This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MVTYYq2sZKiBhc4z7HOD9xE7cYw.roa
File:                     MVTYYq2sZKiBhc4z7HOD9xE7cYw.roa (raw, json)
Hash identifier:          DFI67LaMSc92L+x0aL8TTPgp/ytkO1PA9nUh7BufBrQ=
Subject key identifier:   31:54:D8:62:AD:AC:64:A8:81:85:CE:33:EC:73:83:F7:11:3B:71:8C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06DB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MVTYYq2sZKiBhc4z7HOD9xE7cYw.roa
Signing time:             Mon 01 Dec 2025 02:18:04 +0000
ROA not before:           Mon 01 Dec 2025 02:18:04 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        202.161.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:18:04 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=3154D862ADAC64A88185CE33EC7383F7113B718C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:b9:1f:b1:27:6e:56:74:55:b4:c2:bb:f3:
                    98:ce:ed:9f:be:c1:de:14:aa:e5:ff:4b:a7:f7:28:
                    61:c4:f8:65:75:bf:68:a6:58:0b:b1:61:a1:fb:a5:
                    f7:85:fb:73:9a:1d:a3:18:11:34:e3:86:fe:30:65:
                    f1:b0:ed:d5:39:f4:c0:91:b3:14:cf:d4:96:ce:93:
                    f7:88:2a:6c:b9:08:e1:24:ce:d6:96:14:30:f9:41:
                    e4:48:bf:cd:2d:50:fd:e3:1c:1a:09:71:9c:ff:2b:
                    8c:f4:fc:86:20:88:c6:c3:17:32:e1:4e:be:d8:3f:
                    b3:fb:00:4d:06:24:0e:b5:58:a9:97:e3:be:4b:c5:
                    d3:2e:2e:a7:09:2c:67:9f:3e:bc:18:dc:a4:2b:12:
                    04:c8:ac:d1:fd:fa:33:d9:8c:f8:10:78:f1:2a:ee:
                    f5:d2:f9:5c:93:de:c0:74:17:89:da:87:07:a1:eb:
                    96:94:06:9d:6b:70:33:70:e7:33:61:f0:99:a2:ae:
                    d1:6c:6d:52:cb:99:5f:27:35:91:70:e1:07:8c:cf:
                    2c:d5:3b:57:38:95:27:a7:ca:d0:bb:19:28:d3:31:
                    de:6a:9a:7f:55:07:a7:0f:3f:29:4a:2d:be:23:87:
                    51:80:db:33:df:a2:d4:5f:7b:18:91:9e:84:51:06:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:54:D8:62:AD:AC:64:A8:81:85:CE:33:EC:73:83:F7:11:3B:71:8C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MVTYYq2sZKiBhc4z7HOD9xE7cYw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.161.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:45:c6:2f:89:69:d1:43:f9:38:98:0e:e6:5a:1f:47:8a:65:
         fe:e7:3c:36:63:aa:f1:66:54:e2:8b:39:81:58:38:c5:44:a8:
         b1:c5:73:e5:5d:82:d0:a2:28:09:56:6f:6f:f6:e4:4e:b0:b5:
         2f:96:00:e9:60:68:21:1e:53:99:49:e4:0d:b3:53:5e:5c:a8:
         3b:99:14:f5:be:53:cd:42:5a:cf:2e:1a:5a:5b:d4:71:20:21:
         57:11:f7:bb:d7:2f:8e:7e:b9:4d:d9:7c:76:44:d6:50:c9:ee:
         81:f7:82:03:8a:33:5a:7d:13:c7:49:f3:50:bc:49:28:d2:43:
         12:a9:92:e4:ea:f6:ee:ba:2c:b6:78:fb:fb:70:f7:73:9e:50:
         30:bf:b9:79:b6:d7:1a:8c:13:90:36:3d:5f:21:bd:89:65:7e:
         ae:e0:f9:d4:66:13:b7:73:f5:98:a0:ff:c0:9e:c6:1e:69:73:
         b2:c8:9f:11:f1:f6:48:17:9b:f2:2b:f6:64:07:92:99:a0:30:
         c9:c2:9a:27:c9:c3:15:de:c5:f4:d0:7e:70:0d:c5:31:4e:0f:
         6c:05:1f:aa:88:a1:ef:b3:68:36:d4:0d:15:02:86:8b:db:d5:
         2d:72:8b:5f:8d:20:fc:c9:79:32:68:10:79:f6:1b:94:4c:e2:
         69:a9:43:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:41 2025 by rpki-client