This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dQ5Wyp-NQ4jBo1s5OLtwgHiJnVo.roa
File:                     dQ5Wyp-NQ4jBo1s5OLtwgHiJnVo.roa (raw, json)
Hash identifier:          2gx1a9M5qUSoeL5KxzlYaK1BSGnU+ykaBNGMmDozqhs=
Subject key identifier:   75:0E:56:CA:9F:8D:43:88:C1:A3:5B:39:38:BB:70:80:78:89:9D:5A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       065A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dQ5Wyp-NQ4jBo1s5OLtwgHiJnVo.roa
Signing time:             Mon 01 Dec 2025 01:58:05 +0000
ROA not before:           Mon 01 Dec 2025 01:58:05 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.249.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626 (0x65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:58:05 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=750E56CA9F8D4388C1A35B3938BB708078899D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:c3:a3:45:bc:29:95:9c:77:ef:57:c6:94:
                    67:ae:27:b2:77:11:1b:be:bb:80:1c:bf:65:c0:93:
                    68:22:fe:67:e7:f3:53:40:85:ad:83:33:5c:2b:ba:
                    e9:42:7b:8e:b3:6d:9e:57:93:be:f3:47:50:bf:37:
                    ba:ef:a2:88:65:51:e4:c3:84:ce:1f:29:3a:21:f1:
                    a9:c4:63:01:d3:85:94:79:c0:41:56:70:c8:24:e4:
                    77:fc:2d:9e:d2:a7:b9:90:f5:3c:43:26:af:1c:fe:
                    9c:ec:ed:0b:8e:3e:ad:d5:cf:32:07:c9:0d:8c:70:
                    75:de:67:65:c8:8b:23:3b:bf:9a:9b:56:bf:c6:6a:
                    60:b1:8d:ae:99:71:28:f9:5d:c7:81:52:13:40:be:
                    60:83:9e:fa:e9:23:93:48:41:c0:d5:f8:55:cb:36:
                    07:60:65:89:9d:00:64:85:a5:44:11:fc:cc:3c:a6:
                    54:08:8b:8f:3b:de:ce:42:da:5d:58:c4:27:c5:97:
                    60:3f:01:76:38:db:5a:89:80:71:7b:81:be:61:c6:
                    46:ec:60:93:b2:88:70:11:02:fe:5b:9e:a7:b8:18:
                    05:83:84:5b:50:fc:28:04:54:4a:2c:ce:e8:fc:a0:
                    0e:6e:e3:1a:63:9d:a6:e4:21:99:8b:f7:7b:37:36:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0E:56:CA:9F:8D:43:88:C1:A3:5B:39:38:BB:70:80:78:89:9D:5A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dQ5Wyp-NQ4jBo1s5OLtwgHiJnVo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:57:ce:07:0c:c7:64:77:6d:22:a7:42:73:d8:21:ae:a3:0c:
         79:3d:f0:8d:0b:ec:3b:90:b0:81:71:c2:1e:8f:40:a4:31:27:
         58:49:d1:33:86:77:28:6d:10:ee:df:06:10:f8:c9:8d:64:bd:
         08:77:30:09:d6:76:07:4c:ad:f4:b3:df:c7:72:61:e0:ec:02:
         7a:ff:f5:82:c1:cb:f5:51:d9:00:c0:db:b2:ec:24:31:74:1f:
         31:25:76:32:16:9d:d2:36:0a:96:60:88:0c:55:9e:90:b8:ec:
         c1:41:67:be:9b:43:16:4e:2a:d1:a1:d3:19:28:78:c5:bf:d5:
         52:54:ee:e1:a3:68:1b:56:af:11:26:f5:8e:85:fc:0f:39:79:
         10:63:90:2c:08:1f:1c:49:28:48:2b:b0:b3:81:c1:51:30:fb:
         4d:38:b0:49:f4:fa:28:3b:3f:87:c7:f0:37:45:e1:d9:3a:88:
         08:28:9e:0f:2e:51:53:b3:6f:50:40:28:f5:f2:f9:00:6f:80:
         9c:30:6b:57:97:53:4f:35:16:d0:af:e4:93:fe:4c:55:6d:d5:
         ef:e8:f2:29:8b:6b:a5:f1:06:97:3b:c3:d0:84:50:75:e9:52:
         a0:ce:c6:a6:07:00:39:62:df:65:82:c7:52:04:ec:70:1d:ea:
         e0:98:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:34 2025 by rpki-client