This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/U6k1evulTuRDlNSPIVac64WvM3o.roa
File:                     U6k1evulTuRDlNSPIVac64WvM3o.roa (raw, json)
Hash identifier:          t/JBLLvjxKpXHMx3MWPtFeLCw+PsV6Y+3a6O1O09ByQ=
Subject key identifier:   53:A9:35:7A:FB:A5:4E:E4:43:94:D4:8F:21:56:9C:EB:85:AF:33:7A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0640
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U6k1evulTuRDlNSPIVac64WvM3o.roa
Signing time:             Mon 01 Dec 2025 01:53:54 +0000
ROA not before:           Mon 01 Dec 2025 01:53:54 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:53:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=53A9357AFBA54EE44394D48F21569CEB85AF337A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f4:5f:75:06:ad:0b:38:eb:36:d6:8d:77:9e:
                    02:b6:a6:aa:0e:f4:a6:4b:90:c7:3c:52:a1:f5:73:
                    fc:ab:1b:a0:a8:56:52:16:db:6f:ab:cc:db:41:d6:
                    54:47:92:3b:99:8c:3e:93:72:ba:f0:24:ec:e5:93:
                    f3:60:44:c7:0c:0d:cc:36:bd:b7:ba:6d:54:7a:1f:
                    b6:8e:91:39:93:d4:98:a4:b4:9b:a7:70:9a:a3:39:
                    19:60:f6:06:01:6a:3b:52:70:97:72:a6:4a:fc:58:
                    49:99:26:e8:16:9a:9e:eb:79:9f:27:c1:b7:52:10:
                    c4:f8:d6:67:a7:cf:fa:1a:59:51:df:a1:f0:4c:95:
                    da:70:59:19:7f:1f:c3:94:00:51:7b:68:47:cd:8e:
                    7c:f6:9b:6f:41:3f:5e:f6:fd:f9:f9:cc:3c:01:5f:
                    eb:c7:21:41:9c:88:17:41:33:ba:7e:89:4f:5d:00:
                    9e:a1:49:73:9b:cd:fa:0b:ed:4f:97:37:be:00:1d:
                    11:0e:fc:2d:ff:2c:ed:eb:02:a2:f1:6c:cc:8e:32:
                    ec:12:da:b8:f0:63:35:a7:a9:30:4b:99:fb:f2:7f:
                    25:4e:b3:08:52:21:47:19:bd:4c:c7:fb:ad:b4:40:
                    a8:9c:07:2a:97:87:55:b0:7b:0c:49:78:5a:3c:fb:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A9:35:7A:FB:A5:4E:E4:43:94:D4:8F:21:56:9C:EB:85:AF:33:7A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U6k1evulTuRDlNSPIVac64WvM3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:82:ca:50:ca:aa:12:b7:2a:70:41:8b:84:cf:2a:d7:f6:
         51:85:e1:d8:49:11:04:90:5f:5a:07:44:e4:1f:17:5e:3f:3f:
         65:ee:4d:62:df:7b:d3:12:04:82:1a:b6:e7:04:b1:44:c8:e2:
         cc:2b:2e:b9:03:11:3b:82:c5:c1:a5:51:e4:d7:ad:e7:48:99:
         ce:70:88:e2:21:68:cc:2e:b3:05:b2:21:54:58:a2:3c:ea:28:
         00:fc:96:57:57:1c:8a:79:de:30:c9:bd:5f:75:be:35:2b:f3:
         41:fb:68:e1:f2:8a:dc:ac:1f:36:ee:cc:89:dd:88:fb:73:0e:
         34:6a:ec:53:af:68:23:30:fe:a9:fd:dc:68:5c:3a:3f:bb:b9:
         9c:38:67:99:4b:2b:92:7d:5f:5e:f7:b9:e9:a2:21:6b:29:a0:
         b3:da:14:c9:53:df:da:3b:d8:8a:56:8a:92:df:10:6f:f2:de:
         2b:a2:dd:5e:71:c6:f2:4d:3f:d9:d6:b4:d1:2f:ae:e2:d9:61:
         83:21:ab:6f:94:5b:20:49:65:d4:79:11:0f:05:a2:df:56:6e:
         4d:01:e6:a3:0a:8e:01:0f:4e:80:a7:6f:1d:7c:f1:7a:1c:52:
         69:a2:bd:ce:6b:dd:67:67:e4:79:50:ae:76:f8:69:59:6f:5c:
         04:62:72:9e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MTUzNTRaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUzQTkzNTdBRkJBNTRF
RTQ0Mzk0RDQ4RjIxNTY5Q0VCODVBRjMzN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDx9F91Bq0LOOs21o13ngK2pqoO9KZLkMc8UqH1c/yrG6CoVlIW
22+rzNtB1lRHkjuZjD6TcrrwJOzlk/NgRMcMDcw2vbe6bVR6H7aOkTmT1JiktJun
cJqjORlg9gYBajtScJdypkr8WEmZJugWmp7reZ8nwbdSEMT41menz/oaWVHfofBM
ldpwWRl/H8OUAFF7aEfNjnz2m29BP172/fn5zDwBX+vHIUGciBdBM7p+iU9dAJ6h
SXObzfoL7U+XN74AHREO/C3/LO3rAqLxbMyOMuwS2rjwYzWnqTBLmfvyfyVOswhS
IUcZvUzH+620QKicByqXh1WwewxJeFo8+/LhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUU6k1evulTuRDlNSPIVac64WvM3owHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1U2azFldnVsVHVSRGxOU1BJVmFjNjRXdk0zby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHS/Y4wDQYJKoZIhvcNAQELBQADggEBABtKgspQyqoStypwQYuEzyrX9lGF
4dhJEQSQX1oHROQfF14/P2XuTWLfe9MSBIIatucEsUTI4swrLrkDETuCxcGlUeTX
redImc5wiOIhaMwuswWyIVRYojzqKAD8lldXHIp53jDJvV91vjUr80H7aOHyitys
HzbuzIndiPtzDjRq7FOvaCMw/qn93GhcOj+7uZw4Z5lLK5J9X173uemiIWspoLPa
FMlT39o72IpWipLfEG/y3iui3V5xxvJNP9nWtNEvruLZYYMhq2+UWyBJZdR5EQ8F
ot9Wbk0B5qMKjgEPToCnbx188XocUmmivc5r3Wdn5HlQrnb4aVlvXARicp4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:00 2025 by rpki-client