This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HUTZgkm-jJnTB1i9C25HRDQ4YT8.roa
File:                     HUTZgkm-jJnTB1i9C25HRDQ4YT8.roa (raw, json)
Hash identifier:          R5urj1n/x4BWmEgf5GNuEKrBbv/6iZYd+w+sLvChGKU=
Subject key identifier:   1D:44:D9:82:49:BE:8C:99:D3:07:58:BD:0B:6E:47:44:34:38:61:3F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06EF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HUTZgkm-jJnTB1i9C25HRDQ4YT8.roa
Signing time:             Mon 01 Dec 2025 02:22:06 +0000
ROA not before:           Mon 01 Dec 2025 02:22:06 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        121.111.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:22:06 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=1D44D98249BE8C99D30758BD0B6E47443438613F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:9b:81:bc:57:b8:11:52:b7:bb:7b:25:04:
                    c1:14:42:60:9c:a0:5d:9a:94:e8:1b:26:aa:86:1c:
                    b1:3a:e1:c9:43:d3:31:6c:19:60:93:de:91:0d:ce:
                    3c:86:f8:94:93:d6:7e:39:2d:64:14:7d:4f:df:b7:
                    3e:b3:69:8c:b4:7d:70:b4:b6:9c:e0:e3:14:7d:8f:
                    33:0b:a8:62:1c:e9:5b:02:7d:f4:14:07:81:d1:55:
                    02:50:f6:7c:62:97:dd:b5:56:c8:69:64:89:7e:d5:
                    0f:59:0f:6f:e3:e3:e8:25:50:9b:e0:be:cf:65:43:
                    b5:5c:c1:42:b5:65:e9:bc:d5:bf:25:f5:ac:b1:0d:
                    b2:a6:72:b6:b2:b4:bb:ec:ad:97:b6:19:82:f7:ee:
                    07:31:b1:66:5f:d8:1e:37:e3:c5:e6:ed:3a:76:68:
                    f2:fb:52:96:5a:5e:c8:f2:30:7d:78:1e:10:32:fc:
                    8c:9f:4f:1b:a4:14:c7:f1:06:a2:a1:b8:8b:97:dd:
                    44:32:18:82:f0:ba:8b:12:bc:fb:c2:94:d1:4e:37:
                    bd:e2:8e:c0:68:20:1c:a9:f8:da:50:da:12:c5:c7:
                    df:38:79:0a:68:4e:e4:76:41:b2:b6:7a:f9:20:77:
                    7b:8e:81:5e:c7:54:ea:e0:d6:2a:8e:a1:ec:64:19:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:44:D9:82:49:BE:8C:99:D3:07:58:BD:0B:6E:47:44:34:38:61:3F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HUTZgkm-jJnTB1i9C25HRDQ4YT8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:46:2f:2a:04:f4:18:89:62:c1:90:7d:f5:4f:2a:38:88:05:
         bc:c1:cf:b3:c4:b2:18:69:3e:07:85:74:80:61:ee:cc:a7:c9:
         1b:c6:87:cb:11:15:ba:88:b0:1b:d3:6a:e9:4f:5a:ee:7b:52:
         6f:cf:e4:65:5e:d4:aa:0d:c3:f2:7f:ac:41:10:3e:73:63:9f:
         90:56:2f:b4:c6:40:ae:55:99:29:12:cc:a4:2d:4b:2d:50:6c:
         96:74:3e:a8:9a:10:97:0a:70:fb:95:c9:1c:b2:e3:93:ec:8e:
         92:b6:87:fb:de:d9:22:37:b1:5c:54:49:08:e1:0e:e0:2a:9d:
         2f:ba:47:64:f3:ba:26:8e:dd:c5:3d:a4:c1:d2:6c:19:40:b2:
         5d:4d:38:6e:27:ca:c1:2b:d9:70:78:54:f1:89:cf:74:40:66:
         b7:94:4e:48:d3:75:51:80:82:45:ff:0d:cf:f5:ff:8f:67:ac:
         1b:4c:55:35:90:6a:b7:5f:ac:02:df:14:26:31:9f:99:45:7b:
         3f:11:b1:f8:5d:d2:76:45:82:36:b2:c3:77:78:68:d4:18:cd:
         9f:16:95:17:9c:62:2d:40:97:03:b3:30:10:e1:66:b3:7e:ca:
         aa:38:e1:02:f5:14:fb:d3:42:68:63:b5:44:6f:0e:1c:c4:51:
         19:56:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:45 2025 by rpki-client