This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QTVsJ9RsmB7FiDuQn_M02sEx9RA.roa
File:                     QTVsJ9RsmB7FiDuQn_M02sEx9RA.roa (raw, json)
Hash identifier:          rmS5bp+Qc+y+N0cC8VtX4jJyQKhtsBOXJ/RTYI4ysAo=
Subject key identifier:   41:35:6C:27:D4:6C:98:1E:C5:88:3B:90:9F:F3:34:DA:C1:31:F5:10
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05B9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QTVsJ9RsmB7FiDuQn_M02sEx9RA.roa
Signing time:             Mon 01 Dec 2025 01:33:56 +0000
ROA not before:           Mon 01 Dec 2025 01:33:56 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        61.215.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:33:56 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=41356C27D46C981EC5883B909FF334DAC131F510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:35:09:a3:da:5c:59:85:c3:1b:f0:20:4d:
                    30:07:33:4b:18:1b:30:3e:7f:e6:bb:ac:6e:2f:b9:
                    d0:24:79:55:0f:8e:6a:8e:c3:59:78:b9:fa:26:61:
                    53:2e:f5:07:cf:dd:84:75:a4:2b:cf:f9:bb:e8:8b:
                    d2:01:9e:e9:80:fc:14:88:59:4e:c5:7e:26:f5:a9:
                    28:b9:36:90:a2:69:56:4e:51:bb:00:1f:db:9e:72:
                    53:e4:f0:dd:19:f5:f9:4e:7f:7d:41:c7:30:26:54:
                    cc:14:8d:a8:2b:bb:5c:cf:7b:d1:5a:19:5a:9a:a0:
                    db:34:47:2c:26:a4:bf:f7:46:ae:4d:57:e0:0a:4c:
                    3a:e6:68:32:21:4c:30:03:c0:c3:7f:fd:eb:3f:82:
                    84:a9:db:8c:d4:3a:0e:57:b2:13:27:ea:5a:87:bd:
                    12:8e:b6:54:9e:d6:28:12:15:00:5b:9a:4f:2c:16:
                    e1:4b:47:cb:80:32:53:88:42:d2:2e:50:00:e3:f3:
                    64:6b:71:e9:52:80:b2:3e:b2:d5:26:94:3b:72:69:
                    0a:89:8c:23:36:71:d2:af:21:d0:a7:2e:bc:fa:9f:
                    55:6f:23:e1:f8:33:df:e1:a9:ee:da:fe:ce:eb:d4:
                    03:d5:29:2d:48:ae:42:24:2b:b0:18:34:a6:d0:25:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:35:6C:27:D4:6C:98:1E:C5:88:3B:90:9F:F3:34:DA:C1:31:F5:10
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QTVsJ9RsmB7FiDuQn_M02sEx9RA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:d7:a0:15:e5:59:f9:a9:91:fa:a1:3f:67:36:34:cf:eb:
         6a:a7:bd:dc:b7:ce:d7:09:90:16:2f:7a:84:48:13:ab:81:b1:
         8c:42:69:20:19:62:3d:cb:37:3c:13:b7:29:8d:7f:93:e3:4c:
         14:93:93:f5:41:c5:e1:53:67:6e:36:c3:de:21:87:9d:70:79:
         60:b2:d9:a1:6b:b2:94:2e:17:e0:ef:94:4f:12:54:18:61:af:
         97:17:72:b1:6a:cc:b2:15:aa:a3:39:0c:47:c6:b1:8b:95:53:
         74:cf:51:ea:f4:0f:73:68:c8:3d:3e:c8:61:2d:da:40:b9:19:
         34:6e:e8:8c:dc:43:ac:91:9e:e0:9b:ee:1e:67:a8:25:95:0a:
         5e:cf:65:c1:57:a1:65:0d:a3:78:ca:55:e3:2f:0a:51:2f:2c:
         66:73:17:32:39:7e:10:15:c6:19:c9:c9:8b:f3:17:86:92:9e:
         a6:cd:68:a5:2e:2b:59:96:8b:fe:86:9e:30:e6:8c:18:03:2c:
         f4:67:a4:6b:e7:86:02:4a:c2:3b:b1:c5:1e:ea:ba:66:21:81:
         4a:0a:9a:9a:4e:b6:7d:dc:99:17:7e:bb:be:83:17:f1:58:52:
         1c:41:09:26:1b:de:dc:66:6c:d5:0f:85:fc:6a:b5:7b:f6:dc:
         61:ef:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:54 2025 by rpki-client