This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OHqsm90fQYWpFkeMXXq4hQeIJd0.roa
File:                     OHqsm90fQYWpFkeMXXq4hQeIJd0.roa (raw, json)
Hash identifier:          fVKpYGWF2S18YjdyWHX1uOg11vHnu6q7LnYIzbuyn8w=
Subject key identifier:   38:7A:AC:9B:DD:1F:41:85:A9:16:47:8C:5D:7A:B8:85:07:88:25:DD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05FE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OHqsm90fQYWpFkeMXXq4hQeIJd0.roa
Signing time:             Mon 01 Dec 2025 01:42:11 +0000
ROA not before:           Mon 01 Dec 2025 01:42:11 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        119.105.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:42:11 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=387AAC9BDD1F4185A916478C5D7AB885078825DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:1c:0e:b1:52:87:96:39:f1:30:8d:7c:e3:
                    b6:9c:28:7a:d3:f2:ad:0f:f9:77:22:3d:82:39:f5:
                    fe:88:e0:c2:0a:87:df:05:85:c4:23:40:85:47:0f:
                    bc:f3:01:09:92:ab:41:c4:9f:c3:8d:2c:60:03:71:
                    89:ad:00:58:b9:a7:5b:99:d9:57:1f:2f:d7:e8:e0:
                    67:12:92:86:d9:0c:38:02:ba:83:06:60:d5:ee:0f:
                    4e:99:87:49:b7:5a:f3:88:f2:e4:53:70:e0:a0:b3:
                    13:10:7b:b5:5f:7b:a8:32:0f:24:ec:24:a0:85:62:
                    20:83:0e:a1:78:1a:4e:ce:87:75:21:55:82:a7:7f:
                    4c:0e:f5:d2:56:7a:98:43:aa:20:a4:f0:19:82:97:
                    36:00:82:72:06:5a:2e:2f:11:0e:d9:89:b1:d8:6e:
                    4f:4d:c9:40:fc:86:74:df:8e:a9:6d:80:eb:57:ea:
                    c9:2d:87:84:41:f6:5e:2d:29:30:9f:2d:06:5c:47:
                    43:d5:a2:b5:f0:17:a4:10:d7:72:af:7c:ea:75:54:
                    e4:c4:bb:f5:d0:94:6f:65:3c:06:cf:33:6b:79:23:
                    94:a9:dd:b8:89:bb:e0:6e:58:2b:06:a4:58:61:84:
                    55:cb:b9:61:54:d9:f2:29:56:24:90:43:f1:87:e2:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:AC:9B:DD:1F:41:85:A9:16:47:8C:5D:7A:B8:85:07:88:25:DD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OHqsm90fQYWpFkeMXXq4hQeIJd0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:7d:70:20:9e:40:a5:98:ab:61:60:14:e3:b7:47:e4:d0:
         e1:fc:49:e5:2a:85:00:42:9f:f3:dd:c7:0b:6c:ac:89:fb:f9:
         7d:34:5b:7f:37:0f:f3:7a:af:2a:a8:d6:39:22:f4:55:76:ad:
         1b:93:eb:14:f9:ff:45:69:9e:be:bb:c9:e0:20:ed:cb:56:d2:
         8f:6a:c5:97:be:0b:20:89:2c:c1:b9:e8:5d:1c:ed:d4:65:8f:
         b3:86:0a:34:2a:ea:95:13:16:56:1a:4a:13:f8:2b:48:6c:94:
         0c:18:78:45:3c:69:c2:27:87:31:79:0a:bf:ff:82:05:b6:e2:
         e3:3f:49:22:f8:f3:51:fd:31:f7:d9:d2:f2:a5:a0:8e:d4:c6:
         a9:a4:11:6b:c8:dc:60:95:a9:7e:59:f0:30:1c:64:a6:59:73:
         f4:77:15:8b:d2:22:3e:76:a7:b7:72:d0:d1:f0:42:ed:26:9a:
         f2:a4:49:df:8e:86:73:92:00:14:af:20:96:fb:d7:66:56:c4:
         a1:e5:bc:d5:4a:58:72:d7:90:bd:c8:2d:77:38:ed:3f:44:a9:
         e1:ae:04:cd:25:dc:48:f6:17:08:93:be:4d:12:12:4b:da:7a:
         0a:4b:10:45:87:20:91:38:05:eb:23:9c:76:d2:d4:70:02:4a:
         77:66:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:05 2025 by rpki-client