This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YX6WhW1AE5GrBKoouEimYHagcgY.roa
File:                     YX6WhW1AE5GrBKoouEimYHagcgY.roa (raw, json)
Hash identifier:          rWxRAiKef7jz9m+lxVgUOE6oQB2j89QQGxUhHprm678=
Subject key identifier:   61:7E:96:85:6D:40:13:91:AB:04:AA:28:B8:48:A6:60:76:A0:72:06
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0707
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YX6WhW1AE5GrBKoouEimYHagcgY.roa
Signing time:             Mon 01 Dec 2025 02:25:51 +0000
ROA not before:           Mon 01 Dec 2025 02:25:51 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:25:51 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=617E96856D401391AB04AA28B848A66076A07206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:a8:87:19:a0:71:33:02:6e:71:5d:6b:c9:
                    c8:05:ef:2b:28:63:e5:15:3d:81:cb:ad:39:9c:ba:
                    dd:9d:75:ff:bf:0d:8f:4c:b0:f8:3e:ff:e9:a5:86:
                    3a:83:d2:c1:1b:a3:a0:02:6e:06:a7:29:db:ce:43:
                    fc:12:0d:48:bf:e6:d2:f2:e3:8d:d7:8c:35:db:4a:
                    2a:68:71:f2:55:34:46:8d:3a:01:7b:2c:d9:5b:49:
                    ee:33:09:50:35:9d:66:19:18:2a:80:73:bf:03:d9:
                    d7:60:6c:30:ab:7a:17:a7:04:81:ff:b9:76:b7:2a:
                    fe:76:be:eb:14:e6:57:9d:c5:76:65:5a:a0:8d:80:
                    a1:6a:c5:23:1a:7c:53:36:06:a3:73:d5:04:6f:df:
                    b4:e3:86:aa:03:23:99:11:be:fb:03:63:18:b1:82:
                    ad:02:04:17:b9:b2:e6:de:7d:b6:af:15:43:c0:c9:
                    45:79:41:9e:b3:3e:b9:1e:40:47:3f:f5:44:dc:25:
                    db:72:03:49:86:35:59:9d:06:33:31:3f:04:ce:58:
                    58:3c:d4:c9:25:04:25:27:b5:8c:fe:82:b7:1a:7c:
                    a3:47:b2:63:72:5e:18:cc:0b:bf:e2:16:66:a0:4e:
                    b6:e1:5e:b7:14:55:b7:f6:f2:ce:04:cb:3a:fe:b8:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7E:96:85:6D:40:13:91:AB:04:AA:28:B8:48:A6:60:76:A0:72:06
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YX6WhW1AE5GrBKoouEimYHagcgY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:84:82:30:13:28:79:a7:a3:8c:b8:eb:d4:49:8f:96:c1:e1:
         b0:9a:1d:cf:02:e9:29:2a:86:3f:67:24:d4:77:0e:f8:aa:e6:
         a7:9e:0f:cb:97:8b:64:9e:6f:d4:21:ca:e0:74:76:f6:02:4e:
         45:64:86:9b:99:5f:66:2a:15:67:5a:76:90:b7:b4:f3:34:12:
         21:82:25:2b:58:28:4f:16:8d:19:bb:87:16:3c:9b:32:ba:43:
         fd:56:af:76:0a:58:1b:2a:96:b5:68:5c:81:ef:f7:78:4b:4d:
         2f:6f:b3:91:e9:ae:43:75:81:f0:63:33:25:f1:02:05:47:fc:
         ad:6c:0d:c3:39:d6:c1:1a:ed:b7:1d:54:b4:f0:b2:93:f6:af:
         2c:35:61:1f:bf:c4:4c:e7:e5:85:b1:61:2d:31:93:fb:1d:9b:
         0f:ba:fa:25:ca:0c:21:36:9e:65:b2:d0:b9:12:be:a8:4b:35:
         64:46:83:8b:23:2c:dd:c8:6f:8e:76:91:8b:f7:45:9f:3f:bd:
         48:a4:de:db:f8:07:4c:64:53:d1:cc:19:70:f2:91:ee:38:14:
         fb:3e:4d:93:75:3e:d7:c6:0f:5a:d0:6b:52:51:f1:52:b5:83:
         79:89:fe:2c:5a:cf:2f:d2:e5:7f:b7:33:5d:ac:37:a2:89:c4:
         9a:df:50:d5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MjI1NTFaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYxN0U5Njg1NkQ0MDEz
OTFBQjA0QUEyOEI4NDhBNjYwNzZBMDcyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWsKiHGaBxMwJucV1rycgF7ysoY+UVPYHLrTmcut2ddf+/DY9M
sPg+/+mlhjqD0sEbo6ACbganKdvOQ/wSDUi/5tLy443XjDXbSipocfJVNEaNOgF7
LNlbSe4zCVA1nWYZGCqAc78D2ddgbDCrehenBIH/uXa3Kv52vusU5ledxXZlWqCN
gKFqxSMafFM2BqNz1QRv37TjhqoDI5kRvvsDYxixgq0CBBe5subefbavFUPAyUV5
QZ6zPrkeQEc/9UTcJdtyA0mGNVmdBjMxPwTOWFg81MklBCUntYz+grcafKNHsmNy
XhjMC7/iFmagTrbhXrcUVbf28s4Eyzr+uFrdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUYX6WhW1AE5GrBKoouEimYHagcgYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1lYNldoVzFBRTVHckJLb291RWltWUhhZ2NnWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADTCoUwDQYJKoZIhvcNAQELBQADggEBAJyEgjATKHmno4y469RJj5bB4bCa
Hc8C6Skqhj9nJNR3Dviq5qeeD8uXi2Seb9QhyuB0dvYCTkVkhpuZX2YqFWdadpC3
tPM0EiGCJStYKE8WjRm7hxY8mzK6Q/1Wr3YKWBsqlrVoXIHv93hLTS9vs5HprkN1
gfBjMyXxAgVH/K1sDcM51sEa7bcdVLTwspP2ryw1YR+/xEzn5YWxYS0xk/sdmw+6
+iXKDCE2nmWy0LkSvqhLNWRGg4sjLN3Ib452kYv3RZ8/vUik3tv4B0xkU9HMGXDy
ke44FPs+TZN1PtfGD1rQa1JR8VK1g3mJ/ixazy/S5X+3M12sN6KJxJrfUNU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:44 2025 by rpki-client