This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dnskmbHM2LDnOd5sFUW4DU6VJeo.roa
File:                     dnskmbHM2LDnOd5sFUW4DU6VJeo.roa (raw, json)
Hash identifier:          9QaYSbP1IFfSJSKVQh4ibsIqnLThMtkhBDTCrSN+x9Y=
Subject key identifier:   76:7B:24:99:B1:CC:D8:B0:E7:39:DE:6C:15:45:B8:0D:4E:95:25:EA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05C8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dnskmbHM2LDnOd5sFUW4DU6VJeo.roa
Signing time:             Mon 01 Dec 2025 01:34:03 +0000
ROA not before:           Mon 01 Dec 2025 01:34:03 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.255.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:34:03 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=767B2499B1CCD8B0E739DE6C1545B80D4E9525EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:1d:f6:b1:12:54:7b:e7:94:74:d7:76:4f:
                    8b:0a:67:58:de:c6:38:ef:66:cd:80:26:41:59:10:
                    f9:aa:a1:8e:fd:16:af:cd:89:83:6a:65:d1:cc:01:
                    e6:55:5e:fc:e4:b3:a0:95:b8:dc:c7:77:af:d3:06:
                    f8:57:51:49:89:7b:fb:91:71:30:c2:5a:9f:bc:2b:
                    ad:14:c2:02:f8:a2:96:52:84:f4:3e:14:d8:c6:7a:
                    83:e1:4c:fb:a2:7c:b0:cb:4f:c5:df:4d:9b:2c:49:
                    31:04:1b:16:84:c3:1c:06:78:eb:68:11:7d:9c:68:
                    11:2d:34:4f:d8:89:ce:3c:d4:9a:c8:61:9d:a5:54:
                    e0:b2:f0:76:36:5c:7e:22:a7:ef:dc:4c:84:eb:eb:
                    e2:9a:2e:56:8f:70:ba:ea:bf:13:af:65:c4:b0:6d:
                    d5:21:4b:db:57:f0:1e:8a:f7:8d:33:f6:87:97:be:
                    33:66:69:bf:dc:a0:e3:5b:0f:0b:ed:a9:f8:f7:01:
                    56:a0:2a:d3:9e:33:4b:c0:fe:84:d4:50:76:35:89:
                    c5:e3:f6:6e:d5:45:94:4e:db:77:68:2a:5a:08:b8:
                    73:32:2d:59:5c:cc:f5:82:4a:14:7a:2d:bb:dc:ee:
                    3f:44:80:5d:03:30:dc:6c:55:42:f9:da:c5:7a:b2:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:24:99:B1:CC:D8:B0:E7:39:DE:6C:15:45:B8:0D:4E:95:25:EA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dnskmbHM2LDnOd5sFUW4DU6VJeo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:ae:bf:57:1b:a1:d4:60:98:f8:7c:6d:f3:e6:c7:75:d6:
         86:e7:30:bf:fb:c6:be:dd:fd:63:25:c8:75:90:1f:59:33:30:
         0e:a6:2a:1b:80:3b:6b:77:95:ce:c4:b5:06:47:48:53:39:a8:
         23:ba:3a:24:20:37:26:46:34:af:47:bb:29:b3:06:50:2a:ec:
         2d:41:94:65:18:81:6b:71:df:c0:4b:5b:ff:85:a4:3d:5d:e4:
         2d:5f:64:c4:97:1c:5e:d5:bb:76:2f:26:0e:af:69:61:fc:2c:
         1a:d0:58:86:a4:c4:82:31:dd:76:e4:70:6c:45:59:e3:1b:84:
         7a:37:44:56:70:7d:42:35:99:d7:66:89:46:8a:df:0a:4a:39:
         a6:da:08:83:f5:49:f7:72:7e:db:69:7d:85:d6:1e:85:c7:88:
         b8:24:1c:a9:09:ec:a9:6f:8d:49:50:29:05:9a:64:b5:66:2b:
         73:7d:dc:42:fb:a9:52:23:43:5c:fa:f3:b9:09:e0:95:2a:e5:
         8b:39:1e:1f:00:01:7b:d6:3b:2e:99:11:14:92:45:7b:6c:37:
         c3:1d:a6:19:0d:4d:78:09:3b:00:f4:46:81:1b:34:2d:f5:23:
         31:07:0d:ed:b5:07:50:81:9b:5a:ab:5f:3c:72:fb:92:da:5a:
         43:cb:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:30 2025 by rpki-client