This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XtIGpPcljXw1CqWYikPl7P6zRDU.roa
File:                     XtIGpPcljXw1CqWYikPl7P6zRDU.roa (raw, json)
Hash identifier:          iuTZyf7nVoudSlbUE7dB6R6w5lRBXSx+CTg/08TKTLU=
Subject key identifier:   5E:D2:06:A4:F7:25:8D:7C:35:0A:A5:98:8A:43:E5:EC:FE:B3:44:35
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0612
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XtIGpPcljXw1CqWYikPl7P6zRDU.roa
Signing time:             Mon 01 Dec 2025 01:45:54 +0000
ROA not before:           Mon 01 Dec 2025 01:45:54 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.163.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:45:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=5ED206A4F7258D7C350AA5988A43E5ECFEB34435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:75:dc:5d:51:a9:ce:20:57:f7:1d:ee:d0:
                    b5:a1:f1:5c:33:48:65:e1:bd:91:d3:18:8f:e9:af:
                    bc:09:0a:bb:bc:fa:06:35:18:42:14:08:d7:4c:49:
                    56:9f:b5:b3:4c:bb:78:b3:b5:3a:d0:d6:e6:f4:56:
                    47:0f:8d:0e:f2:81:2f:e3:d4:8b:75:26:d6:07:84:
                    e6:13:c6:93:36:9e:52:5a:a0:23:fe:68:0a:b4:da:
                    58:18:35:7c:c2:a7:68:45:36:2a:43:96:7b:72:ed:
                    e9:22:91:ea:d2:3f:9c:c6:ff:6f:9e:51:3d:d4:11:
                    30:f1:c2:46:c0:d7:07:c9:6b:d8:d1:12:2f:6a:cd:
                    52:1f:c8:35:b1:a9:d9:4b:89:6c:7f:7b:36:30:5b:
                    2c:53:8a:70:26:1a:5a:75:d3:b4:4c:ea:00:07:8d:
                    1a:9f:fc:a6:61:27:13:46:0b:75:29:05:05:db:64:
                    64:4f:34:00:4a:c4:1f:8f:6b:e9:10:ef:13:85:1e:
                    9e:12:6b:03:9e:45:b3:10:3f:2f:be:6d:f1:b2:e1:
                    9a:38:3f:e5:09:2a:12:af:42:31:67:de:dd:b3:05:
                    24:cc:da:7a:8b:e8:45:b1:8b:f7:bb:9c:e8:27:ee:
                    08:89:7d:34:57:96:2a:7f:10:26:1d:8b:16:43:65:
                    75:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:06:A4:F7:25:8D:7C:35:0A:A5:98:8A:43:E5:EC:FE:B3:44:35
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XtIGpPcljXw1CqWYikPl7P6zRDU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.163.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:2d:69:10:a5:68:a6:0c:c5:69:7b:2a:7f:f6:ba:e6:61:65:
         ee:12:63:3a:f8:e8:d3:b5:3c:e5:80:fc:13:6f:a0:2b:5d:b4:
         91:bb:03:b4:e4:ad:d7:60:0a:a4:34:7c:a4:cb:4c:89:f3:5c:
         95:02:b8:5b:80:c2:f7:6f:76:f3:9c:c5:83:8c:28:a6:60:ba:
         1a:4e:07:94:22:8e:b1:63:6e:14:06:b4:2a:55:11:bc:b2:ab:
         0f:18:a7:ee:8a:66:d1:02:e3:37:87:06:0b:5b:9b:42:f3:f7:
         c1:e7:85:8f:13:02:74:fe:84:b4:34:5c:dc:f0:e4:4d:fa:08:
         86:9a:59:03:0b:b1:8b:2f:65:37:72:84:f2:12:e1:e9:98:3d:
         9f:94:dd:1f:ba:51:4a:f9:b7:80:af:d4:26:3c:4d:83:bc:8d:
         40:6f:53:30:01:07:8a:9d:d9:19:59:94:09:1b:87:a6:40:0b:
         29:53:94:58:84:0e:3e:5f:82:82:1d:36:5e:3f:96:43:b5:66:
         91:aa:65:62:47:68:40:f3:65:2f:f7:a2:e1:c5:01:fe:e3:ca:
         79:0f:2d:6a:2d:67:e1:b9:29:10:fb:1c:eb:b2:c4:d9:3e:3e:
         49:61:16:6f:f2:4f:4d:5c:9f:09:9c:63:84:d0:db:ca:72:e7:
         ab:55:94:dd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MTQ1NTRaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFRDIwNkE0RjcyNThE
N0MzNTBBQTU5ODhBNDNFNUVDRkVCMzQ0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTf3XcXVGpziBX9x3u0LWh8VwzSGXhvZHTGI/pr7wJCru8+gY1
GEIUCNdMSVaftbNMu3iztTrQ1ub0VkcPjQ7ygS/j1It1JtYHhOYTxpM2nlJaoCP+
aAq02lgYNXzCp2hFNipDlnty7ekikerSP5zG/2+eUT3UETDxwkbA1wfJa9jREi9q
zVIfyDWxqdlLiWx/ezYwWyxTinAmGlp107RM6gAHjRqf/KZhJxNGC3UpBQXbZGRP
NABKxB+Pa+kQ7xOFHp4SawOeRbMQPy++bfGy4Zo4P+UJKhKvQjFn3t2zBSTM2nqL
6EWxi/e7nOgn7giJfTRXlip/ECYdixZDZXU/AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUXtIGpPcljXw1CqWYikPl7P6zRDUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1h0SUdwUGNsalh3MUNxV1lpa1BsN1A2elJEVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBqozANBgkqhkiG9w0BAQsFAAOCAQEAii1pEKVopgzFaXsqf/a65mFl7hJj
Ovjo07U85YD8E2+gK120kbsDtOSt12AKpDR8pMtMifNclQK4W4DC929285zFg4wo
pmC6Gk4HlCKOsWNuFAa0KlURvLKrDxin7opm0QLjN4cGC1ubQvP3weeFjxMCdP6E
tDRc3PDkTfoIhppZAwuxiy9lN3KE8hLh6Zg9n5TdH7pRSvm3gK/UJjxNg7yNQG9T
MAEHip3ZGVmUCRuHpkALKVOUWIQOPl+Cgh02Xj+WQ7VmkaplYkdoQPNlL/ei4cUB
/uPKeQ8tai1n4bkpEPsc67LE2T4+SWEWb/JPTVyfCZxjhNDbynLnq1WU3Q==
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:57 2025 by rpki-client