This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MIj2kcfZVVHW3V4kLnsp3PrB5-0.roa
File:                     MIj2kcfZVVHW3V4kLnsp3PrB5-0.roa (raw, json)
Hash identifier:          wAVnQn8JOKtw0oPgtgUHhtiNds8R4L3e8418a9pN7z4=
Subject key identifier:   30:88:F6:91:C7:D9:55:51:D6:DD:5E:24:2E:7B:29:DC:FA:C1:E7:ED
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06CE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MIj2kcfZVVHW3V4kLnsp3PrB5-0.roa
Signing time:             Mon 01 Dec 2025 02:17:55 +0000
ROA not before:           Mon 01 Dec 2025 02:17:55 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        125.48.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742 (0x6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:17:55 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=3088F691C7D95551D6DD5E242E7B29DCFAC1E7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:0f:39:ac:21:9d:ab:22:1d:f5:be:03:d7:
                    2f:77:cc:f8:59:22:81:aa:7a:24:48:d7:7e:d1:34:
                    5c:f2:43:be:c2:33:97:c0:ff:01:98:94:53:a1:a7:
                    e2:84:9e:c0:b3:82:a3:07:d3:44:15:3a:18:34:a7:
                    50:2b:ba:e3:56:43:17:4e:b9:f7:3c:55:1a:6d:86:
                    26:ef:be:02:22:bc:42:7d:15:ea:51:a4:12:47:f2:
                    8d:fb:7a:52:f1:55:7f:a7:a6:68:95:ab:8f:ad:b5:
                    ff:fd:0a:44:b0:b6:a0:0c:ec:a6:21:d9:a9:7b:31:
                    9f:7e:62:55:7c:e3:0e:a6:da:f4:2e:8a:bf:ff:cf:
                    e3:e3:a8:17:13:12:24:3e:e0:c0:c2:8f:8e:48:ce:
                    87:0e:9a:39:90:ce:7d:7d:13:bf:e5:59:09:ad:4d:
                    4c:9d:6a:9e:8f:36:7b:db:44:82:c1:ed:29:ee:ee:
                    3d:ed:32:f6:ef:af:ac:33:fd:b5:6f:e1:89:7f:28:
                    b8:08:e8:b9:23:04:d1:83:74:68:84:65:da:d5:ee:
                    0a:26:45:8e:2f:cd:6a:8e:46:46:4b:a5:0b:16:c5:
                    01:16:55:0d:79:a4:75:f2:25:bb:4e:a5:96:c9:b7:
                    f8:ba:c8:3f:97:a1:84:66:3c:f1:ac:fa:f4:89:c1:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:88:F6:91:C7:D9:55:51:D6:DD:5E:24:2E:7B:29:DC:FA:C1:E7:ED
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MIj2kcfZVVHW3V4kLnsp3PrB5-0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:d7:99:43:b3:14:48:5f:8f:58:f1:dc:4a:94:72:85:d3:
         16:3f:8e:dc:93:90:04:e3:49:d3:5f:fb:32:28:03:70:3e:05:
         c6:19:f4:80:10:45:36:53:fc:0e:52:32:e3:d5:33:0f:83:b2:
         f2:2d:64:91:ca:ff:97:ff:13:eb:c1:f1:d8:29:df:99:0b:cb:
         3b:f7:03:22:6c:f0:12:70:fc:bf:71:2c:17:c8:0e:83:6b:a1:
         d6:9d:ff:e8:e7:7f:a0:b5:d1:69:e2:7b:b4:ec:03:26:81:c9:
         62:97:95:db:74:9d:15:b7:9f:63:29:bd:99:00:1e:43:1a:61:
         7e:8c:e3:9f:0f:a8:8d:05:78:bb:78:3d:7b:3f:79:0c:81:60:
         a6:94:5a:0b:1f:48:e8:28:ad:a4:ed:6f:b9:cf:14:e5:58:66:
         ed:61:68:81:ee:c4:ff:c0:bc:9f:63:de:82:ce:f2:90:a2:f9:
         b5:16:15:eb:f5:ef:a1:d5:a8:18:d8:a3:82:15:b8:24:82:be:
         a4:c7:6b:88:78:9b:63:d4:2a:5d:09:9e:5c:20:d0:d9:7f:3b:
         a5:b0:7e:e9:cf:7e:9d:77:c1:82:78:8c:7f:50:c3:38:77:b9:
         c6:59:bc:1a:8f:90:7e:7d:d9:82:bb:e7:0c:38:34:1d:58:36:
         39:5a:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:41 2025 by rpki-client