This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dlOIzxfbMBoLhROdXlI5xQ5OUMU.roa
File:                     dlOIzxfbMBoLhROdXlI5xQ5OUMU.roa (raw, json)
Hash identifier:          awPXD/9sfBeZ0rd5G30LI6thRIappwDSRD0UEfjAYrI=
Subject key identifier:   76:53:88:CF:17:DB:30:1A:0B:85:13:9D:5E:52:39:C5:0E:4E:50:C5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05CB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dlOIzxfbMBoLhROdXlI5xQ5OUMU.roa
Signing time:             Mon 01 Dec 2025 01:34:04 +0000
ROA not before:           Mon 01 Dec 2025 01:34:04 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.254.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483 (0x5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:34:04 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=765388CF17DB301A0B85139D5E5239C50E4E50C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:76:bf:e4:a4:7e:61:cd:86:b4:be:ae:13:
                    70:48:aa:7e:3b:75:5a:38:c3:37:ee:8b:8f:93:39:
                    9b:bc:de:8f:05:1b:00:f0:e1:be:89:1d:bd:e5:10:
                    e6:34:93:26:33:4c:5d:35:d1:de:5f:9d:37:43:52:
                    82:c8:c5:c9:52:b4:e6:6f:82:83:3b:ad:7f:de:d6:
                    dd:1d:f7:c3:61:a3:a7:b8:40:e0:9a:0d:d6:05:fb:
                    c4:d3:64:78:da:98:b1:82:90:11:89:c4:28:99:a1:
                    a2:a0:f3:45:f4:57:8f:0a:bc:b7:53:bb:5c:06:51:
                    86:62:7e:f1:5d:15:0b:7b:86:73:48:5e:bc:35:89:
                    7e:24:48:2c:b0:4d:74:65:e4:77:9a:32:66:d8:10:
                    94:f8:25:14:0b:68:ad:5b:4d:39:a5:4a:7c:88:75:
                    0c:65:ab:2a:c7:bf:96:58:ee:48:6b:54:5f:bd:db:
                    e9:19:cc:d9:31:53:f5:f8:07:43:51:6f:5b:2d:cf:
                    c6:e3:e2:31:c3:81:d5:02:1e:3d:14:fe:46:b3:55:
                    87:54:d8:4e:a9:22:64:8f:2f:4c:32:e4:90:79:08:
                    93:16:45:65:6c:1b:a7:c0:87:4d:42:68:ac:88:ce:
                    3c:67:73:3d:ce:3b:d9:45:34:82:02:9a:c1:56:0e:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:88:CF:17:DB:30:1A:0B:85:13:9D:5E:52:39:C5:0E:4E:50:C5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dlOIzxfbMBoLhROdXlI5xQ5OUMU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:9f:19:b0:f9:fa:3a:4e:40:6a:49:5a:a3:fc:e2:a3:70:92:
         70:57:bb:25:b4:e5:95:38:f2:2e:54:82:b0:7b:dc:6e:76:3f:
         09:73:f3:d2:6f:38:13:c8:98:5f:64:a4:09:31:1a:27:21:3c:
         0c:5f:88:d8:04:40:aa:a7:94:13:85:7c:a2:f7:b0:84:4c:45:
         f7:b9:99:93:10:68:d2:96:77:87:79:33:75:3b:6d:66:e6:ca:
         01:6f:f6:6a:02:db:65:ea:81:05:55:bc:fb:2a:84:1c:61:6f:
         21:1e:68:f1:31:92:13:55:60:29:40:b0:7a:39:22:3a:d5:5f:
         9b:ac:2e:52:d6:52:65:2d:2c:01:80:c8:6a:87:07:fe:f5:8d:
         06:7b:16:76:20:a2:78:56:81:d5:01:d0:5c:ca:b0:7e:35:d0:
         01:5e:45:e4:7e:f9:71:51:7a:e0:e1:d5:31:0f:b6:80:09:5f:
         3c:58:8b:09:87:e5:80:b7:2e:5a:92:88:85:12:23:13:1b:2f:
         2f:2f:33:95:ff:4e:fc:52:31:e1:0c:08:a0:ab:08:f1:05:f5:
         f3:3c:25:88:f6:28:5a:52:d9:73:9a:0c:6c:09:35:d4:7e:d9:
         59:ae:1d:46:e6:82:a9:56:3a:60:5a:19:f1:77:24:f5:42:b2:
         24:91:b4:a7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MTM0MDRaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc2NTM4OENGMTdEQjMw
MUEwQjg1MTM5RDVFNTIzOUM1MEU0RTUwQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAS3a/5KR+Yc2GtL6uE3BIqn47dVo4wzfui4+TOZu83o8FGwDw
4b6JHb3lEOY0kyYzTF010d5fnTdDUoLIxclStOZvgoM7rX/e1t0d98Nho6e4QOCa
DdYF+8TTZHjamLGCkBGJxCiZoaKg80X0V48KvLdTu1wGUYZifvFdFQt7hnNIXrw1
iX4kSCywTXRl5HeaMmbYEJT4JRQLaK1bTTmlSnyIdQxlqyrHv5ZY7khrVF+92+kZ
zNkxU/X4B0NRb1stz8bj4jHDgdUCHj0U/kazVYdU2E6pImSPL0wy5JB5CJMWRWVs
G6fAh01CaKyIzjxncz3OO9lFNIICmsFWDjS3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUdlOIzxfbMBoLhROdXlI5xQ5OUMUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2RsT0l6eGZiTUJvTGhST2RYbEk1eFE1T1VNVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHS/nYwDQYJKoZIhvcNAQELBQADggEBAHCfGbD5+jpOQGpJWqP84qNwknBX
uyW05ZU48i5UgrB73G52Pwlz89JvOBPImF9kpAkxGichPAxfiNgEQKqnlBOFfKL3
sIRMRfe5mZMQaNKWd4d5M3U7bWbmygFv9moC22XqgQVVvPsqhBxhbyEeaPExkhNV
YClAsHo5IjrVX5usLlLWUmUtLAGAyGqHB/71jQZ7FnYgonhWgdUB0FzKsH410AFe
ReR++XFReuDh1TEPtoAJXzxYiwmH5YC3LlqSiIUSIxMbLy8vM5X/TvxSMeEMCKCr
CPEF9fM8JYj2KFpS2XOaDGwJNdR+2VmuHUbmgqlWOmBaGfF3JPVCsiSRtKc=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:47 2025 by rpki-client