This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TbWxVeB9US-amdUQL2cb6ntH5AQ.roa
File:                     TbWxVeB9US-amdUQL2cb6ntH5AQ.roa (raw, json)
Hash identifier:          o9RoYNvZtS33IPcpW61umoxcu+3/nvGgxbWSQAXAaKE=
Subject key identifier:   4D:B5:B1:55:E0:7D:51:2F:9A:99:D5:10:2F:67:1B:EA:7B:47:E4:04
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05C9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TbWxVeB9US-amdUQL2cb6ntH5AQ.roa
Signing time:             Mon 01 Dec 2025 01:34:03 +0000
ROA not before:           Mon 01 Dec 2025 01:34:03 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.198.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:34:03 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=4DB5B155E07D512F9A99D5102F671BEA7B47E404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:13:8b:5d:45:bd:8a:9b:b0:49:d2:2b:05:e0:
                    30:70:f8:3e:78:dc:cf:17:1c:13:b9:97:0d:69:12:
                    4b:5f:cd:67:c2:1a:40:9f:a1:ff:d0:58:38:52:bb:
                    4e:d7:72:1e:26:db:9a:c9:f9:ff:ef:cb:c2:f1:fc:
                    ff:34:c5:6a:0c:ae:07:6a:6a:23:d4:f6:62:46:3f:
                    cf:ba:75:87:e6:5c:31:1b:a4:83:2f:50:dc:d9:f5:
                    96:ed:35:1f:4a:74:b4:de:c0:9a:30:17:54:11:6f:
                    c4:81:12:20:e0:19:00:6d:4c:04:c2:b0:21:39:d9:
                    b0:21:c4:14:f8:5f:be:b7:85:f3:a2:a6:06:72:1a:
                    87:3b:90:ad:75:ed:0e:c4:2b:df:67:f7:63:ec:8c:
                    23:94:b6:22:b2:51:2e:34:fd:26:e5:3b:ff:dd:1d:
                    a3:57:15:00:15:e6:87:25:6f:2e:db:ac:9e:b5:02:
                    c1:c2:a8:63:cd:89:98:9e:75:74:05:39:85:6d:c3:
                    78:f7:9c:4f:05:c9:d2:74:dc:2c:94:81:0a:65:52:
                    a7:d7:ac:e9:b7:5d:54:da:12:19:85:8e:c2:8e:b3:
                    45:81:61:08:7c:52:51:44:4d:62:ef:5f:3a:e1:fb:
                    01:9c:4e:ab:de:b2:61:45:32:8e:8e:0d:db:85:fc:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:B1:55:E0:7D:51:2F:9A:99:D5:10:2F:67:1B:EA:7B:47:E4:04
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TbWxVeB9US-amdUQL2cb6ntH5AQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:fa:6d:43:d7:b1:60:6e:d7:ee:f0:16:f1:fd:13:a9:e8:33:
         c9:63:e7:8b:44:ad:12:bf:9a:d8:28:14:a1:35:80:c1:fc:49:
         70:e0:d9:f8:93:03:01:3d:f0:c5:74:76:27:a9:e9:37:bf:44:
         d4:99:7d:25:90:c7:5f:9a:00:5d:c4:6e:88:fb:a1:22:8a:bc:
         0f:ca:0a:ab:f3:03:0c:49:f0:51:b8:d8:6e:60:b1:40:3b:9d:
         88:d8:02:a6:3c:fa:ab:75:10:18:71:ce:2b:e3:d6:00:14:b4:
         dd:a7:f4:ef:4c:8f:1f:0f:35:1d:fc:ac:f4:df:94:3c:8e:03:
         2c:8a:55:2f:50:aa:ba:c2:6f:60:94:51:1f:5b:56:8f:d1:1d:
         10:a7:b0:f7:70:a0:84:35:c8:ac:b4:d6:03:23:1b:a5:a3:9b:
         6a:26:48:73:3e:a3:44:f1:d1:e1:1a:79:1d:c0:f4:a7:93:a2:
         b8:1d:db:39:8b:13:e1:b6:86:dd:85:8a:15:32:3c:28:a5:99:
         40:79:fe:5f:a0:80:8b:79:92:7b:bf:50:58:31:0a:cb:59:75:
         d5:53:d9:07:61:fd:ed:bb:00:42:ac:0f:1f:34:1b:4b:87:e7:
         24:fe:05:6f:05:84:b5:53:22:1b:46:32:00:da:9a:bd:b6:85:
         e9:ea:08:ed
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MTM0MDNaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREQjVCMTU1RTA3RDUx
MkY5QTk5RDUxMDJGNjcxQkVBN0I0N0U0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqE4tdRb2Km7BJ0isF4DBw+D543M8XHBO5lw1pEktfzWfCGkCf
of/QWDhSu07Xch4m25rJ+f/vy8Lx/P80xWoMrgdqaiPU9mJGP8+6dYfmXDEbpIMv
UNzZ9ZbtNR9KdLTewJowF1QRb8SBEiDgGQBtTATCsCE52bAhxBT4X763hfOipgZy
Goc7kK117Q7EK99n92PsjCOUtiKyUS40/SblO//dHaNXFQAV5oclby7brJ61AsHC
qGPNiZiedXQFOYVtw3j3nE8FydJ03CyUgQplUqfXrOm3XVTaEhmFjsKOs0WBYQh8
UlFETWLvXzrh+wGcTqvesmFFMo6ODduF/BB5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTbWxVeB9US+amdUQL2cb6ntH5AQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1RiV3hWZUI5VVMtYW1kVVFMMmNiNm50SDVBUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADSxkYwDQYJKoZIhvcNAQELBQADggEBACL6bUPXsWBu1+7wFvH9E6noM8lj
54tErRK/mtgoFKE1gMH8SXDg2fiTAwE98MV0diep6Te/RNSZfSWQx1+aAF3Eboj7
oSKKvA/KCqvzAwxJ8FG42G5gsUA7nYjYAqY8+qt1EBhxzivj1gAUtN2n9O9Mjx8P
NR38rPTflDyOAyyKVS9QqrrCb2CUUR9bVo/RHRCnsPdwoIQ1yKy01gMjG6Wjm2om
SHM+o0Tx0eEaeR3A9KeTorgd2zmLE+G2ht2FihUyPCilmUB5/l+ggIt5knu/UFgx
CstZddVT2Qdh/e27AEKsDx80G0uH5yT+BW8FhLVTIhtGMgDamr22henqCO0=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:36 2025 by rpki-client