This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lXTp729EvqUud4CND0gesbsG-1s.roa
File:                     lXTp729EvqUud4CND0gesbsG-1s.roa (raw, json)
Hash identifier:          kkzHEUZ8xpwlamFbqvojAUgUJz2vSzgBeyHKgTt+hr0=
Subject key identifier:   95:74:E9:EF:6F:44:BE:A5:2E:77:80:8D:0F:48:1E:B1:BB:06:FB:5B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       074C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lXTp729EvqUud4CND0gesbsG-1s.roa
Signing time:             Mon 01 Dec 2025 02:37:52 +0000
ROA not before:           Mon 01 Dec 2025 02:37:52 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        114.17.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:37:52 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=9574E9EF6F44BEA52E77808D0F481EB1BB06FB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:94:27:48:53:ba:e2:a0:4f:81:2b:2b:13:
                    f6:88:20:1e:50:6b:93:5e:d2:b6:e6:06:bc:b6:f6:
                    3c:54:42:a1:0b:b9:46:b9:3d:9a:96:86:79:d2:f1:
                    5c:72:4b:0e:2a:0f:d7:40:c0:c4:b5:da:27:b9:de:
                    1e:07:00:7b:09:f0:68:42:d8:a7:c0:ea:10:e7:28:
                    37:09:79:cf:20:f3:4a:2c:f4:a6:3d:a1:a3:35:dc:
                    0d:07:fe:40:e0:21:f2:01:4b:61:14:f0:01:9f:36:
                    85:af:5c:35:b4:ac:3b:3d:19:54:b7:f7:42:eb:45:
                    eb:b8:a6:c9:3a:64:6c:31:37:77:46:ea:2b:1f:b1:
                    69:1e:d1:20:35:ba:d1:81:12:7a:11:41:cb:ba:f7:
                    ff:05:44:e0:75:8c:99:0a:9f:00:e6:7e:43:9f:00:
                    ad:c0:48:de:73:bd:e8:f1:7f:02:68:8d:09:f4:73:
                    5a:9b:53:f3:dd:a8:b3:29:2e:6b:66:7d:b0:cc:bc:
                    90:78:9b:8c:e8:03:e4:79:d4:cb:05:d2:6c:1d:7f:
                    3e:3b:27:8b:6e:aa:4c:cd:09:3b:54:26:ad:07:e0:
                    fc:d0:6f:3e:dd:2e:56:28:39:3e:04:29:bd:e9:14:
                    53:42:8d:82:38:88:d5:68:2f:3c:18:f4:21:be:b4:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:74:E9:EF:6F:44:BE:A5:2E:77:80:8D:0F:48:1E:B1:BB:06:FB:5B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lXTp729EvqUud4CND0gesbsG-1s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:94:7f:62:2e:0d:56:c8:72:1e:c3:fc:93:bf:f2:db:9b:bb:
         15:58:c7:44:44:a9:ba:be:df:6e:a7:1b:99:05:4c:e2:67:d5:
         de:a0:03:a9:1d:b5:e2:7f:31:0e:38:79:b3:4e:7d:1c:51:e1:
         e9:3f:e8:06:c4:b5:61:2e:87:eb:fc:ef:9d:1a:ba:18:e8:44:
         53:85:e1:fe:25:7b:a9:85:19:21:ef:46:da:da:6c:2d:02:d7:
         f6:6e:f6:58:6e:49:97:d6:7e:e0:11:c9:a6:48:04:52:cd:e5:
         cf:b6:f9:56:0d:77:08:50:3d:bb:41:6e:e7:0b:19:68:be:b8:
         6b:c3:c4:0a:36:b3:ed:5b:9c:27:b8:a1:2a:ef:37:7b:dd:26:
         0f:e3:8a:fe:d9:d3:9f:90:d3:9e:ba:cd:d8:87:9f:a8:9a:03:
         75:39:6a:e8:dc:2f:fc:5e:84:80:42:ed:93:02:42:3e:33:1d:
         0c:5d:3e:05:b6:cc:cf:f6:9f:73:7a:b9:ce:c8:76:63:10:59:
         b9:3f:b7:c5:76:1f:4e:f9:6d:ae:53:8a:c1:9d:8f:be:8d:a0:
         75:62:db:43:0c:75:e3:19:28:68:e4:f2:16:bf:a0:be:87:70:
         90:86:0b:98:3a:c9:fc:e5:ae:c8:f8:f1:b6:1f:0b:91:80:4e:
         a3:97:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:52 2025 by rpki-client