This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dATT-sC-nBdbn6Pehy3dHEDW2ns.roa
File:                     dATT-sC-nBdbn6Pehy3dHEDW2ns.roa (raw, json)
Hash identifier:          sbpSOGM5P2KDnky+UvCoolibfciCAEFkC2nmwtXHxjg=
Subject key identifier:   74:04:D3:FA:C0:BE:9C:17:5B:9F:A3:DE:87:2D:DD:1C:40:D6:DA:7B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0677
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dATT-sC-nBdbn6Pehy3dHEDW2ns.roa
Signing time:             Mon 01 Dec 2025 02:02:00 +0000
ROA not before:           Mon 01 Dec 2025 02:02:00 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:02:00 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=7404D3FAC0BE9C175B9FA3DE872DDD1C40D6DA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:8e:16:c7:58:1c:06:52:05:d2:93:ae:06:
                    bb:e4:32:39:33:fc:e0:d8:e0:ca:19:c9:77:15:5f:
                    4c:09:c8:4a:de:39:47:f8:e2:7b:a1:b2:04:4a:a5:
                    54:2f:38:28:9f:17:cd:a2:8a:59:9e:85:6f:5f:92:
                    bc:28:b8:54:3f:a9:49:cf:8e:56:1b:c6:e4:6f:12:
                    d9:a3:32:5c:9b:b7:40:f6:cc:c7:2d:bf:6c:1d:2e:
                    a0:80:09:b0:1d:16:77:e7:f4:7f:bf:29:56:a5:ff:
                    38:07:1b:3d:e8:b2:b3:b2:38:87:cc:74:52:9c:29:
                    12:fb:94:83:6b:13:53:7b:88:1b:71:1a:0f:60:ac:
                    e8:04:45:43:ac:a7:14:4b:7e:21:a9:ea:de:ca:66:
                    fb:42:27:b7:27:8c:91:ce:95:f8:3b:a4:7c:3f:02:
                    ab:25:f9:4f:aa:02:5e:20:92:bb:31:a2:dc:d9:2a:
                    96:14:7c:c7:9c:14:c0:27:b9:ed:23:98:31:61:92:
                    11:70:29:b3:57:3a:f2:e6:0c:45:12:a3:72:9e:fb:
                    40:f8:74:82:f9:c3:b4:82:43:20:52:a2:b9:70:ca:
                    5d:b3:8b:83:23:80:56:a7:0a:bf:75:c3:87:90:75:
                    75:19:07:ac:5e:6f:a1:33:02:03:40:68:ea:0c:c0:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:04:D3:FA:C0:BE:9C:17:5B:9F:A3:DE:87:2D:DD:1C:40:D6:DA:7B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dATT-sC-nBdbn6Pehy3dHEDW2ns.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:8d:ec:b1:dd:58:af:c7:6f:b6:76:64:e9:4a:aa:f0:04:39:
         9f:69:b8:4e:94:45:74:1c:d4:0c:bd:1c:35:b1:45:5e:c9:dd:
         98:ac:32:58:e5:97:84:30:f3:8f:d1:d1:bd:00:36:6c:c4:0e:
         69:f0:36:df:03:a1:a1:a2:6b:45:cc:7b:c1:2d:ec:b2:c2:cf:
         8c:8b:ae:6c:65:15:6f:c6:0a:92:89:af:43:e3:71:58:b4:3e:
         b7:71:c1:c8:ab:48:75:46:84:46:e7:fe:b1:40:56:0c:1e:2e:
         31:2e:6d:87:20:92:b3:b0:fd:5d:c3:19:ea:99:be:90:b1:aa:
         3c:8e:62:50:b2:97:3a:db:d5:af:c7:0b:2b:83:31:af:1d:c9:
         18:1a:c4:46:16:ca:80:e0:55:9c:2b:98:53:c3:ae:df:07:77:
         33:99:9b:ae:38:cd:92:16:4c:6e:9b:55:1f:f1:2c:dd:57:e8:
         99:66:2d:e0:7d:78:3f:7b:e3:f1:6c:c2:35:0b:af:7e:3c:60:
         b6:6e:a6:b6:54:94:bb:2f:f3:1a:b4:4f:2b:4e:ab:f8:ff:95:
         f8:5b:d1:72:08:4f:0a:4e:71:12:e7:6a:66:7c:8d:31:69:ec:
         ad:6d:96:20:67:93:52:d8:4b:b1:81:16:f6:eb:fb:bb:f7:a4:
         6a:44:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:40 2025 by rpki-client