This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR5NX8_Uw1wMewVeRnrX3LLSklE.roa
File:                     QR5NX8_Uw1wMewVeRnrX3LLSklE.roa (raw, json)
Hash identifier:          RfuOAVD7S8RGKDBEeKeJe7If1jWcFpZEF7Z9DoDm7A4=
Subject key identifier:   41:1E:4D:5F:CF:D4:C3:5C:0C:7B:05:5E:46:7A:D7:DC:B2:D2:92:51
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0748
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR5NX8_Uw1wMewVeRnrX3LLSklE.roa
Signing time:             Mon 01 Dec 2025 02:37:49 +0000
ROA not before:           Mon 01 Dec 2025 02:37:49 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        175.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:37:49 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=411E4D5FCFD4C35C0C7B055E467AD7DCB2D29251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:96:82:c6:64:7c:2f:f3:9c:d3:9a:40:67:
                    89:ad:1c:98:04:a3:66:0b:77:ba:4d:99:3b:07:0f:
                    a0:e4:a2:78:3a:af:e0:93:6a:3e:26:46:72:a5:d6:
                    6e:d9:18:27:1b:cd:3a:6a:7f:b8:66:ba:45:59:2b:
                    fb:0e:26:fc:5d:88:16:8f:24:a9:88:b0:e4:5f:dd:
                    af:26:46:b3:85:86:b9:d0:d8:f5:91:dd:e8:86:f3:
                    4b:46:66:dc:fd:74:b9:ee:4d:6b:68:50:03:36:a9:
                    a6:04:a0:7a:b4:5c:fa:04:fd:3f:3e:fe:47:a2:9c:
                    11:c5:b4:6d:a0:17:1b:65:cc:18:ad:e7:75:7b:8c:
                    9e:b9:04:01:9a:40:ec:04:45:23:4a:ed:24:b1:cd:
                    a1:4b:8e:58:d4:a0:28:64:b6:63:63:8d:d4:7b:cc:
                    f2:8b:9c:a0:5d:c2:98:55:27:e7:47:92:0e:a4:14:
                    30:88:c6:d2:3d:eb:74:ab:c6:d3:4b:01:3b:81:fb:
                    c9:c7:96:2b:31:93:c0:ed:14:19:b2:12:38:d5:26:
                    7d:98:e9:77:6a:be:88:f8:cc:12:72:ee:c4:5b:25:
                    e4:55:25:36:f2:7c:00:a0:0b:e6:cf:54:2f:b5:ab:
                    1b:7a:0d:89:6a:87:03:00:a9:5f:87:1b:ca:7d:ba:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:4D:5F:CF:D4:C3:5C:0C:7B:05:5E:46:7A:D7:DC:B2:D2:92:51
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR5NX8_Uw1wMewVeRnrX3LLSklE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:2a:0f:66:66:38:1f:90:20:f4:b6:3a:bd:8a:a6:35:ae:37:
         6f:27:21:4e:db:34:5b:a1:17:92:3d:84:5c:8e:1a:32:da:a7:
         24:b2:0b:d1:fe:71:78:8e:54:27:01:f0:7b:24:cc:49:f3:dd:
         94:ec:f4:fe:05:98:ad:21:f5:f4:4d:18:8a:c4:79:7b:35:e7:
         b1:17:db:ff:95:57:0f:21:8b:f1:1e:ce:93:56:de:74:aa:b0:
         b3:3d:fe:72:31:a5:5d:f0:3d:99:6a:f2:57:31:29:10:7d:af:
         a7:ee:71:19:98:16:d0:de:8d:49:2f:67:fc:5f:8b:ad:45:28:
         c4:9c:48:b7:34:57:25:5f:da:0e:bf:f9:df:82:68:08:28:8d:
         01:0c:55:a6:09:62:0e:08:51:38:65:2d:f3:52:9a:43:91:ce:
         d6:40:41:38:c4:3e:b4:87:2b:c9:d9:8f:61:22:77:0c:70:57:
         35:57:d2:5d:4e:4d:b6:ff:31:17:76:93:65:cc:2b:65:d4:b0:
         ab:a1:8d:90:20:49:00:81:f8:5b:bf:3e:56:70:8e:e3:65:42:
         f3:30:70:b7:3f:f3:5e:e6:0e:5d:8b:2b:58:d4:48:2c:a8:d7:
         29:81:f3:6c:1d:55:d2:b2:0a:d0:38:3c:e6:cf:11:80:8c:ae:
         b6:ec:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:57 2025 by rpki-client