This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/P7DaH2QfwVia0gYwZp5nZbfY11Y.roa
File:                     P7DaH2QfwVia0gYwZp5nZbfY11Y.roa (raw, json)
Hash identifier:          +e0/k6So4IBfjOjksy2wvpilSM5hxgB99uK/3nTV6ow=
Subject key identifier:   3F:B0:DA:1F:64:1F:C1:58:9A:D2:06:30:66:9E:67:65:B7:D8:D7:56
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06D6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P7DaH2QfwVia0gYwZp5nZbfY11Y.roa
Signing time:             Mon 01 Dec 2025 02:17:59 +0000
ROA not before:           Mon 01 Dec 2025 02:17:59 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:17:59 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=3FB0DA1F641FC1589AD20630669E6765B7D8D756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:57:d6:9f:56:b8:7f:81:60:fc:06:21:08:
                    46:27:7c:86:0b:a9:82:53:3e:49:6c:fb:da:d1:40:
                    de:4d:58:fb:c4:21:a6:2d:a6:dd:2b:a9:d7:b2:06:
                    a3:92:fa:d6:a2:5e:4a:0d:50:ba:7e:c6:86:a6:66:
                    6e:f7:b0:24:3a:37:ac:82:84:12:c3:01:36:bf:f4:
                    f7:25:58:0f:60:5f:5f:f7:1d:a7:1c:b5:58:2a:55:
                    ed:fa:9e:f1:d4:08:a6:6d:4a:2f:17:28:78:6b:69:
                    c1:17:05:65:62:39:4d:20:c8:f8:b8:f6:80:72:41:
                    0a:ef:3b:c1:05:be:91:02:5b:f2:26:0e:6a:a3:bf:
                    7e:ae:e4:8c:ed:e6:ad:e9:00:84:a9:2a:d8:d9:6e:
                    2d:01:68:7a:32:35:56:a6:b2:44:fe:82:9d:7c:7a:
                    92:26:23:52:ee:dc:85:e0:f6:68:de:99:0b:c1:10:
                    e6:82:16:c6:d9:f6:10:81:45:4f:10:1a:96:3a:cb:
                    ce:5e:fe:a8:a7:a1:27:65:bb:60:d1:9b:84:eb:92:
                    62:42:ad:1f:72:82:23:1e:be:22:0c:25:82:53:c0:
                    f0:ca:07:d1:ec:a9:64:3e:80:43:3f:81:d2:4c:83:
                    9b:da:cc:66:5f:2e:2a:23:3a:7b:aa:97:ca:9a:9c:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B0:DA:1F:64:1F:C1:58:9A:D2:06:30:66:9E:67:65:B7:D8:D7:56
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P7DaH2QfwVia0gYwZp5nZbfY11Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:ea:9d:d8:47:d6:dc:a2:03:77:c4:87:b3:c1:3c:92:22:
         0a:50:67:cb:30:bd:56:8f:c6:03:43:3f:29:d6:51:8f:0a:61:
         32:e5:e8:ec:76:c2:68:4c:af:57:6c:36:a6:46:9b:83:5a:50:
         b7:dc:2f:7a:3f:f8:b6:4d:6a:8a:72:b9:2d:ce:de:bc:71:0d:
         15:45:c1:36:69:d8:2b:df:82:d7:c2:b3:d2:f2:70:df:89:ff:
         2c:7b:4d:39:13:ca:54:6a:bf:a7:de:bb:02:4b:32:07:20:35:
         4d:ca:fc:c5:63:2f:ef:6b:9f:42:f3:94:11:f7:56:0e:a3:d4:
         00:1b:09:57:b9:b9:2b:88:50:83:0d:0f:26:90:6d:02:7e:d3:
         b3:81:ff:95:bd:80:57:9e:13:11:e5:bd:9c:48:55:23:a6:c1:
         89:02:c1:e5:dc:bf:80:3f:da:3f:e4:53:3f:06:cd:30:92:b9:
         73:be:a1:f2:5f:c6:69:d3:cb:46:d7:fd:bc:7e:3c:8c:8c:62:
         fa:30:80:73:c4:61:c0:d8:f4:20:9d:c0:55:2f:d7:18:83:d3:
         bc:da:a6:dc:27:c6:a6:cd:aa:c7:95:5e:5b:95:1e:ea:24:bc:
         1f:1a:19:e5:12:60:2d:25:5c:2a:94:61:67:8c:24:9e:d2:a8:
         53:24:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:02 2025 by rpki-client