This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/l5dU9zvGBFGxQJrh0UE5URRWL30.roa
File:                     l5dU9zvGBFGxQJrh0UE5URRWL30.roa (raw, json)
Hash identifier:          VEEifsR003/vSM9lVXLHZMrmkNqv8aoiSDlsEMus4+o=
Subject key identifier:   97:97:54:F7:3B:C6:04:51:B1:40:9A:E1:D1:41:39:51:14:56:2F:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0599
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/l5dU9zvGBFGxQJrh0UE5URRWL30.roa
Signing time:             Mon 01 Dec 2025 01:28:43 +0000
ROA not before:           Mon 01 Dec 2025 01:28:43 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        220.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:28:43 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=979754F73BC60451B1409AE1D141395114562F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:f3:56:91:1b:4c:d9:89:33:84:34:18:16:
                    c9:ff:cb:68:fb:6f:38:0c:5a:17:82:23:10:7a:8d:
                    12:ed:e4:16:7e:1a:ed:5a:2f:24:7e:fd:13:b8:7c:
                    5e:39:13:b0:fe:89:0b:08:50:5a:81:f6:ae:1c:2b:
                    53:73:e1:b7:85:99:1a:c3:f2:c3:68:e9:bd:90:e7:
                    42:3d:b5:b8:b7:9b:b8:fd:e1:80:c2:3f:b5:a9:b5:
                    3d:f0:c6:64:56:65:2f:c6:78:f4:fe:32:f6:4e:23:
                    5f:35:d9:f1:ab:16:a6:27:51:bc:9c:04:d1:55:39:
                    f9:9a:17:54:c4:bb:a3:90:78:17:14:21:a1:9c:36:
                    5d:bd:cb:3e:d1:2e:bc:33:84:49:3a:c8:51:a3:48:
                    71:49:59:71:eb:f6:e0:1c:43:e6:8e:f5:91:ed:45:
                    1d:92:b3:13:d1:8d:06:c3:d1:c4:ba:76:cf:a4:a5:
                    f3:17:ee:2b:73:5b:c7:c8:a9:ab:87:24:c9:84:fa:
                    a1:3c:05:15:3c:5a:ce:0d:b7:6f:3f:ce:4e:ee:87:
                    11:b5:ba:ef:09:74:32:2c:a7:9f:72:68:7a:9a:00:
                    6e:7f:37:b2:ad:53:83:56:46:0a:0c:12:a3:32:52:
                    61:61:da:30:9b:4b:60:6e:83:ab:d2:b5:83:91:a3:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:97:54:F7:3B:C6:04:51:B1:40:9A:E1:D1:41:39:51:14:56:2F:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/l5dU9zvGBFGxQJrh0UE5URRWL30.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:ec:1a:7e:28:b8:ee:2b:52:e7:30:9e:c8:b4:22:e4:cc:1f:
         00:5c:fd:7c:14:12:bd:e8:3d:2f:fa:3f:53:54:47:7b:32:f6:
         c4:f9:77:f6:f8:ee:02:84:b8:10:22:9e:38:c9:31:2c:fd:fe:
         3a:88:fc:95:85:cb:81:1e:8f:e1:5b:ee:00:77:7c:e1:9c:2b:
         c1:ce:5b:80:ba:87:e7:45:bc:d6:c2:28:d5:ec:47:96:01:33:
         53:8f:7b:38:2f:cc:ae:81:f4:d7:6d:92:5d:ab:a1:3c:f8:e2:
         0c:b6:5c:b9:f7:02:38:6d:e5:57:60:74:1f:6c:95:82:12:1c:
         e4:c7:97:b3:9b:f6:a8:75:28:ae:26:fd:5c:74:00:5d:7c:06:
         ef:78:c7:b9:62:35:fd:6b:fe:ad:2d:46:8d:b5:29:a1:31:fc:
         cf:85:e7:20:ec:f6:cd:ef:53:3c:51:c7:0b:7d:6e:c1:30:5b:
         2f:9d:51:9b:ba:11:df:6f:78:d6:5f:b9:f5:95:3c:1d:e0:69:
         5d:90:c7:8c:cd:f0:23:ca:ca:93:42:48:39:7a:24:47:b5:ea:
         b0:fe:f4:77:4a:ed:63:c7:e8:7a:a7:fe:5e:89:35:aa:fb:25:
         a4:c9:54:8b:88:e7:d0:c5:ff:06:85:57:9a:46:e3:a5:7d:03:
         91:1f:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:02 2025 by rpki-client