This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fn4y_W7MYf-aExVX4aaszSKLjHk.roa
File:                     Fn4y_W7MYf-aExVX4aaszSKLjHk.roa (raw, json)
Hash identifier:          nx9SWChouTmWejkGfdYeXHsG/4bCXn8ySjP1IVabAiM=
Subject key identifier:   16:7E:32:FD:6E:CC:61:FF:9A:13:15:57:E1:A6:AC:CD:22:8B:8C:79
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0700
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fn4y_W7MYf-aExVX4aaszSKLjHk.roa
Signing time:             Mon 01 Dec 2025 02:25:47 +0000
ROA not before:           Mon 01 Dec 2025 02:25:47 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        59.137.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:25:47 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=167E32FD6ECC61FF9A131557E1A6ACCD228B8C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:cf:af:78:21:ba:3c:3e:b0:4b:22:6d:d2:
                    a3:98:ee:84:2c:2f:25:f8:72:18:07:9a:be:d4:24:
                    3f:ce:08:8f:d6:c6:93:48:0e:02:00:be:64:aa:51:
                    c8:67:d8:28:ce:a8:a2:ce:f1:77:29:c3:17:0d:e3:
                    82:d5:fb:da:87:fd:a5:d9:84:61:eb:aa:c3:3c:06:
                    41:c2:3f:26:ae:de:01:77:0e:3e:97:a1:0b:da:b4:
                    17:1b:2d:41:ca:c6:63:0d:a2:bd:fe:72:5b:13:93:
                    a0:69:f1:85:12:63:75:53:b2:38:88:be:a3:bc:09:
                    92:cd:ec:f0:46:b2:48:cd:c1:64:d9:bc:d6:27:87:
                    72:b1:ec:e0:76:eb:18:c8:59:68:43:87:ba:66:b4:
                    48:b4:ab:a2:3d:cc:00:86:87:42:27:0a:ae:cf:aa:
                    76:74:05:d2:0b:28:de:bf:6f:43:0d:45:9a:54:4c:
                    4f:0a:5a:23:b2:ac:a7:92:7e:de:b0:f4:3b:1b:5c:
                    51:64:f1:96:f4:e4:f3:dd:23:ef:a3:ba:68:41:c6:
                    9e:74:4d:17:10:ad:67:7a:c7:c4:4b:d9:b7:a3:2d:
                    ea:93:7b:f1:b6:85:e7:3d:15:55:14:cd:85:13:a1:
                    64:bf:1a:c4:c7:c9:37:1f:04:d3:1f:6f:48:95:64:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7E:32:FD:6E:CC:61:FF:9A:13:15:57:E1:A6:AC:CD:22:8B:8C:79
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fn4y_W7MYf-aExVX4aaszSKLjHk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.137.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         73:4b:2e:77:82:a4:b2:3f:4c:95:03:a1:98:47:c9:87:e1:22:
         5f:a7:48:95:2c:6a:2d:5b:7b:b5:62:ec:9f:49:11:32:35:c8:
         6b:7a:16:ed:63:46:c4:a4:50:9a:ad:0f:90:28:78:72:9c:72:
         28:4f:53:ec:d0:48:2c:05:6e:90:96:ee:24:7f:f4:c6:3b:e2:
         c5:15:d0:78:33:18:2a:d0:2a:e0:13:ac:1b:88:97:51:ea:38:
         7d:b1:d7:b3:eb:a1:dc:77:99:02:65:7d:7d:8a:2e:c2:75:d5:
         9d:ff:d8:15:6e:dc:89:32:4f:7a:39:f3:28:e3:b6:d2:b9:fd:
         60:53:fc:66:2e:96:03:f1:66:f1:d8:21:58:c3:e2:a8:6a:e6:
         40:36:ee:21:95:47:1e:55:d3:a2:0b:c8:21:51:08:c3:5a:55:
         e4:6c:e7:d8:26:c7:42:a9:ef:c3:26:40:8e:da:f1:aa:e9:62:
         ab:cb:b0:ad:24:a0:6d:38:2c:53:e2:b2:3b:d0:69:c6:fe:e5:
         ff:33:4e:34:ca:f3:78:61:0b:8d:c2:80:ff:78:d4:3b:82:df:
         78:a6:c0:d9:e4:85:ba:29:7d:26:ee:6d:43:18:f7:67:38:3b:
         97:82:59:03:a6:ce:45:bd:33:17:91:14:7c:0d:6b:3c:8d:f9:
         d2:83:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:34 2025 by rpki-client