This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FoRmPSF9kOZfMhSUHH6qqbKCB0Y.roa
File:                     FoRmPSF9kOZfMhSUHH6qqbKCB0Y.roa (raw, json)
Hash identifier:          CK3U9mRyi5j8NIowmlUvE2ZwWKTEa39HsVort257xCU=
Subject key identifier:   16:84:66:3D:21:7D:90:E6:5F:32:14:94:1C:7E:AA:A9:B2:82:07:46
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06B0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FoRmPSF9kOZfMhSUHH6qqbKCB0Y.roa
Signing time:             Mon 01 Dec 2025 02:13:58 +0000
ROA not before:           Mon 01 Dec 2025 02:13:58 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.190.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:13:58 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=1684663D217D90E65F3214941C7EAAA9B2820746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d2:7c:d1:39:c4:ff:d8:0a:a4:da:d0:a5:3e:
                    52:62:89:17:3f:ca:ce:e9:8c:07:b7:c5:df:52:df:
                    86:42:44:6d:eb:32:8a:cf:62:a4:30:66:3a:9f:b5:
                    41:4d:80:89:f1:d3:f4:49:31:2b:9e:7f:d0:f1:15:
                    e6:b0:18:96:a7:78:40:15:73:8c:a5:89:df:29:db:
                    e9:77:32:09:83:58:79:b5:9c:96:91:5e:8a:e4:3b:
                    55:28:bb:9c:1a:5b:b1:03:c9:b3:ba:58:6f:b3:8a:
                    a0:16:18:a5:62:6d:d8:14:54:bb:c8:7f:72:35:12:
                    26:d2:bb:1f:b3:30:c4:ab:0c:e3:7d:e4:60:6d:7a:
                    af:bb:7a:0c:22:3d:ac:13:80:b5:21:5e:83:7b:74:
                    ef:35:4e:ce:af:2e:4e:6f:fd:9f:97:e2:38:7f:06:
                    de:71:32:9c:69:14:0b:56:00:14:03:61:7a:a3:7b:
                    57:d7:0a:09:81:12:fc:07:8d:76:8a:3d:9c:9a:8e:
                    db:b2:73:79:47:02:09:68:40:af:25:0b:73:c8:92:
                    e4:05:8f:26:21:1d:b5:e9:6b:c3:f1:ae:95:b5:6e:
                    3f:48:34:29:a0:2c:ba:21:7f:5f:89:04:29:18:8b:
                    86:1a:74:c1:9d:d9:44:a5:00:ea:e5:87:45:22:9e:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:66:3D:21:7D:90:E6:5F:32:14:94:1C:7E:AA:A9:B2:82:07:46
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FoRmPSF9kOZfMhSUHH6qqbKCB0Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.190.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:ed:aa:d6:6b:e4:d1:ab:db:bb:6e:7f:f0:b6:f1:26:d3:
         d6:02:bc:9f:05:bb:a0:f2:ab:81:36:cb:99:57:b6:60:d9:84:
         39:f1:ad:c2:26:9a:61:af:c6:ba:ee:93:67:0f:0c:f7:5d:ed:
         19:17:97:77:2e:7f:9f:1e:51:48:b4:83:f2:7b:36:4a:62:d8:
         58:51:ba:38:df:80:58:0f:d2:37:bf:99:41:d4:f0:73:d4:e8:
         6d:2c:7f:39:36:e7:b3:0e:3a:dc:70:08:71:49:58:dd:d3:d9:
         da:74:44:6d:69:5f:90:43:c5:d9:51:08:fa:a5:8e:ef:f6:0a:
         23:e7:24:6d:27:a1:14:69:33:f7:c4:8b:61:a1:ca:27:33:3a:
         ae:8b:4b:55:b5:f5:fa:6e:43:d7:80:4e:43:b9:dc:00:59:f5:
         17:f4:27:96:62:72:a5:01:3b:18:fb:7d:9e:d9:cd:36:88:38:
         cf:21:99:07:49:f8:b0:01:6c:9b:26:6c:75:a0:d3:bc:e3:89:
         7b:f4:d9:b8:c8:59:cb:d3:09:d7:f6:f0:bf:4d:20:ed:4c:eb:
         aa:cb:6f:55:64:81:b8:96:a5:22:fe:d6:8a:6d:58:13:b3:5c:
         a0:b5:db:f7:63:6c:b2:00:5e:c1:46:bf:cc:e7:50:f3:90:bb:
         30:97:a2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:53 2025 by rpki-client