This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ckTZIRRBNH9_CJ9ojR8bji4ilJE.roa
File:                     ckTZIRRBNH9_CJ9ojR8bji4ilJE.roa (raw, json)
Hash identifier:          BSPZm9HZvJ6XtQYdFdTnpc8a9BPBxTEe3pIAFu17keU=
Subject key identifier:   72:44:D9:21:14:41:34:7F:7F:08:9F:68:8D:1F:1B:8E:2E:22:94:91
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0696
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ckTZIRRBNH9_CJ9ojR8bji4ilJE.roa
Signing time:             Mon 01 Dec 2025 02:09:54 +0000
ROA not before:           Mon 01 Dec 2025 02:09:54 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.229.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:09:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=7244D9211441347F7F089F688D1F1B8E2E229491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:45:9f:68:16:08:1e:a1:3c:41:72:56:55:
                    6b:cd:4e:f9:8c:34:aa:ad:83:10:d3:e4:9a:fc:e3:
                    5f:e5:01:53:b5:d9:53:a7:38:5f:2e:5b:fe:84:3b:
                    bb:e2:80:58:80:1f:82:f9:5a:1a:b9:00:cb:bd:fd:
                    86:c2:a7:29:49:0c:f4:29:82:d3:be:9c:04:99:b1:
                    63:5c:5e:fd:c8:0f:54:8c:54:c5:73:fb:79:0d:42:
                    eb:f3:ca:1a:9f:ae:47:52:61:ca:0a:af:6c:20:5f:
                    35:af:4b:e7:05:a3:c4:63:b0:fa:ae:a2:c3:46:c0:
                    0e:79:ca:0d:fe:ab:b8:86:4b:20:3a:e3:b4:d4:f9:
                    45:2c:b0:02:14:8b:5f:99:b5:d8:37:d2:a3:ed:34:
                    4c:e4:c9:50:42:4a:ea:ed:e4:d1:32:1f:54:35:10:
                    56:3c:d3:19:12:7f:61:56:00:2c:3d:7e:73:50:e3:
                    d2:f9:75:e3:89:5e:5b:08:92:22:38:ce:94:63:96:
                    8a:8b:db:49:f0:a1:f4:c3:52:e1:e6:f9:db:54:9c:
                    51:ae:a3:c2:d7:e4:74:3e:d8:64:93:d5:69:8b:5d:
                    c9:e3:97:e1:16:9f:f9:9a:65:46:92:31:02:1d:c5:
                    5a:1f:6f:5e:3e:0a:a1:b0:c2:e2:67:7b:1b:ed:2f:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:44:D9:21:14:41:34:7F:7F:08:9F:68:8D:1F:1B:8E:2E:22:94:91
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ckTZIRRBNH9_CJ9ojR8bji4ilJE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:a7:bd:09:fa:66:50:0c:0e:7c:da:2d:77:28:2c:18:65:
         f0:0e:b0:68:5b:16:c2:a4:14:93:84:02:9f:f5:4a:ca:82:6b:
         1d:cb:0d:35:eb:0e:a5:c2:36:74:81:d9:04:96:9c:f5:eb:bc:
         59:fe:0e:4c:2a:60:e1:a4:6e:c9:43:58:e5:35:e4:9d:7c:1e:
         1b:93:dc:f9:67:21:c1:21:00:40:7b:db:3d:89:11:bd:72:02:
         65:fc:0f:63:fe:fd:00:1b:7c:6a:cd:72:78:86:f9:47:3b:ee:
         55:a1:ac:c7:bd:e1:b0:18:7b:73:dd:0c:f5:f1:9f:78:bd:59:
         11:bb:8b:ff:bf:b1:d0:81:12:73:b6:0d:75:a7:35:3d:07:85:
         c7:a4:d0:62:3e:e2:7f:20:73:e8:5e:f8:8a:cf:fe:1d:4f:9d:
         8a:26:26:32:54:db:84:7d:1a:a1:c5:a4:60:7b:2b:e9:9a:90:
         92:74:84:df:a4:59:11:fa:43:52:9f:62:86:7e:e4:95:e2:0b:
         af:c0:6a:a1:d0:df:dd:c4:ee:ce:cf:8d:b3:11:be:4c:29:f8:
         2b:99:fd:1c:95:c2:10:67:e5:f3:56:4d:a9:eb:6c:5d:6b:d6:
         57:5a:a2:01:22:25:d8:95:13:0b:4d:ce:87:15:0d:da:9d:11:
         2e:32:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:05 2025 by rpki-client