This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Dz56OZalB2zS_nXL2xXEDw07ziA.roa
File:                     Dz56OZalB2zS_nXL2xXEDw07ziA.roa (raw, json)
Hash identifier:          nab8XOBc6AITGGPgqtWVtoIiHmw+8Ue3CObjVWcdlMY=
Subject key identifier:   0F:3E:7A:39:96:A5:07:6C:D2:FE:75:CB:DB:15:C4:0F:0D:3B:CE:20
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06E4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Dz56OZalB2zS_nXL2xXEDw07ziA.roa
Signing time:             Mon 01 Dec 2025 02:21:58 +0000
ROA not before:           Mon 01 Dec 2025 02:21:58 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        111.102.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:21:58 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=0F3E7A3996A5076CD2FE75CBDB15C40F0D3BCE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:42:d8:ce:ae:49:82:f7:16:c3:17:50:1c:
                    2b:66:59:0f:59:8a:ff:43:f1:ae:cf:df:26:20:90:
                    1b:18:20:2b:80:01:57:43:13:33:c8:cc:23:8b:22:
                    f9:6b:b5:41:ca:97:32:02:bf:4f:63:ed:c1:7e:48:
                    b1:a7:9d:e6:2b:a9:fb:68:6a:58:b1:75:38:26:b0:
                    e5:63:b4:3b:cd:5e:aa:ba:2a:e5:cb:b1:92:ed:a6:
                    d0:e3:ce:0c:b1:de:71:59:d6:d4:d1:06:f2:76:f1:
                    52:65:95:64:25:f7:de:af:0a:62:b2:03:0b:26:45:
                    bc:95:aa:af:54:45:a0:2a:17:f8:2d:4b:35:f5:fb:
                    86:ab:3f:85:7c:68:a6:f1:97:30:96:64:fd:b7:d9:
                    df:c4:47:f6:b6:43:5d:48:20:31:4d:5e:6b:fb:b5:
                    a4:84:fa:3f:5e:17:0f:49:10:5f:e0:6a:55:ac:47:
                    06:4a:6d:f0:1d:12:29:77:a8:05:db:63:f2:ca:69:
                    23:db:dc:c2:2d:f9:4d:b0:21:9c:94:55:78:80:bd:
                    71:ab:5b:9d:3f:83:01:35:63:57:80:71:f1:96:98:
                    c1:97:dd:ff:49:1a:6d:f3:65:0a:56:af:46:5f:e0:
                    96:0d:ba:4d:f8:8e:03:67:83:2d:3f:03:e2:69:39:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3E:7A:39:96:A5:07:6C:D2:FE:75:CB:DB:15:C4:0F:0D:3B:CE:20
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Dz56OZalB2zS_nXL2xXEDw07ziA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:50:b6:07:51:59:db:25:05:58:0e:2e:a2:18:32:37:b7:87:
         24:fd:33:18:70:71:d9:2b:69:64:6a:54:a8:75:cd:04:b6:0f:
         16:8a:56:1c:e5:13:a8:30:56:b1:3d:19:64:67:fc:c7:19:cc:
         0d:7d:b8:cf:5e:61:da:b5:08:11:09:cb:ff:c0:37:48:3f:ce:
         7b:9c:e5:ed:12:cd:b2:b0:63:2e:2b:3b:8a:fc:3d:82:50:52:
         43:02:75:17:52:fe:f2:f6:aa:d9:b8:46:6a:6b:bf:9a:d8:5c:
         3c:61:43:09:cb:ac:94:c6:96:4b:84:4b:6c:35:73:8c:bb:9a:
         b9:44:34:9d:10:b9:50:a9:41:43:6a:60:7f:ba:58:8a:04:4d:
         a1:f6:a7:ed:2a:82:59:5d:e3:88:0d:46:ed:fa:a7:66:2d:6c:
         78:f1:2a:ca:1d:d5:d6:d1:9d:23:50:83:5a:a7:24:2e:03:63:
         e7:e8:d9:52:3d:b2:ff:46:14:fb:6b:59:f4:e1:17:5b:6b:48:
         77:d2:ee:fe:7e:bc:31:0c:d7:c0:74:8e:4f:42:6a:f3:54:a1:
         c7:cb:d3:5c:4e:c1:18:e3:92:85:b3:b4:90:cb:b9:9d:3c:79:
         9e:8a:a5:a2:c1:f9:43:d8:1d:94:51:8c:a5:5a:14:70:91:d8:
         aa:ab:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:41:46 2025 by rpki-client