This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/j5tl5jb3gA34bOL4n9bjhG_zGmk.roa
File:                     j5tl5jb3gA34bOL4n9bjhG_zGmk.roa (raw, json)
Hash identifier:          61Qpxk7YwRSyIchDolSSBfgtWZLkZrKHqueuxaT0+Ts=
Subject key identifier:   8F:9B:65:E6:36:F7:80:0D:F8:6C:E2:F8:9F:D6:E3:84:6F:F3:1A:69
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06B2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/j5tl5jb3gA34bOL4n9bjhG_zGmk.roa
Signing time:             Mon 01 Dec 2025 02:13:59 +0000
ROA not before:           Mon 01 Dec 2025 02:13:59 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.230.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:13:59 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=8F9B65E636F7800DF86CE2F89FD6E3846FF31A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:3d:1b:16:ec:65:af:c6:d6:49:7f:a6:ae:
                    9a:ff:bc:0f:cd:d3:54:d0:5a:0c:9f:1a:0f:f4:9d:
                    d2:88:4b:3c:51:4d:31:f7:ac:89:55:d2:fb:60:ad:
                    80:92:8b:7a:ea:cb:61:f8:a2:92:29:7e:01:3b:03:
                    e2:75:7c:9b:b3:0a:a0:9a:41:96:f1:40:02:1d:c6:
                    7a:fb:7e:c9:4a:dd:53:db:b6:d4:4a:5c:5b:09:b3:
                    00:b5:5b:58:55:df:e0:69:7b:b1:52:dc:b8:08:f0:
                    8b:6c:9f:b2:66:61:01:4f:b6:60:35:6c:78:23:a1:
                    4a:8e:a6:74:60:63:d2:ba:c4:71:ed:4b:69:b8:d4:
                    79:d9:17:a2:98:fa:50:73:d2:ce:25:42:d2:9c:84:
                    5b:c0:ed:73:09:a5:18:37:e0:87:be:b2:5e:36:3b:
                    ae:ae:4f:56:d9:75:c6:b2:60:04:6c:c4:84:20:80:
                    eb:d6:9b:df:2d:a7:9f:6c:01:ec:6d:09:ff:68:2d:
                    1b:57:5b:44:38:70:11:e1:79:92:f2:d8:a8:34:34:
                    86:e7:7a:4e:1b:6f:ac:d9:39:f1:2b:b4:28:02:9e:
                    dd:6a:8b:2a:2a:72:7f:84:96:91:d6:15:ba:6a:87:
                    48:9c:1b:16:67:2c:2b:32:3f:4f:ab:e6:44:2e:0a:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9B:65:E6:36:F7:80:0D:F8:6C:E2:F8:9F:D6:E3:84:6F:F3:1A:69
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/j5tl5jb3gA34bOL4n9bjhG_zGmk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.230.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b4:99:74:f8:fe:f0:3b:2b:79:1f:a8:ba:e2:53:a5:a8:07:d5:
         bd:78:e1:eb:b5:3d:63:e6:8f:8e:84:27:82:9d:a5:ba:73:07:
         a1:53:2e:e2:c3:31:07:c1:f6:b0:3a:0d:2b:8d:58:54:09:2a:
         1e:4f:bf:07:c0:ee:4e:b9:9f:10:c0:8c:36:9a:02:8e:e8:6b:
         e2:50:ef:98:b9:f6:a2:6e:ee:a2:0c:8d:c4:61:89:39:13:cc:
         50:74:d9:d8:f4:f6:25:26:2c:43:9a:5d:3b:ab:62:5c:65:06:
         b0:d3:4d:ae:85:0f:2d:9b:63:e9:a2:e2:ed:0f:c3:cc:df:ad:
         5e:a6:29:c4:9c:3f:ce:af:33:80:0c:9b:c8:d2:f1:ab:76:70:
         a8:eb:b8:ca:24:04:81:e5:bb:ae:fc:77:c6:46:3b:69:13:31:
         69:39:90:04:aa:9d:a0:48:10:cf:20:cc:d8:d3:c3:b0:20:b9:
         24:be:08:3e:cb:27:90:6f:32:1c:26:52:ba:ff:7b:21:c9:86:
         55:ed:e1:6c:1e:65:ef:df:9b:d7:3b:59:f2:e0:6b:1c:55:1b:
         bc:a8:a3:76:35:5f:73:58:9c:60:3a:89:58:c4:e4:ba:59:38:
         fb:a7:ff:38:db:bd:ad:5f:5f:cb:2f:76:fd:71:89:02:e5:35:
         b3:6f:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:53 2025 by rpki-client