This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YtC8wns9eNmcc3HNCEdjbWgr8cA.roa
File:                     YtC8wns9eNmcc3HNCEdjbWgr8cA.roa (raw, json)
Hash identifier:          BPXFDT7edMqz9N40kBTXuyASAfcSM6/Y6vt3jpl4TLM=
Subject key identifier:   62:D0:BC:C2:7B:3D:78:D9:9C:73:71:CD:08:47:63:6D:68:2B:F1:C0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06D1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YtC8wns9eNmcc3HNCEdjbWgr8cA.roa
Signing time:             Mon 01 Dec 2025 02:17:57 +0000
ROA not before:           Mon 01 Dec 2025 02:17:57 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.5.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745 (0x6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:17:57 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=62D0BCC27B3D78D99C7371CD0847636D682BF1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:42:ab:19:0e:ef:0d:fd:b8:03:3f:ca:2a:
                    2f:44:12:f8:06:54:bf:e6:4a:8b:ad:aa:24:19:21:
                    b2:4c:6f:07:af:e7:4a:9c:4e:d6:ff:3e:a5:ec:a4:
                    34:a1:49:95:52:f5:49:e6:e8:10:9f:65:91:0f:c6:
                    ad:63:37:78:16:4b:ab:ce:46:0e:be:5c:46:2e:96:
                    b7:59:a0:d5:b4:06:45:76:64:b2:53:c6:ae:36:2c:
                    22:b6:f8:1c:4e:1a:cd:44:11:ac:2d:df:5a:40:9b:
                    6c:24:4d:62:33:e9:a2:da:e9:ff:8e:6b:42:86:2d:
                    6c:dc:2f:67:69:68:1b:86:b9:7e:76:e4:a3:54:cb:
                    48:05:30:c1:7b:b1:35:6b:1b:d7:b4:c2:2a:4e:6f:
                    f8:6a:0a:95:b2:f0:35:73:0c:82:1b:da:81:9f:e7:
                    71:78:6c:1e:a6:f7:25:17:04:c4:d5:f7:59:5e:ed:
                    9b:35:03:aa:5e:0a:49:ab:de:f4:aa:51:dd:9b:4e:
                    80:2a:0e:61:2b:27:51:50:20:fa:b9:dd:c6:d0:6f:
                    77:8c:a8:50:24:dc:2f:c5:9e:02:71:d9:31:3a:9d:
                    8e:94:da:22:5b:f0:69:c7:5d:61:ff:91:2f:e4:dd:
                    41:f9:80:0e:2b:ab:90:b2:fe:4e:59:91:8b:0f:17:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D0:BC:C2:7B:3D:78:D9:9C:73:71:CD:08:47:63:6D:68:2B:F1:C0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YtC8wns9eNmcc3HNCEdjbWgr8cA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:d8:a2:36:59:8c:42:31:8c:39:d0:dc:40:22:d1:90:2e:
         1e:87:36:8f:d2:92:b9:2c:96:70:4a:e6:47:0a:2a:c4:fa:c2:
         e9:48:e3:1c:15:e2:6f:0b:74:2d:4c:15:d2:d4:89:6a:4a:ed:
         86:55:61:c8:cd:4a:fe:5c:69:d6:90:b8:49:27:42:3f:30:93:
         26:b0:83:27:89:b3:28:b0:06:c5:80:80:cb:71:73:9f:3e:fa:
         1a:df:ab:19:b2:1f:0b:ee:15:44:d0:c0:84:b4:8e:d3:b7:94:
         c1:c1:7d:b1:bd:74:cb:1f:f8:7a:ee:9d:ab:33:c8:b9:a7:d1:
         14:d9:ed:b8:3a:fb:ac:d5:61:14:02:a6:68:73:60:29:1c:e5:
         79:e6:f1:e8:0d:3a:e4:f3:a0:1b:cd:55:23:3c:69:41:c0:cb:
         e8:0f:2d:3a:2e:4c:da:b1:23:0e:f9:d9:a6:7c:ea:01:c9:27:
         24:7e:82:af:27:df:bd:17:ae:2b:51:48:06:46:36:8a:32:b0:
         f7:1c:bf:c1:47:0c:5b:51:a2:aa:f8:eb:7c:f9:6a:1e:d5:7d:
         60:d3:a2:82:e5:64:27:07:aa:b8:c0:41:b8:c2:99:41:6d:f2:
         0a:2f:26:ff:83:db:a9:5c:d6:79:f3:83:d9:84:0e:15:ee:13:
         4f:06:d8:f8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MjE3NTdaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYyRDBCQ0MyN0IzRDc4
RDk5QzczNzFDRDA4NDc2MzZENjgyQkYxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUZEKrGQ7vDf24Az/KKi9EEvgGVL/mSoutqiQZIbJMbwev50qc
Ttb/PqXspDShSZVS9Unm6BCfZZEPxq1jN3gWS6vORg6+XEYulrdZoNW0BkV2ZLJT
xq42LCK2+BxOGs1EEawt31pAm2wkTWIz6aLa6f+Oa0KGLWzcL2dpaBuGuX525KNU
y0gFMMF7sTVrG9e0wipOb/hqCpWy8DVzDIIb2oGf53F4bB6m9yUXBMTV91le7Zs1
A6peCkmr3vSqUd2bToAqDmErJ1FQIPq53cbQb3eMqFAk3C/FngJx2TE6nY6U2iJb
8GnHXWH/kS/k3UH5gA4rq5Cy/k5ZkYsPF/RxAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUYtC8wns9eNmcc3HNCEdjbWgr8cAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1l0Qzh3bnM5ZU5tY2MzSE5DRWRqYldncjhjQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDTBTANBgkqhkiG9w0BAQsFAAOCAQEAM9XYojZZjEIxjDnQ3EAi0ZAuHoc2
j9KSuSyWcErmRwoqxPrC6UjjHBXibwt0LUwV0tSJakrthlVhyM1K/lxp1pC4SSdC
PzCTJrCDJ4mzKLAGxYCAy3Fznz76Gt+rGbIfC+4VRNDAhLSO07eUwcF9sb10yx/4
eu6dqzPIuafRFNntuDr7rNVhFAKmaHNgKRzleebx6A065POgG81VIzxpQcDL6A8t
Oi5M2rEjDvnZpnzqAcknJH6CryffvReuK1FIBkY2ijKw9xy/wUcMW1GiqvjrfPlq
HtV9YNOiguVkJwequMBBuMKZQW3yCi8m/4PbqVzWefOD2YQOFe4TTwbY+A==
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:30 2025 by rpki-client