This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/U0n8sf_kfpDQl7N37Nr2b5kq6lA.roa
File:                     U0n8sf_kfpDQl7N37Nr2b5kq6lA.roa (raw, json)
Hash identifier:          w6XS0lZYqgPDp1rN03CDEpcgfuqlhXFpUKSPtBRG2uA=
Subject key identifier:   53:49:FC:B1:FF:E4:7E:90:D0:97:B3:77:EC:DA:F6:6F:99:2A:EA:50
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0631
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U0n8sf_kfpDQl7N37Nr2b5kq6lA.roa
Signing time:             Mon 01 Dec 2025 01:50:07 +0000
ROA not before:           Mon 01 Dec 2025 01:50:07 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        59.128.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:50:07 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=5349FCB1FFE47E90D097B377ECDAF66F992AEA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:28:6e:c9:62:87:c8:97:5b:e2:6b:8b:2c:
                    67:d6:1f:7a:4c:52:fc:3c:1a:88:62:70:9c:0c:83:
                    59:1d:71:e3:89:24:f4:11:1b:b6:5b:15:14:24:3d:
                    02:82:dd:77:5f:01:20:2b:10:3b:1b:0f:2e:c2:f6:
                    13:6d:cd:80:b0:92:77:17:a9:bd:d1:7b:77:59:34:
                    ba:9e:94:e5:e4:ff:52:1b:ed:63:88:38:76:be:3d:
                    89:ef:9c:49:b9:a1:c2:ef:f5:f9:be:44:16:ac:fc:
                    c0:fc:f3:18:6a:90:e1:f2:23:4e:cc:04:1c:ed:e3:
                    78:f3:38:44:09:06:ea:55:09:7c:93:b7:0d:c6:02:
                    4a:e8:e2:d3:55:46:14:0d:58:b9:1f:8f:11:4e:fb:
                    07:af:ab:3f:bc:be:8b:29:bf:d1:84:7a:24:23:3b:
                    94:34:3a:ab:3d:09:d6:a7:49:c9:4b:be:de:f9:14:
                    9c:ef:69:66:ef:4a:e5:ae:1c:bc:be:ca:92:f8:94:
                    a8:52:ea:50:d4:17:03:a6:58:cb:6d:6e:5e:37:d9:
                    43:8c:33:41:a7:07:bd:d5:71:98:72:10:f1:10:92:
                    b3:2d:a4:0a:c8:a0:c1:75:fd:48:94:c3:9c:7d:21:
                    a7:0a:95:a4:bc:9c:17:7e:5e:9a:3d:e3:55:b8:92:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:49:FC:B1:FF:E4:7E:90:D0:97:B3:77:EC:DA:F6:6F:99:2A:EA:50
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U0n8sf_kfpDQl7N37Nr2b5kq6lA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.128.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:74:2c:3c:d6:25:d5:a5:36:bc:a4:0f:0b:b0:a6:dc:77:f3:
         93:48:69:68:6e:8b:b4:9f:ea:f3:df:8a:0b:a1:8e:29:41:93:
         7b:83:8c:af:5b:84:4f:0d:84:73:76:1c:81:f4:26:f3:28:f9:
         da:0b:1a:51:09:95:54:54:28:31:b8:c3:92:53:df:2b:b0:2f:
         2f:02:62:36:ab:ef:d7:e9:5e:09:9d:f8:20:8b:f1:de:b3:f8:
         04:27:17:3e:66:7d:48:0f:1e:c7:aa:12:05:98:17:f6:9c:fe:
         66:e5:b3:d6:af:81:19:44:28:64:3c:c8:6b:a3:e3:de:32:91:
         ac:27:90:9e:be:4e:47:04:f0:d6:bc:6a:65:c6:25:35:4d:f7:
         79:74:24:a1:2e:76:b9:57:d2:4b:f3:9f:9b:a8:28:2e:1f:f3:
         ab:45:13:a7:c5:a7:50:eb:a5:56:2d:8f:10:1a:15:52:ca:fb:
         60:87:8f:23:7f:20:bc:b3:93:6b:76:24:3a:ae:43:22:fd:21:
         d2:b4:df:aa:a9:37:71:e3:8a:b4:12:b3:5b:bd:92:c7:6b:dc:
         60:7f:f7:5d:4b:f6:37:0d:02:d4:cc:b2:54:13:12:eb:6a:55:
         51:75:e9:eb:7d:d2:3b:ab:fd:76:c6:7f:9b:86:9f:09:e5:e9:
         e4:25:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:48 2025 by rpki-client