This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/StBqHhVbzAOkwwHzlzCmHo9tQ1c.roa
File:                     StBqHhVbzAOkwwHzlzCmHo9tQ1c.roa (raw, json)
Hash identifier:          QUXCETHnZrxUrFU/S3ZjEg6K/jCz2IxNCaTuM6qY9ok=
Subject key identifier:   4A:D0:6A:1E:15:5B:CC:03:A4:C3:01:F3:97:30:A6:1E:8F:6D:43:57
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0709
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/StBqHhVbzAOkwwHzlzCmHo9tQ1c.roa
Signing time:             Mon 01 Dec 2025 02:25:52 +0000
ROA not before:           Mon 01 Dec 2025 02:25:52 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:25:52 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=4AD06A1E155BCC03A4C301F39730A61E8F6D4357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:87:f3:38:1d:9c:f5:21:60:49:9d:43:6b:
                    d1:8a:f0:61:fa:ca:3c:16:da:ad:dc:31:0a:63:28:
                    af:fe:58:a3:86:e0:06:51:7f:b4:c5:63:6b:db:14:
                    ec:84:83:8a:e0:4a:df:2c:eb:87:1c:a7:31:75:4c:
                    b9:37:d8:56:d8:cc:3d:8e:64:25:e7:5a:1a:76:2a:
                    53:07:a2:1e:8e:4b:5e:7b:55:32:c6:82:85:23:65:
                    55:a8:d3:3d:ff:44:c0:ed:3e:cb:45:11:aa:34:4f:
                    ad:ff:ac:62:52:cc:52:27:09:ee:37:0b:79:e8:83:
                    ca:62:85:eb:c1:a2:20:93:33:83:f2:0e:1c:a3:6e:
                    ab:59:1b:52:4c:5f:8a:59:ca:5e:4c:b3:76:f5:ce:
                    bb:4d:01:53:57:1f:f2:7f:bf:97:93:93:af:06:d7:
                    ca:38:97:c9:44:7a:fa:be:d4:6d:03:29:4b:e5:cb:
                    97:ae:d8:7e:cb:f7:c5:d5:86:85:6d:be:1c:8f:27:
                    07:3b:41:e4:6a:53:98:0c:cd:5d:d8:9a:89:72:c1:
                    9a:07:81:2c:6e:24:44:e4:74:05:68:56:3a:83:2e:
                    2b:4b:84:e3:3a:49:aa:3a:8e:6b:85:44:78:f4:c6:
                    e8:82:ae:a3:55:e7:6d:04:bc:f9:a5:42:d1:c5:4c:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D0:6A:1E:15:5B:CC:03:A4:C3:01:F3:97:30:A6:1E:8F:6D:43:57
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/StBqHhVbzAOkwwHzlzCmHo9tQ1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:82:2e:1d:58:9e:3b:24:7f:f0:0c:a3:76:ca:1c:c2:6c:
         65:ba:00:c3:b8:65:05:63:f5:80:71:22:23:e6:58:42:79:5c:
         0e:f6:89:74:45:11:ef:e7:03:28:e5:4b:5f:c3:19:ac:39:42:
         92:ce:8a:fb:cb:f9:17:2b:bc:1a:c0:ee:69:a0:d0:79:65:37:
         f2:a9:59:46:89:09:7a:08:08:73:7d:25:78:71:98:14:03:7c:
         2b:e3:98:d0:05:1a:ec:8f:d9:ae:94:8e:c5:75:d2:1a:e5:d8:
         6d:20:03:d0:78:6e:6a:4c:8c:2b:a1:86:59:a5:63:2d:34:44:
         de:6e:8a:3f:93:10:d3:b8:54:95:98:c3:27:0b:ec:55:f7:5b:
         82:b0:9b:5d:7a:d0:f3:ce:e4:2f:97:24:cb:8b:98:b6:44:40:
         c7:86:5a:c4:39:bc:2f:a4:a7:d1:aa:88:ba:6a:15:ee:ef:b8:
         21:87:a3:ae:ea:70:5c:91:fe:2b:e3:e3:bb:5f:1c:0d:06:4e:
         ae:da:9a:0a:86:60:c0:71:2c:3e:48:c4:b3:39:5e:f1:d6:66:
         98:1f:dc:a0:dc:34:f3:ed:c1:31:a6:d2:82:d1:e0:a4:d9:02:
         a4:55:12:10:24:b2:ce:33:01:24:e2:d0:bc:00:fe:f5:c6:75:
         1d:a1:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:28 2025 by rpki-client