This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/WjErzpCtAu3ajSOuCgxufn26tiE.roa
File:                     WjErzpCtAu3ajSOuCgxufn26tiE.roa (raw, json)
Hash identifier:          i4fMtZmae0W0lvNqmG2pl9XsDQ73puk4jpJ/81Rn+dE=
Subject key identifier:   5A:31:2B:CE:90:AD:02:ED:DA:8D:23:AE:0A:0C:6E:7E:7D:BA:B6:21
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       071D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WjErzpCtAu3ajSOuCgxufn26tiE.roa
Signing time:             Mon 01 Dec 2025 02:29:58 +0000
ROA not before:           Mon 01 Dec 2025 02:29:58 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        59.128.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:29:58 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=5A312BCE90AD02EDDA8D23AE0A0C6E7E7DBAB621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:18:88:06:5d:51:be:c6:a5:62:18:ce:79:
                    3b:6a:35:d2:d7:0d:13:4e:9b:ca:ec:f9:cb:98:0a:
                    44:29:e8:24:11:37:fa:9a:1f:bc:24:ba:67:71:d3:
                    72:b4:c1:98:84:73:ad:1c:31:f9:8b:46:7a:56:60:
                    66:8c:eb:55:03:7b:ac:e7:11:9f:8c:c2:40:82:29:
                    06:87:19:be:2b:40:0b:e5:31:03:a4:f5:4a:32:66:
                    12:ba:d1:a3:9d:b9:4b:dd:8b:67:f9:18:e2:c8:f3:
                    a5:55:de:9c:fb:00:e6:6c:cb:9b:6c:7a:e9:f8:31:
                    12:2a:f2:0f:44:e0:30:fe:50:20:04:5c:13:ca:35:
                    a8:ce:d4:98:2d:1a:81:3c:1b:41:13:d2:da:1c:d1:
                    0a:0f:c2:d5:3e:99:72:10:ba:a7:9d:f2:14:30:1c:
                    01:a9:17:02:1b:20:86:f2:a8:e0:0e:26:e1:5a:22:
                    58:ea:1b:b4:5f:69:09:d2:d6:08:9c:20:61:ed:17:
                    8d:b3:73:03:31:70:c0:e5:5b:03:3a:ce:47:16:1d:
                    da:06:24:3e:55:f4:a1:e0:78:22:66:60:55:1b:8e:
                    fa:b9:65:86:2c:eb:44:8e:d8:c7:8c:6a:65:8c:9d:
                    88:92:37:ec:61:4a:9e:3c:f0:d4:b7:94:3b:3e:ca:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:31:2B:CE:90:AD:02:ED:DA:8D:23:AE:0A:0C:6E:7E:7D:BA:B6:21
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WjErzpCtAu3ajSOuCgxufn26tiE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.128.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:04:33:de:e9:d0:61:18:c7:60:39:89:af:02:61:bd:eb:37:
         97:18:93:5c:83:c7:6e:cb:42:83:2e:fd:6c:7c:b4:ec:a6:fc:
         4d:02:c2:68:a4:9c:23:24:da:a7:52:9f:5d:09:e4:7c:27:20:
         6f:b8:2d:49:b9:70:23:45:cc:50:c3:1d:ee:4b:2d:73:19:e1:
         74:9c:e5:93:10:61:2a:46:fa:1d:0d:42:ea:62:52:3f:80:3d:
         48:3b:a6:96:0e:c9:46:b1:00:5f:34:3d:d1:33:b3:27:a3:f3:
         67:2c:94:ef:28:0e:a2:3c:e1:c9:ca:41:53:53:14:bc:5e:e1:
         d1:3b:6c:5c:9e:e5:50:5f:9c:2e:63:9e:37:d9:76:f2:e9:b6:
         f9:b8:3e:ff:6a:44:bc:5f:04:64:2e:ff:29:9c:38:30:e1:4f:
         cf:d9:c3:67:68:1a:9b:8f:8c:4f:84:38:aa:04:2e:d1:59:39:
         52:a7:8b:f2:f4:06:cf:33:49:dc:90:42:63:04:0b:c5:55:2c:
         f7:14:40:28:fd:93:b7:76:55:83:97:b0:af:36:10:e6:24:c2:
         c3:d5:8c:0a:1f:a0:49:40:c3:67:38:29:59:a3:f6:ef:ff:01:
         51:b7:e1:00:fc:c8:e5:5d:26:ae:2c:c7:59:3b:f5:79:05:a5:
         e8:7b:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:03 2025 by rpki-client