:fc:ed:69:94:15:92:09:4b:81:
         d1:19:d3:c7:28:3e:9f:bc:7c:bc:20:3d:55:dc:df:25:ca:85:
         b4:4b:f7:cc:23:10:b2:dd:9b:ff:84:0f:5a:e8:9a:eb:82:87:
         62:0f:4f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:38 2025 by rpki-client