This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/__tIWh6YAxXdMOwKE1Xi8RVneYQ.roa
File:                     __tIWh6YAxXdMOwKE1Xi8RVneYQ.roa (raw, json)
Hash identifier:          QQkIuKQP1MWr19hSxQnW6SXqWc+5Z/CEuQ0ee0fYHIE=
Subject key identifier:   FF:FB:48:5A:1E:98:03:15:DD:30:EC:0A:13:55:E2:F1:15:67:79:84
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0687
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/__tIWh6YAxXdMOwKE1Xi8RVneYQ.roa
Signing time:             Mon 01 Dec 2025 02:06:11 +0000
ROA not before:           Mon 01 Dec 2025 02:06:11 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        125.50.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:06:11 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=FFFB485A1E980315DD30EC0A1355E2F115677984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:d3:25:09:22:8f:21:7f:41:c4:2d:a8:8a:
                    6c:58:86:98:f3:ef:03:f4:2c:44:20:3f:f1:8f:59:
                    2a:53:fd:d6:00:80:54:9c:8f:1c:86:06:95:46:cf:
                    7f:ed:5d:3d:a9:e5:28:b7:54:1b:89:2d:73:12:f6:
                    ef:18:7f:f6:18:67:1f:dd:80:12:ae:ec:d2:6c:5f:
                    f0:27:7d:19:b4:58:75:6c:49:2d:ae:52:78:cf:4c:
                    4c:51:82:1f:c2:15:cb:3c:60:f7:cd:58:d3:d2:74:
                    e4:5b:cf:30:dc:ee:06:62:c3:9f:8b:d2:13:82:e2:
                    a6:b3:7c:85:a8:8d:8d:73:9a:66:c9:a0:61:35:0c:
                    27:c2:44:d0:0f:ed:f0:cb:89:36:05:dc:23:1a:0b:
                    69:3f:a0:ce:0c:6a:2a:66:53:e2:96:57:e9:4c:1d:
                    4a:9e:0d:cb:13:68:e5:be:4b:05:a8:40:a1:48:ae:
                    6a:49:d3:15:f1:cb:f7:8e:c0:fb:42:63:ab:69:d8:
                    ba:a3:9c:35:7c:75:fb:b1:03:69:d8:1c:5e:4c:d1:
                    b3:5e:f5:ed:8b:7a:f4:9d:c6:13:7e:f2:ac:0a:02:
                    2c:1c:d7:2c:3b:9a:15:be:21:07:32:c3:34:15:36:
                    1e:1f:b3:10:5e:bc:6f:c4:3f:73:30:54:c2:1d:8f:
                    92:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FB:48:5A:1E:98:03:15:DD:30:EC:0A:13:55:E2:F1:15:67:79:84
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/__tIWh6YAxXdMOwKE1Xi8RVneYQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.50.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:43:07:0d:e0:a0:d1:0f:e4:af:d7:e2:06:e2:60:d7:93:
         7c:8f:92:98:33:57:ba:2e:94:1c:b5:42:64:b7:2f:46:5e:0c:
         9b:b7:14:be:4a:cd:35:60:a0:99:b1:49:cf:61:1d:da:61:bf:
         27:fa:9d:51:2f:8d:4e:a3:eb:18:5c:3c:87:71:1a:5e:ab:bd:
         9e:2c:04:1d:3c:e9:77:60:fc:fc:2d:16:73:45:5a:61:70:93:
         78:a0:25:84:d9:70:3a:d0:64:08:81:73:8c:17:7d:a8:ba:e5:
         12:bf:b7:18:e6:fd:4b:45:74:6a:8d:3d:81:ff:13:11:d4:a4:
         73:cd:ea:23:9b:c0:24:95:c3:7f:21:44:2a:72:82:15:a4:ef:
         fb:72:b8:3a:00:02:fb:2a:2c:2f:07:41:9e:0b:85:bb:1f:96:
         a4:f4:34:97:46:c1:74:18:f3:e4:d4:f8:49:27:3f:dd:b3:38:
         3d:7f:7c:15:7d:1c:f2:f9:96:54:e1:6a:91:0b:73:1f:01:f7:
         ee:ef:3f:51:20:3c:aa:11:52:2d:0b:96:47:b6:ef:99:7f:07:
         05:60:5c:e9:cb:96:dc:31:87:d0:b1:3d:6f:33:f8:06:a4:ba:
         df:d0:58:17:e9:18:58:70:29:5f:b7:4e:83:9a:f7:9c:61:16:
         3a:d8:f8:58
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MjA2MTFaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZGRkI0ODVBMUU5ODAz
MTVERDMwRUMwQTEzNTVFMkYxMTU2Nzc5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDabdMlCSKPIX9BxC2oimxYhpjz7wP0LEQgP/GPWSpT/dYAgFSc
jxyGBpVGz3/tXT2p5Si3VBuJLXMS9u8Yf/YYZx/dgBKu7NJsX/AnfRm0WHVsSS2u
UnjPTExRgh/CFcs8YPfNWNPSdORbzzDc7gZiw5+L0hOC4qazfIWojY1zmmbJoGE1
DCfCRNAP7fDLiTYF3CMaC2k/oM4MaipmU+KWV+lMHUqeDcsTaOW+SwWoQKFIrmpJ
0xXxy/eOwPtCY6tp2LqjnDV8dfuxA2nYHF5M0bNe9e2LevSdxhN+8qwKAiwc1yw7
mhW+IQcywzQVNh4fsxBevG/EP3MwVMIdj5KTAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU//tIWh6YAxXdMOwKE1Xi8RVneYQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL19fdElXaDZZQXhYZE1Pd0tFMVhpOFJWbmVZUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9MjANBgkqhkiG9w0BAQsFAAOCAQEAgPRDBw3goNEP5K/X4gbiYNeTfI+S
mDNXui6UHLVCZLcvRl4Mm7cUvkrNNWCgmbFJz2Ed2mG/J/qdUS+NTqPrGFw8h3Ea
Xqu9niwEHTzpd2D8/C0Wc0VaYXCTeKAlhNlwOtBkCIFzjBd9qLrlEr+3GOb9S0V0
ao09gf8TEdSkc83qI5vAJJXDfyFEKnKCFaTv+3K4OgAC+yosLwdBnguFux+WpPQ0
l0bBdBjz5NT4SSc/3bM4PX98FX0c8vmWVOFqkQtzHwH37u8/USA8qhFSLQuWR7bv
mX8HBWBc6cuW3DGH0LE9bzP4BqS639BYF+kYWHApX7dOg5r3nGEWOtj4WA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:41:46 2025 by rpki-client