This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HiH0X-RaFKB6PA4NSpp-5BqoOHo.roa
File:                     HiH0X-RaFKB6PA4NSpp-5BqoOHo.roa (raw, json)
Hash identifier:          SMrbvNH3SRpxP3x7izC7VSqST7Jah6hbijDPZ/50GT4=
Subject key identifier:   1E:21:F4:5F:E4:5A:14:A0:7A:3C:0E:0D:4A:9A:7E:E4:1A:A8:38:7A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05B7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HiH0X-RaFKB6PA4NSpp-5BqoOHo.roa
Signing time:             Mon 01 Dec 2025 01:33:54 +0000
ROA not before:           Mon 01 Dec 2025 01:33:54 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        222.8.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:33:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=1E21F45FE45A14A07A3C0E0D4A9A7EE41AA8387A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:27:a8:81:61:f3:f4:92:39:3c:70:25:f7:
                    1f:9e:0d:6f:cb:65:2d:85:24:d1:d6:87:11:8d:d4:
                    66:01:1b:40:51:ba:bd:7a:4d:43:69:f2:aa:62:8a:
                    a8:52:3a:47:e3:cd:8c:17:3d:6f:61:86:61:a9:aa:
                    b9:3e:e0:f6:b0:c8:02:99:d9:0f:4f:7e:74:a8:11:
                    95:b6:fe:66:09:3b:2d:a6:a6:d2:c6:d6:73:b8:cf:
                    13:d4:99:c1:72:6f:fd:9b:f2:cf:ae:ab:46:7d:c5:
                    0f:62:b8:e1:46:1a:aa:5e:9d:0b:56:df:b9:2f:07:
                    3c:cb:ab:2d:db:59:22:f2:be:20:6c:f7:aa:3e:56:
                    d4:8e:9f:ca:a1:eb:8e:55:a4:97:06:78:d8:1c:49:
                    de:ed:6c:24:48:7c:ff:06:11:9a:e6:16:6a:2d:a3:
                    cd:56:78:33:ef:68:ac:d9:40:f2:b7:4e:76:12:d4:
                    b3:99:52:d9:96:b8:bf:a6:00:ce:35:7e:a0:3b:9e:
                    69:8a:3b:6d:1f:e1:2b:45:71:3e:de:de:2e:e4:e4:
                    6c:af:4b:a7:4e:f2:1b:0c:b3:3f:83:ea:30:c1:6b:
                    a4:86:a5:27:52:1e:01:44:4c:fd:ab:44:87:23:72:
                    ce:6f:55:f4:34:37:19:97:88:af:c1:79:0b:70:19:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:21:F4:5F:E4:5A:14:A0:7A:3C:0E:0D:4A:9A:7E:E4:1A:A8:38:7A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HiH0X-RaFKB6PA4NSpp-5BqoOHo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:b3:19:84:e9:4a:6c:53:30:88:1f:2d:4c:c3:dd:83:09:02:
         07:8d:e0:3b:5d:35:e4:1c:dc:0a:ed:99:72:b2:20:5c:77:6d:
         c9:f2:38:89:46:71:52:e4:a3:10:8c:19:e6:4c:7e:ff:b7:6b:
         68:d7:34:e7:37:1b:36:20:13:4b:5e:db:f9:0e:bf:25:57:c7:
         07:f3:de:32:e0:30:65:30:d5:88:a8:77:d3:81:9e:5e:d1:f3:
         e3:14:44:81:a2:e8:1b:16:ed:81:83:73:f1:a2:5b:cc:95:4d:
         ce:bf:80:13:26:8c:99:e9:0d:bf:69:8c:db:2e:6d:be:89:ea:
         a3:f9:f2:50:41:d0:de:2e:e3:86:6b:de:3d:89:90:7a:21:73:
         a4:98:6e:5f:1d:6c:54:43:1a:3a:97:60:90:02:c1:42:45:25:
         2b:f1:9f:59:57:aa:97:c5:68:23:16:9b:f6:e9:50:de:0d:fb:
         82:05:e7:5d:89:09:23:82:45:5d:46:47:0a:43:40:cf:e7:9d:
         18:44:fc:dd:47:6d:50:12:b4:5f:ab:b4:9e:4f:09:02:23:14:
         3e:aa:3b:2c:ca:5f:cf:11:38:84:f8:c7:1a:17:fc:75:ef:31:
         81:a7:a1:78:f1:d8:43:22:7a:1c:7e:40:78:c9:33:c8:11:30:
         39:72:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:56 2025 by rpki-client