This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lM9sIuqDa2GoJCegIw-zQG5A6W8.roa
File:                     lM9sIuqDa2GoJCegIw-zQG5A6W8.roa (raw, json)
Hash identifier:          UWgG4BvqGvkGW2o/6E+hlQtmzNQce9ZLmMumvWXruWU=
Subject key identifier:   94:CF:6C:22:EA:83:6B:61:A8:24:27:A0:23:0F:B3:40:6E:40:E9:6F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0721
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lM9sIuqDa2GoJCegIw-zQG5A6W8.roa
Signing time:             Mon 01 Dec 2025 02:30:01 +0000
ROA not before:           Mon 01 Dec 2025 02:30:01 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        59.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:30:01 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=94CF6C22EA836B61A82427A0230FB3406E40E96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:25:ca:cc:d1:73:c1:a8:77:79:17:99:b7:
                    fd:0b:ae:e7:a4:e8:84:b5:6f:5d:e5:13:c1:82:93:
                    82:4d:e3:41:38:a7:ce:e1:fa:19:f5:de:47:48:4a:
                    9b:07:66:3e:60:89:c1:a3:c0:1b:2b:1f:d8:71:57:
                    32:94:35:13:34:7f:1f:e5:b8:de:e4:bf:b1:84:42:
                    9b:5f:f5:69:a8:e4:f6:76:6e:cc:a7:ce:4e:58:56:
                    1b:dc:d6:f3:99:db:aa:74:22:a3:79:7c:28:d1:56:
                    b6:6e:4f:ce:d1:40:e1:cb:6a:59:c4:4d:c2:c2:73:
                    59:49:19:73:4f:9b:0f:6d:d8:03:b9:35:e5:ae:d0:
                    c6:15:23:84:3e:18:6e:46:a2:00:3a:29:d6:24:f8:
                    5a:c8:e0:9d:a6:60:69:a2:b6:b9:63:f1:8a:92:d8:
                    8f:b4:75:9e:6c:8b:2d:13:ff:56:e7:b9:02:00:dd:
                    03:50:7d:af:bf:f7:d1:4f:10:24:72:af:86:2b:ec:
                    81:84:60:4c:1d:18:eb:ec:f2:22:84:49:d6:08:6a:
                    1f:06:52:d2:2b:34:4a:59:67:dc:cf:e0:b8:58:66:
                    c4:ff:fe:fb:50:1f:50:2a:91:00:f2:af:1b:54:c4:
                    cc:26:06:9d:c0:f2:cb:5c:d0:6e:6a:13:95:a2:e4:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CF:6C:22:EA:83:6B:61:A8:24:27:A0:23:0F:B3:40:6E:40:E9:6F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lM9sIuqDa2GoJCegIw-zQG5A6W8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:a9:09:cc:2b:ef:64:c3:19:4d:8f:41:87:39:8a:11:98:fa:
         63:e7:92:57:7f:2a:bc:0e:ba:bd:09:41:c1:e9:45:2c:37:19:
         62:37:7d:93:78:3a:2e:2d:7b:80:73:a5:10:14:0d:15:0e:76:
         59:26:f9:c5:d1:b3:d2:c0:31:ce:8f:b8:c6:4b:9d:3b:59:69:
         56:ae:04:c5:0f:34:25:30:7a:c9:57:f6:d9:29:cb:20:44:d6:
         1e:66:80:9e:04:8e:24:07:f3:99:1a:69:10:61:40:03:ed:4a:
         36:8c:5b:35:90:36:56:cf:ca:35:0e:cd:ac:f5:e1:01:48:66:
         5b:f0:d5:5e:cf:0f:e4:47:9f:d2:5f:ec:56:71:80:e1:ed:04:
         17:4c:19:0a:5c:14:f4:e1:66:2d:e2:ff:70:d2:87:00:6b:aa:
         4f:ae:a9:20:96:d9:d0:57:9a:64:52:1b:8e:41:8e:32:ef:48:
         02:32:9c:bc:58:74:94:45:40:a7:bb:76:c7:c8:fb:6d:bf:99:
         7b:ec:1c:ce:a8:e7:76:74:c2:e5:67:bf:bb:d6:6c:03:79:55:
         12:33:03:98:4a:c8:13:7b:ca:bf:c7:be:c8:3e:04:22:1e:69:
         39:f1:92:05:5b:89:ef:b3:1d:41:1e:b9:e1:3c:76:23:66:af:
         fd:65:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:32 2025 by rpki-client