This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jQUiOzPN3nC3W9j1V4SAfyQMbfM.roa
File:                     jQUiOzPN3nC3W9j1V4SAfyQMbfM.roa (raw, json)
Hash identifier:          mU3x7g2qOpCcIOEbSXfqFAH/HQT10R9ULZuZ7Qp/kUg=
Subject key identifier:   8D:05:22:3B:33:CD:DE:70:B7:5B:D8:F5:57:84:80:7F:24:0C:6D:F3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06B8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jQUiOzPN3nC3W9j1V4SAfyQMbfM.roa
Signing time:             Mon 01 Dec 2025 02:14:04 +0000
ROA not before:           Mon 01 Dec 2025 02:14:04 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:14:04 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=8D05223B33CDDE70B75BD8F55784807F240C6DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:66:cc:b2:6f:b3:ca:7b:fc:38:0a:29:90:
                    38:ff:30:41:cc:ad:2e:f0:2d:6b:c2:33:8d:e1:ba:
                    b1:27:dc:82:73:39:1f:6b:cc:0c:9b:5b:f1:70:49:
                    1e:a3:b6:57:be:3d:e1:d7:03:f1:f8:13:87:54:ab:
                    28:61:13:df:f6:04:fe:d8:bb:e2:62:0f:94:d9:e7:
                    64:52:b3:41:27:1c:d2:10:10:7b:fa:81:cf:67:ec:
                    55:4b:6e:66:bc:21:b2:e6:ac:f2:9f:e8:38:4d:a3:
                    92:bc:59:49:d4:7c:a9:cf:3f:ae:a0:cf:59:06:fd:
                    2f:59:09:3b:8f:b7:07:3f:ea:22:a3:c2:6b:c6:b1:
                    62:93:1f:b2:8e:e0:c7:31:03:b9:ae:f9:b0:de:8f:
                    ab:42:a7:5a:8e:c9:2a:73:86:ec:e3:1c:f3:f0:d6:
                    e8:6f:99:02:de:8f:7c:7b:b8:7d:41:64:72:15:56:
                    4d:0e:75:1a:78:4f:dc:49:f3:09:12:c2:8e:1d:dd:
                    28:6a:c5:70:48:da:65:ff:aa:88:d0:74:ef:12:da:
                    51:44:17:ba:98:7d:52:e3:c1:55:9c:b0:ee:6b:59:
                    d2:9e:f5:54:0e:91:03:ba:7b:46:2e:06:81:91:4d:
                    9c:7b:1d:8a:54:9a:bc:3e:b0:25:ce:91:15:4f:bf:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:05:22:3B:33:CD:DE:70:B7:5B:D8:F5:57:84:80:7F:24:0C:6D:F3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jQUiOzPN3nC3W9j1V4SAfyQMbfM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:f2:42:6c:b4:37:3f:44:53:7c:d7:8a:ed:1b:a1:2b:83:e6:
         32:0e:21:8a:2c:22:ed:3d:11:f0:38:da:a7:e2:ac:92:d8:d4:
         b7:98:24:be:0f:9a:83:c0:80:8c:11:ba:21:32:97:60:af:c4:
         d2:3a:3c:64:a4:4b:a2:58:51:53:6c:4a:39:b2:02:93:54:6d:
         8f:12:39:56:f2:04:8b:70:fb:de:e7:22:95:1e:fa:b3:8d:66:
         26:e7:49:a1:f2:42:25:33:25:f3:89:d7:b1:fd:5f:ff:f6:54:
         f5:0a:ca:82:9b:03:5e:da:4d:11:6d:63:8b:61:71:b3:99:be:
         1e:5a:7c:a5:62:e0:82:60:dd:e0:8e:11:57:57:2b:ec:e6:16:
         b6:6e:1c:c4:c6:f3:40:f8:f9:5d:dd:8c:14:22:a9:a5:3c:95:
         cb:0a:8f:8a:bf:53:dc:6c:dc:67:bd:50:04:65:76:c6:2e:84:
         81:6e:6e:61:f5:ab:a9:ee:2e:5c:3e:fc:4a:6d:22:85:33:bb:
         74:a8:bb:6b:a0:62:41:3c:5e:92:4b:61:bc:86:f1:ba:28:ac:
         1c:52:44:eb:94:2f:31:6d:c6:a8:5f:72:03:0e:b2:36:d3:17:
         7a:18:61:3e:bd:ff:b0:da:24:3c:19:a1:8b:cd:34:ce:d6:0a:
         cc:21:23:84
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MjE0MDRaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhEMDUyMjNCMzNDRERF
NzBCNzVCRDhGNTU3ODQ4MDdGMjQwQzZERjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVI2bMsm+zynv8OAopkDj/MEHMrS7wLWvCM43hurEn3IJzOR9r
zAybW/FwSR6jtle+PeHXA/H4E4dUqyhhE9/2BP7Yu+JiD5TZ52RSs0EnHNIQEHv6
gc9n7FVLbma8IbLmrPKf6DhNo5K8WUnUfKnPP66gz1kG/S9ZCTuPtwc/6iKjwmvG
sWKTH7KO4McxA7mu+bDej6tCp1qOySpzhuzjHPPw1uhvmQLej3x7uH1BZHIVVk0O
dRp4T9xJ8wkSwo4d3ShqxXBI2mX/qojQdO8S2lFEF7qYfVLjwVWcsO5rWdKe9VQO
kQO6e0YuBoGRTZx7HYpUmrw+sCXOkRVPv1n5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUjQUiOzPN3nC3W9j1V4SAfyQMbfMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2pRVWlPelBOM25DM1c5ajFWNFNBZnlRTWJmTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAF8bZIwDQYJKoZIhvcNAQELBQADggEBACDyQmy0Nz9EU3zXiu0boSuD5jIO
IYosIu09EfA42qfirJLY1LeYJL4PmoPAgIwRuiEyl2CvxNI6PGSkS6JYUVNsSjmy
ApNUbY8SOVbyBItw+97nIpUe+rONZibnSaHyQiUzJfOJ17H9X//2VPUKyoKbA17a
TRFtY4thcbOZvh5afKVi4IJg3eCOEVdXK+zmFrZuHMTG80D4+V3djBQiqaU8lcsK
j4q/U9xs3Ge9UARldsYuhIFubmH1q6nuLlw+/EptIoUzu3Sou2ugYkE8XpJLYbyG
8boorBxSROuULzFtxqhfcgMOsjbTF3oYYT69/7DaJDwZoYvNNM7WCswhI4Q=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:01 2025 by rpki-client