This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bwx44hsJsdYVREWmEnar3MY9Ms4.roa
File:                     bwx44hsJsdYVREWmEnar3MY9Ms4.roa (raw, json)
Hash identifier:          GtN9ffAuMrhmtVWzOM/sArI8NrJmXLeDHVOxBadlKck=
Subject key identifier:   6F:0C:78:E2:1B:09:B1:D6:15:44:45:A6:12:76:AB:DC:C6:3D:32:CE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       064C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bwx44hsJsdYVREWmEnar3MY9Ms4.roa
Signing time:             Mon 01 Dec 2025 01:54:01 +0000
ROA not before:           Mon 01 Dec 2025 01:54:01 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.185.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612 (0x64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:54:01 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=6F0C78E21B09B1D6154445A61276ABDCC63D32CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:cc:45:2e:8a:f9:82:13:80:38:e6:c8:8f:
                    2b:c0:e1:2c:5a:46:54:a7:34:ca:1b:d6:80:8a:fd:
                    9c:c1:4d:5c:14:05:27:60:eb:5e:c2:bc:91:04:59:
                    5a:20:71:9f:5f:3f:4e:ac:e2:28:0a:86:31:bb:e9:
                    4f:e5:4c:19:60:31:1a:de:55:c3:c8:b5:c2:99:ad:
                    4e:72:05:48:19:2c:8b:cd:25:ae:8f:e3:de:30:4b:
                    5f:50:b1:8a:c2:6a:40:a3:e1:af:a3:93:5b:fd:ec:
                    1c:47:62:c1:39:7d:ee:80:7e:f3:04:fd:3a:c5:10:
                    d2:99:ca:67:b1:88:83:04:29:ab:e1:f9:9e:71:3f:
                    76:00:ae:ce:7e:a1:e7:f3:b1:9d:67:8a:48:b4:b8:
                    91:2f:1e:ea:8a:5c:4b:94:76:2b:40:84:41:8a:31:
                    47:7a:53:a2:98:b0:1a:b7:0b:0e:d3:3a:4a:e7:c8:
                    bf:f4:31:d2:cb:3e:db:79:56:19:4f:16:b1:71:ec:
                    40:f6:7f:d2:47:a1:a5:0a:8e:54:ed:c5:73:62:e3:
                    0b:31:f1:df:77:11:fd:c9:7f:5f:a2:75:99:78:3e:
                    76:6f:9e:c1:f5:82:10:db:ee:04:a0:e7:18:f3:0f:
                    ab:15:a3:27:53:66:e8:3b:ca:f8:54:ee:c0:c7:ef:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0C:78:E2:1B:09:B1:D6:15:44:45:A6:12:76:AB:DC:C6:3D:32:CE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bwx44hsJsdYVREWmEnar3MY9Ms4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.185.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:06:f4:e3:55:f1:81:6a:07:3c:94:da:5b:c4:b0:d8:30:ff:
         76:68:17:d1:30:5e:0b:09:89:92:0c:50:8d:6b:2a:32:f5:2d:
         0e:fd:63:6f:81:c7:c4:46:8a:1e:72:cb:14:45:e8:9e:40:95:
         d3:5e:7b:59:09:a6:a9:ad:1b:1b:cc:ae:06:59:87:41:ba:b0:
         fe:4e:fb:20:2e:8b:22:47:50:59:21:2a:9d:e5:a8:98:83:59:
         ba:4c:28:71:01:13:12:09:3d:86:13:50:c6:e3:0d:cd:1a:4b:
         80:79:d9:71:3b:3b:7f:88:28:ae:a7:ac:50:f7:fa:11:d8:42:
         79:16:e9:3e:de:b0:5f:95:30:03:3d:67:f8:7a:c3:da:99:2c:
         18:e9:d4:2a:69:42:1f:75:07:55:d3:d1:d8:44:f6:03:95:3f:
         dd:8a:cf:fc:f4:1e:5c:3a:19:8f:75:d7:47:75:18:56:7f:b4:
         be:56:b3:2d:ee:df:14:48:a3:96:a5:42:da:41:46:45:ce:23:
         82:3c:46:aa:3e:f9:46:51:45:3b:46:99:c3:bd:65:b0:94:eb:
         55:aa:2b:f2:03:15:cd:92:45:52:67:4f:33:19:0d:f3:d4:b7:
         83:64:45:e5:5e:34:e3:c4:a1:b8:c9:80:87:2f:9e:e5:4e:0c:
         33:40:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:58 2025 by rpki-client