This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FpMfKPxJyHcpY1plvD0t37CD8WE.roa
File:                     FpMfKPxJyHcpY1plvD0t37CD8WE.roa (raw, json)
Hash identifier:          ksqVkFKJC8u4L1QAN7xMsINluiyRZgfYsXhxUAyjigg=
Subject key identifier:   16:93:1F:28:FC:49:C8:77:29:63:5A:65:BC:3D:2D:DF:B0:83:F1:61
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05E2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FpMfKPxJyHcpY1plvD0t37CD8WE.roa
Signing time:             Mon 01 Dec 2025 01:38:20 +0000
ROA not before:           Mon 01 Dec 2025 01:38:20 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        221.119.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:38:20 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=16931F28FC49C87729635A65BC3D2DDFB083F161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:ca:f8:41:ba:f6:97:cb:84:3e:a7:6b:5f:
                    b9:ab:af:ac:14:2a:c3:9e:44:e8:d3:88:7c:76:95:
                    9f:29:80:6b:5f:cc:a7:7f:ff:af:aa:6f:b2:96:09:
                    c3:b4:dc:48:09:9f:ec:90:b4:81:65:8b:62:a7:87:
                    1c:06:79:39:8d:d2:ef:5b:3d:50:81:87:0d:0c:0e:
                    c3:2e:f3:22:c9:f7:3b:9f:5a:2d:9b:e5:cb:d6:38:
                    20:1e:e1:21:4c:49:37:1b:46:c7:0f:25:5d:cf:ae:
                    8e:b8:1b:2c:36:dc:06:f7:aa:17:59:7d:20:9d:8a:
                    87:90:8b:54:85:e4:5e:99:4d:37:dc:d7:11:c7:c1:
                    da:01:ec:1f:9f:f1:12:bf:f9:1a:ee:61:cf:a2:36:
                    e4:69:0a:e1:cc:50:c7:20:ee:2a:bd:40:97:f6:98:
                    ca:bc:d1:a0:29:d7:8b:09:a1:e1:08:d6:9f:63:15:
                    df:ab:eb:b0:52:d6:45:88:5b:64:95:55:09:25:3d:
                    4d:99:eb:76:3f:53:e5:dc:89:1d:7e:7d:f1:92:16:
                    75:60:be:1d:c1:09:e6:f7:27:94:10:53:50:dc:0c:
                    ff:d6:4a:2e:ed:48:59:b4:4c:0c:fd:f0:30:fd:45:
                    71:b1:3b:d6:9e:86:50:58:a4:33:1a:85:5d:ea:05:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:1F:28:FC:49:C8:77:29:63:5A:65:BC:3D:2D:DF:B0:83:F1:61
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FpMfKPxJyHcpY1plvD0t37CD8WE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.119.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:d1:64:49:0d:7b:c7:4a:5a:51:62:8a:ab:cb:2e:21:de:15:
         4e:ca:01:b2:26:29:6f:e8:a0:8f:4d:e8:e9:2d:7b:ff:f4:5b:
         c7:47:9a:d4:56:10:c2:c1:5c:1a:ed:85:94:00:b1:d8:5c:e0:
         ab:72:dc:26:c8:a8:e1:e5:ac:db:50:a2:0e:77:94:ff:e5:95:
         99:21:a4:52:c9:f9:23:d1:27:ee:0b:0d:a5:9c:95:48:96:cc:
         12:a6:e1:46:4b:32:a1:f4:f6:13:10:61:28:63:59:fa:da:e9:
         1a:98:63:ed:77:af:ad:0e:ff:a0:d8:c7:88:1b:77:63:e1:fe:
         75:9e:a1:da:a9:49:66:02:25:5e:2e:6d:ff:3a:a8:60:9a:c1:
         ba:28:d0:f2:c2:5a:e3:67:1e:27:02:6c:9e:d8:94:76:a3:fb:
         90:0b:11:76:3f:91:7f:e1:94:62:5b:ed:41:85:70:9b:2d:08:
         f3:89:03:96:7c:92:94:1c:ab:2b:61:9b:cf:92:ad:80:d5:90:
         3f:8e:24:bd:f5:40:a1:8d:2c:91:d8:1a:0e:d9:37:6a:25:76:
         de:ec:31:6b:ac:80:15:cc:1e:fb:73:fc:ee:62:cb:f9:a6:cd:
         73:c1:d1:65:64:f6:19:11:a5:de:6d:34:91:0e:c5:42:8d:82:
         f1:a2:d7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:30 2025 by rpki-client