This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dLMsmYOD__rXTS3b6y4hnkvWVDw.roa
File:                     dLMsmYOD__rXTS3b6y4hnkvWVDw.roa (raw, json)
Hash identifier:          +QBEq7KKExyIsxmPnQPJJqZa6Wg+oY8Xv5u/uZY0jrI=
Subject key identifier:   74:B3:2C:99:83:83:FF:FA:D7:4D:2D:DB:EB:2E:21:9E:4B:D6:54:3C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05B1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dLMsmYOD__rXTS3b6y4hnkvWVDw.roa
Signing time:             Mon 01 Dec 2025 01:28:55 +0000
ROA not before:           Mon 01 Dec 2025 01:28:55 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        119.107.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:28:55 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=74B32C998383FFFAD74D2DDBEB2E219E4BD6543C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:a3:7a:12:ea:6b:f1:3c:ec:16:fd:d8:31:
                    8d:8d:98:4f:af:b4:7c:23:1a:05:db:c9:bb:23:4d:
                    0d:4e:01:1e:6b:a7:98:fa:37:c5:45:60:8b:30:8e:
                    82:02:1c:aa:ad:62:74:37:ea:aa:60:aa:93:37:34:
                    81:dd:68:55:06:17:ed:0d:aa:6a:eb:81:48:2f:58:
                    52:dc:a9:a5:ca:be:68:21:55:0b:c4:6e:45:9a:70:
                    1c:5a:67:f0:07:ab:b0:d0:5f:f6:98:1c:a0:eb:78:
                    d9:24:65:d1:15:a3:9c:55:0d:cd:bd:db:2e:c7:da:
                    0b:58:76:2e:4b:10:b0:d3:5e:08:3a:5d:5c:00:a8:
                    5b:3c:d4:44:c3:bf:22:0c:9a:25:5c:89:d6:1b:82:
                    80:94:41:22:75:18:b7:03:25:46:00:34:47:c5:43:
                    a1:de:6d:48:c9:aa:bb:bd:60:98:0d:75:dc:65:df:
                    d4:92:9f:4a:f6:23:16:c4:6b:77:17:a8:79:68:73:
                    89:3a:bd:93:2d:4b:9f:0e:46:9a:43:49:f9:08:36:
                    f8:1e:ff:b8:44:ef:14:2d:70:b3:7d:10:93:a8:92:
                    ee:0d:da:77:e8:ff:aa:5f:b8:91:e7:96:9a:a9:c9:
                    9e:9d:8a:04:32:39:7b:ca:37:12:5f:6f:d2:0c:f4:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B3:2C:99:83:83:FF:FA:D7:4D:2D:DB:EB:2E:21:9E:4B:D6:54:3C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dLMsmYOD__rXTS3b6y4hnkvWVDw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.107.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:52:5c:73:99:f1:98:9e:99:20:7e:10:ca:15:0d:2c:31:
         23:0c:f6:a0:a8:bc:92:61:57:04:05:04:b5:5e:c8:3b:df:0a:
         4d:22:25:7b:0c:1a:8a:8b:a9:0f:39:c8:12:5a:b0:19:b4:53:
         3e:cd:5b:37:46:5a:5a:82:76:ab:6e:9b:1c:f0:bb:39:27:f7:
         95:1a:6a:b4:a3:9e:b4:6e:25:02:1a:6e:b7:c7:b3:c1:8f:ba:
         f6:e3:de:1a:12:49:14:1c:7f:e9:45:7b:5d:06:a9:74:fe:6d:
         a2:b0:d9:11:a3:a2:b4:be:f5:e3:00:4d:63:03:36:a4:17:71:
         e0:0e:2e:18:55:a1:82:52:76:6e:b3:ed:01:f3:1a:47:68:67:
         d9:23:b4:1a:12:a4:0d:e1:72:01:83:4b:80:5e:d9:b6:35:11:
         19:fc:59:f9:11:7e:da:08:12:3a:3a:db:d5:a1:13:9f:5e:d6:
         75:40:67:26:ce:68:30:1b:35:6d:df:d5:c9:bd:39:69:aa:34:
         33:4f:e9:2e:76:63:90:a3:0a:a3:cf:11:47:99:c0:b6:fb:29:
         0f:aa:c4:a3:01:b0:69:7a:ee:a7:26:6e:84:38:4f:40:c6:bf:
         83:49:4f:e0:20:7a:f4:7d:33:f0:74:20:7f:3e:d3:89:16:f5:
         ee:b2:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:56 2025 by rpki-client