This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/S-gvIUMuhWEEGe5I0ZvkvICMtKE.roa
File:                     S-gvIUMuhWEEGe5I0ZvkvICMtKE.roa (raw, json)
Hash identifier:          2gUofsv12rO/iPz1kr0lcXemywYgHtHq0PKH/rtr4/I=
Subject key identifier:   4B:E8:2F:21:43:2E:85:61:04:19:EE:48:D1:9B:E4:BC:80:8C:B4:A1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       074F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/S-gvIUMuhWEEGe5I0ZvkvICMtKE.roa
Signing time:             Mon 01 Dec 2025 02:37:54 +0000
ROA not before:           Mon 01 Dec 2025 02:37:54 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.199.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:37:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=4BE82F21432E85610419EE48D19BE4BC808CB4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:34:69:4e:38:39:60:cf:1a:0c:90:ae:0c:
                    4e:a6:e0:6c:55:c0:45:2e:de:e9:88:06:31:f9:59:
                    4e:3b:a1:b0:98:93:e0:b4:6c:d5:32:d7:1a:7e:fe:
                    40:ec:d0:87:9a:06:e9:e4:2f:3a:dc:15:18:d5:25:
                    6c:f5:72:67:4d:b1:94:39:d5:db:38:a1:0d:76:84:
                    5f:fd:5f:68:03:60:6b:25:e2:8c:ce:40:14:95:c5:
                    a8:5b:cf:3e:5e:06:94:17:0c:d0:6d:8d:44:1b:c9:
                    57:6f:38:c1:d5:44:1d:49:4e:81:bc:77:b3:c8:07:
                    8b:06:22:23:3e:47:bc:31:6a:10:bb:2c:9f:d5:57:
                    ac:83:3e:83:4c:73:b8:c6:2b:ad:a3:59:ff:f9:f7:
                    77:dc:f9:de:fe:eb:09:50:72:a9:46:2b:cd:1d:c3:
                    38:16:28:8e:73:65:a4:d2:fe:15:0d:a1:74:12:1a:
                    d5:b1:4a:5d:78:dc:0d:72:a1:68:b4:fa:ba:3f:74:
                    50:c4:ab:bf:b1:b1:6e:d4:31:8d:89:44:cb:b8:93:
                    9d:50:34:3a:b0:d5:12:0f:9b:2c:fe:7d:12:1d:91:
                    6e:3d:7d:9a:c7:0d:04:d5:7a:cf:23:6c:fa:9b:fe:
                    21:70:04:b8:52:4f:18:c6:8a:1c:ca:2e:e9:68:0f:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E8:2F:21:43:2E:85:61:04:19:EE:48:D1:9B:E4:BC:80:8C:B4:A1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/S-gvIUMuhWEEGe5I0ZvkvICMtKE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:38:6a:3a:21:06:6d:a7:3f:c2:16:bc:08:8b:87:26:00:d1:
         da:ec:16:ec:fd:ea:23:e8:41:51:d9:d7:30:6f:94:f1:d5:44:
         25:59:4d:e0:a0:4d:25:f5:df:9d:42:29:c0:39:15:bd:ed:75:
         27:a3:dc:24:b8:1c:85:38:cc:9a:26:47:4e:8e:b9:2a:ba:df:
         2f:0f:ef:a9:22:4b:8a:b6:b0:59:25:f4:df:bc:da:17:7b:95:
         f8:4e:ef:4b:a4:7d:2b:73:72:ec:12:ae:9c:55:a1:ae:f9:7d:
         18:e9:0d:71:2f:df:48:6a:eb:a9:78:02:b1:71:1c:3b:28:88:
         3c:6f:d1:fe:0a:00:80:11:1c:f2:d7:51:68:f5:96:8f:0b:e5:
         bb:87:9f:1c:6c:43:55:ac:3d:74:f3:1f:9b:81:c2:a6:05:63:
         d0:ba:21:44:46:ab:5b:a2:f6:44:1a:d0:c2:54:d1:c1:cc:1c:
         c3:f6:ff:f4:e8:9d:85:79:76:d4:9c:d1:14:fb:44:fd:32:a1:
         5b:b1:ff:21:a5:80:30:4d:3c:43:65:b4:c5:48:ca:87:11:0d:
         22:ed:93:3f:35:76:82:ee:68:2d:9d:86:ca:96:c5:2d:8b:bf:
         d4:1c:64:99:20:1d:ae:95:ca:10:5d:3a:4e:b3:ca:2c:fb:de:
         9c:90:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:53 2025 by rpki-client