This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/k5sbEwBcKDBb1DGvR2IQLW14auA.roa
File:                     k5sbEwBcKDBb1DGvR2IQLW14auA.roa (raw, json)
Hash identifier:          PIvvyiToGKp5x23BrJIX2hxaNvrEG1YbPX3j6/C9G48=
Subject key identifier:   93:9B:1B:13:00:5C:28:30:5B:D4:31:AF:47:62:10:2D:6D:78:6A:E0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0632
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/k5sbEwBcKDBb1DGvR2IQLW14auA.roa
Signing time:             Mon 01 Dec 2025 01:50:08 +0000
ROA not before:           Mon 01 Dec 2025 01:50:08 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.161.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:50:08 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=939B1B13005C28305BD431AF4762102D6D786AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:5a:ca:08:1a:5d:f9:da:8c:b9:d0:e2:87:
                    ab:aa:0e:02:e8:6c:57:53:e4:c7:96:57:58:f3:43:
                    0c:82:cb:1a:32:44:85:40:2a:db:0d:57:37:95:df:
                    0b:9f:74:cc:3c:60:55:c7:31:d9:1c:b1:8c:ac:f8:
                    dc:99:6c:6a:82:fa:1b:48:d7:1c:ba:89:28:2d:c6:
                    5c:42:b7:28:be:e5:52:ad:45:c5:ec:5a:e8:bb:59:
                    7c:08:e2:3d:8a:6a:b6:b6:34:d0:58:35:1e:a9:c7:
                    b6:18:68:7c:48:f9:cd:8e:1b:77:8a:b0:0a:7b:57:
                    0d:22:0f:48:f8:cf:d9:90:18:dd:f5:62:2b:fc:02:
                    e7:77:9f:0d:65:2f:d9:72:78:cb:71:25:7a:83:af:
                    ad:87:2c:62:fc:5c:16:e2:a8:12:b9:46:13:88:26:
                    a1:62:c4:4b:05:27:2c:5b:83:b8:59:a7:4a:f7:da:
                    09:97:49:16:33:3b:08:95:df:36:73:a8:2d:8d:02:
                    cf:b0:42:ac:ad:eb:a0:80:63:29:1d:a7:08:9f:26:
                    cf:4a:e9:6b:7f:63:58:fc:73:34:56:aa:c2:cd:67:
                    6e:2e:ef:82:d7:a8:ac:f9:54:3e:11:1c:49:9b:7e:
                    6b:63:41:2c:47:da:78:9b:ba:a2:0b:ee:da:26:e3:
                    f7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:1B:13:00:5C:28:30:5B:D4:31:AF:47:62:10:2D:6D:78:6A:E0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/k5sbEwBcKDBb1DGvR2IQLW14auA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.161.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:e7:7d:ae:73:e9:67:bc:e6:4c:49:c8:65:62:b5:25:95:
         70:85:55:0a:8f:5b:aa:a6:fe:69:cb:43:85:3d:aa:5c:c7:18:
         67:8b:04:ee:55:55:60:4f:10:51:28:4b:8f:46:ab:2c:f8:e1:
         64:53:bc:24:c0:92:46:91:23:5f:b0:11:d1:bb:7b:ee:fd:30:
         1d:78:d9:a5:a7:71:84:c1:c2:94:e8:4f:a7:1c:f7:7a:95:5b:
         4a:6f:8c:d8:3a:5d:b8:0f:1b:a4:ba:49:4a:5b:41:66:0d:2f:
         dd:78:58:c8:94:e5:16:50:1c:fb:44:bb:9d:2b:5b:c1:38:24:
         33:c3:dc:2d:c1:84:50:5a:17:ca:4c:1d:93:da:06:25:16:9a:
         8d:ee:1c:bf:f4:7c:00:43:fc:3e:a8:cc:9d:72:7d:14:1d:cd:
         19:02:c9:51:5d:b4:0e:25:97:d1:ff:f0:67:d7:b4:d4:36:5d:
         d0:81:dd:a3:78:96:1c:aa:e4:cb:82:0a:e5:29:ef:d3:f3:32:
         8d:00:2e:95:78:0f:cc:0f:7b:70:18:5d:95:a6:1c:50:80:69:
         bd:43:b2:66:dc:fd:e3:8d:57:3a:0e:b5:eb:3b:33:ab:68:ad:
         f2:ce:29:d4:90:dc:5d:ea:3f:22:a7:72:97:c0:95:f6:6f:4e:
         ea:7a:40:e6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MTUwMDhaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzOUIxQjEzMDA1QzI4
MzA1QkQ0MzFBRjQ3NjIxMDJENkQ3ODZBRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtuFrKCBpd+dqMudDih6uqDgLobFdT5MeWV1jzQwyCyxoyRIVA
KtsNVzeV3wufdMw8YFXHMdkcsYys+NyZbGqC+htI1xy6iSgtxlxCtyi+5VKtRcXs
Wui7WXwI4j2Kara2NNBYNR6px7YYaHxI+c2OG3eKsAp7Vw0iD0j4z9mQGN31Yiv8
Aud3nw1lL9lyeMtxJXqDr62HLGL8XBbiqBK5RhOIJqFixEsFJyxbg7hZp0r32gmX
SRYzOwiV3zZzqC2NAs+wQqyt66CAYykdpwifJs9K6Wt/Y1j8czRWqsLNZ24u74LX
qKz5VD4RHEmbfmtjQSxH2nibuqIL7tom4/cfAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUk5sbEwBcKDBb1DGvR2IQLW14auAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2s1c2JFd0JjS0RCYjFER3ZSMklRTFcxNGF1QS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBqoTANBgkqhkiG9w0BAQsFAAOCAQEAXI/nfa5z6We85kxJyGVitSWVcIVV
Co9bqqb+actDhT2qXMcYZ4sE7lVVYE8QUShLj0arLPjhZFO8JMCSRpEjX7AR0bt7
7v0wHXjZpadxhMHClOhPpxz3epVbSm+M2DpduA8bpLpJSltBZg0v3XhYyJTlFlAc
+0S7nStbwTgkM8PcLcGEUFoXykwdk9oGJRaaje4cv/R8AEP8PqjMnXJ9FB3NGQLJ
UV20DiWX0f/wZ9e01DZd0IHdo3iWHKrky4IK5Snv0/MyjQAulXgPzA97cBhdlaYc
UIBpvUOyZtz9441XOg616zszq2it8s4p1JDcXeo/Iqdyl8CV9m9O6npA5g==
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:33 2025 by rpki-client