This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lviKQC0sG60FpSRsrT5dt6jtLZM.roa
File:                     lviKQC0sG60FpSRsrT5dt6jtLZM.roa (raw, json)
Hash identifier:          KtDjq1ygewfDDJjl33DG4vnmr9ouY40ouEsltOzgV60=
Subject key identifier:   96:F8:8A:40:2D:2C:1B:AD:05:A5:24:6C:AD:3E:5D:B7:A8:ED:2D:93
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       066E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lviKQC0sG60FpSRsrT5dt6jtLZM.roa
Signing time:             Mon 01 Dec 2025 02:01:55 +0000
ROA not before:           Mon 01 Dec 2025 02:01:55 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:01:55 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=96F88A402D2C1BAD05A5246CAD3E5DB7A8ED2D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:51:5b:68:b3:45:4e:b0:fb:f0:ad:63:bd:
                    ae:e0:61:46:5f:f3:b4:e2:e2:cb:d7:1b:d6:d6:4c:
                    2f:06:41:18:3f:c2:1e:ad:97:77:bc:b3:f1:3a:4b:
                    a3:1c:c6:0d:b2:95:90:64:15:8d:65:9b:57:24:f7:
                    0f:41:52:29:3c:0d:f5:98:4a:c9:5b:3d:f8:75:d2:
                    3a:b3:95:b7:fe:a1:60:0c:2d:a6:de:bb:67:17:c7:
                    85:4a:2a:8d:8e:8c:07:e0:07:bc:26:48:b8:62:54:
                    d7:29:a7:7d:08:ba:e2:87:a1:6d:e4:1b:93:1b:79:
                    c3:30:e9:b2:53:ee:81:5b:15:0a:2c:93:24:43:e2:
                    62:0f:50:50:15:08:6f:0e:33:f7:8d:81:93:58:2d:
                    86:46:df:6c:8e:9b:0e:e5:02:ae:7a:27:d8:95:3f:
                    25:a2:01:7e:fb:f2:ed:88:b8:01:f8:78:63:46:00:
                    5b:23:4a:03:bf:98:cf:f8:7c:79:59:c0:6e:14:9d:
                    84:49:98:36:fb:f5:df:f6:6e:8e:d9:66:ea:82:01:
                    80:6c:7a:42:ed:d5:85:d7:62:98:22:8c:f2:36:cd:
                    f3:a7:ea:13:07:bc:df:c6:d8:86:8d:d8:bf:57:dc:
                    ed:bb:33:af:54:9d:61:a7:56:e3:d1:65:75:80:da:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F8:8A:40:2D:2C:1B:AD:05:A5:24:6C:AD:3E:5D:B7:A8:ED:2D:93
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lviKQC0sG60FpSRsrT5dt6jtLZM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:9d:d7:1f:ef:91:6d:56:95:94:fc:76:ff:47:c7:df:6a:b1:
         9e:fb:27:76:81:59:25:6d:d5:d0:8b:95:5a:bf:5d:87:63:c4:
         89:fe:8f:5d:f4:a6:0c:15:66:6e:c0:cf:8c:8f:cb:99:c7:c2:
         2a:19:e6:16:9d:e6:ca:67:ef:23:8b:bc:b9:10:61:71:bc:a4:
         bb:52:77:f0:ff:9a:d1:eb:47:cb:32:34:57:e4:de:98:03:b5:
         10:63:76:bd:7b:8a:94:7a:e1:db:04:28:8c:a9:ca:f1:81:ce:
         c6:0c:ec:ad:e5:26:8e:01:91:b6:ad:6b:a8:24:4c:23:ac:5b:
         39:42:ae:ca:ee:07:3d:71:fe:50:d4:e3:8c:cb:34:11:7a:27:
         02:ec:27:50:ad:e5:0a:7f:c4:15:22:78:b5:ad:d1:37:4a:cb:
         af:dd:a1:6d:4f:60:2d:1d:6a:f1:7b:af:12:d1:2b:1f:13:bf:
         aa:49:e4:73:e7:90:7b:de:93:dc:3d:37:54:c4:c8:a2:76:ac:
         40:7f:58:4b:6a:54:15:4f:b1:89:90:00:2d:11:5c:a7:01:1c:
         d0:5e:a5:dc:69:66:9b:c6:99:f4:37:eb:94:89:3e:77:3e:1d:
         99:dc:ca:22:68:59:6d:ac:c8:c6:c7:96:34:58:a0:97:08:a7:
         db:cb:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:28 2025 by rpki-client