This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ctQC1I3LzF3l5LS_BLgxu1-H-Bc.roa
File:                     ctQC1I3LzF3l5LS_BLgxu1-H-Bc.roa (raw, json)
Hash identifier:          0beE2pobokWU4kNjrYSXR85M5NKH3sbwnYpI/PgUzmM=
Subject key identifier:   72:D4:02:D4:8D:CB:CC:5D:E5:E4:B4:BF:04:B8:31:BB:5F:87:F8:17
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05DF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ctQC1I3LzF3l5LS_BLgxu1-H-Bc.roa
Signing time:             Mon 01 Dec 2025 01:38:18 +0000
ROA not before:           Mon 01 Dec 2025 01:38:18 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        203.140.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:38:18 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=72D402D48DCBCC5DE5E4B4BF04B831BB5F87F817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:25:44:a3:81:cb:20:b9:d3:54:6b:f1:8c:
                    30:40:9e:9d:18:60:48:a1:9f:6a:67:82:4d:eb:15:
                    bb:46:ce:42:51:05:9e:90:01:1c:f7:58:3e:ca:18:
                    08:da:4b:2a:c0:0b:08:c8:dc:cc:a7:3e:52:0e:70:
                    8d:8f:f4:bb:5c:5f:aa:1b:17:24:3d:ff:c6:fd:e8:
                    66:37:dd:a5:73:e7:f2:60:ff:c2:dd:32:c5:5f:69:
                    23:09:f1:67:f7:fd:de:c3:0c:19:77:87:8f:24:de:
                    bf:9b:67:17:85:35:79:59:ea:56:7f:69:7a:f7:a4:
                    8d:98:bd:48:c4:30:c6:a2:04:a8:bf:ff:86:25:10:
                    bc:c2:80:43:19:19:a4:0a:c2:d9:1b:46:6e:cc:5c:
                    fd:44:83:c4:f3:ed:25:fe:f4:df:fd:b8:1d:c3:f9:
                    46:41:43:e5:24:87:3d:67:0c:96:3a:2b:84:1a:82:
                    54:13:7d:6a:b6:b0:9b:74:fc:e5:22:9f:6f:0f:e9:
                    5c:f9:95:3c:78:89:0f:65:f5:8c:0a:e1:15:22:ee:
                    65:e6:bb:06:a3:91:89:ca:ba:88:33:4c:b4:b7:93:
                    e7:59:71:0c:2c:7b:a8:0a:d6:f9:50:9d:92:93:63:
                    72:65:6d:99:cd:2c:ed:b1:e7:a0:a5:4c:0e:83:aa:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D4:02:D4:8D:CB:CC:5D:E5:E4:B4:BF:04:B8:31:BB:5F:87:F8:17
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ctQC1I3LzF3l5LS_BLgxu1-H-Bc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:38:47:f4:b6:bc:a9:41:1d:e7:4b:04:38:cc:d0:46:d3:4a:
         a5:da:40:11:c0:02:11:c6:bf:4b:03:02:7c:42:f4:d2:6a:df:
         b4:4d:39:8b:b6:6b:df:70:2b:75:9e:8c:2f:2b:2d:09:6c:1c:
         4c:88:40:ea:3f:ad:c5:48:87:f0:70:9b:20:2e:03:82:d9:fe:
         26:d4:13:23:23:e4:f9:0c:e3:46:8a:f3:3f:dc:7d:ab:da:93:
         56:52:d7:05:db:56:ff:cb:4b:c4:3b:e6:d9:e9:e8:1a:3a:12:
         69:41:5a:3c:ab:31:3b:96:4b:4a:af:f9:2b:75:d3:88:f7:cc:
         c2:6a:b1:d4:3b:db:36:d8:25:e1:d5:05:41:96:6d:fb:1a:70:
         90:cc:08:54:14:7e:5f:c6:8f:c0:d9:47:21:d2:93:b1:eb:e3:
         6f:ac:78:6b:25:18:f1:b3:e6:47:24:95:f0:fa:15:73:bd:89:
         26:0d:75:89:18:3b:d2:f8:e8:10:23:35:99:56:a0:3b:e1:6c:
         2a:ef:fe:af:90:80:eb:f1:fa:e8:4e:dd:34:2e:e6:e9:31:f3:
         68:9f:d4:45:85:d0:d6:95:d2:76:8d:e2:3f:17:e1:fb:ab:33:
         13:fc:fb:75:6c:31:52:d4:ed:f9:7d:8c:5b:41:2e:48:7b:27:
         d9:55:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:51 2025 by rpki-client