This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TXam0V-X9ClsOEJLMFAX5XdppA4.roa
File:                     TXam0V-X9ClsOEJLMFAX5XdppA4.roa (raw, json)
Hash identifier:          wpGXvec/g7VKIBRrJ7BR4raLQE/I1XjZw/83aQikzg0=
Subject key identifier:   4D:76:A6:D1:5F:97:F4:29:6C:38:42:4B:30:50:17:E5:77:69:A4:0E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06B4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TXam0V-X9ClsOEJLMFAX5XdppA4.roa
Signing time:             Mon 01 Dec 2025 02:14:01 +0000
ROA not before:           Mon 01 Dec 2025 02:14:01 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.141.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:14:01 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=4D76A6D15F97F4296C38424B305017E57769A40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:49:8f:2e:15:37:e8:cf:f9:2c:89:13:3c:
                    d9:a8:97:25:a4:e8:ae:8c:1f:95:2f:c8:48:c7:4f:
                    bc:ca:f4:5d:da:5c:88:ef:9e:eb:33:13:de:15:d7:
                    9f:f4:30:f4:14:43:90:a0:d9:05:2e:47:fb:cd:25:
                    58:cd:cb:70:56:a8:4e:34:0c:3e:96:06:cd:fe:70:
                    f9:65:95:a9:df:47:e8:5c:14:1a:4a:4c:e2:44:f4:
                    f7:95:cc:10:72:c6:79:43:73:1b:ac:c9:e0:63:b8:
                    83:4d:cf:a2:69:f9:b1:40:75:a7:69:23:27:6b:27:
                    5e:db:dc:5c:20:26:98:50:7b:bc:51:92:2f:09:2c:
                    5c:30:92:69:73:da:a7:54:d2:0d:da:26:99:0c:88:
                    99:cb:db:1d:4d:3c:98:e0:31:b7:41:86:f5:54:3b:
                    90:4b:69:d1:70:ba:80:11:ea:1b:16:76:fa:31:cf:
                    84:ed:61:a4:fc:d7:35:9d:ff:35:92:a2:43:65:94:
                    60:65:15:aa:74:8d:d7:64:7c:af:7e:6d:0b:a3:a6:
                    97:73:75:2c:e2:cc:67:7c:5f:9e:78:dd:52:8a:c5:
                    3d:84:9b:60:c3:38:71:d9:88:31:d3:57:d2:48:8d:
                    66:ee:fb:a6:c9:2e:c9:cc:18:a9:3a:40:7d:40:4f:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:76:A6:D1:5F:97:F4:29:6C:38:42:4B:30:50:17:E5:77:69:A4:0E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TXam0V-X9ClsOEJLMFAX5XdppA4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:8a:79:ea:1f:97:e9:a7:79:91:92:12:cc:18:73:8a:6f:
         49:d7:f5:fa:7e:a3:b9:a0:ea:5b:ea:ec:76:cb:e9:c5:45:6a:
         c4:1f:45:1c:f2:f0:a3:65:3a:76:13:ca:3c:5c:94:0c:8e:7d:
         b2:4d:9c:8c:ad:0d:55:4e:62:15:8c:33:1b:0a:ee:08:52:31:
         66:09:e9:0b:79:b7:7d:8a:2c:ce:cc:cc:a6:0c:3b:67:2f:43:
         7a:f8:c9:25:ff:29:b2:a3:6b:96:df:2a:ab:16:be:ec:9c:6d:
         22:0c:78:42:b1:a8:1f:ce:25:1a:3f:d5:e5:d8:5c:26:5a:0f:
         db:73:c0:87:da:d7:2b:4c:d2:ce:60:0e:3e:5e:97:6b:6d:9f:
         34:e3:5d:99:05:3b:2c:0a:e0:62:08:45:f0:7d:30:ea:c8:0f:
         e0:a8:c8:37:fe:30:01:a9:e9:0e:7e:61:0d:43:ef:04:5b:bc:
         6d:0f:b2:f2:7e:5d:01:86:37:1b:c1:c5:20:13:4f:42:ff:dd:
         92:b2:32:ad:55:45:6b:4f:ec:d3:83:1f:2f:37:17:65:92:98:
         f2:39:f0:bb:de:2f:dd:19:43:a0:bc:4e:5b:03:9b:37:17:e6:
         a0:be:53:e7:92:07:c2:5d:8a:8f:92:4f:27:55:d8:5c:6d:50:
         4e:48:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:05 2025 by rpki-client