This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nKlqqyxoy4tx-YgQfQ8jJr-738s.roa
File:                     nKlqqyxoy4tx-YgQfQ8jJr-738s.roa (raw, json)
Hash identifier:          Bv9IJXes932iFN9/UbXeu6MGGuFq+YWogc6UbFQcs+4=
Subject key identifier:   9C:A9:6A:AB:2C:68:CB:8B:71:F9:88:10:7D:0F:23:26:BF:BB:DF:CB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0694
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nKlqqyxoy4tx-YgQfQ8jJr-738s.roa
Signing time:             Mon 01 Dec 2025 02:09:53 +0000
ROA not before:           Mon 01 Dec 2025 02:09:53 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.224.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1684 (0x694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:09:53 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=9CA96AAB2C68CB8B71F988107D0F2326BFBBDFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e0:2b:f6:c1:6e:23:cf:65:bc:9b:15:ba:19:
                    fc:25:67:74:f2:bf:b3:d7:99:7c:90:f7:d5:0a:08:
                    13:d4:2b:97:0c:a6:46:95:46:ac:0b:64:ea:6c:20:
                    fd:1f:cf:0d:d2:a7:ab:cf:12:bc:1f:bc:7d:9d:d7:
                    34:40:c1:b7:e7:71:44:22:d5:60:75:30:14:67:44:
                    c0:19:13:39:03:21:e0:b5:9a:76:32:cd:1d:c0:c5:
                    e3:12:6d:0e:c6:bb:8f:33:dd:80:00:27:f9:15:53:
                    39:de:99:83:2d:7f:29:e0:fd:1f:83:f7:a4:44:bb:
                    54:ae:dc:13:3b:c3:bb:af:7a:86:db:54:95:02:8a:
                    69:08:e1:89:09:57:52:5d:e6:f2:74:8e:b4:3a:dc:
                    4a:45:82:52:4e:51:bc:aa:be:df:a1:04:76:69:c7:
                    77:bb:00:11:6c:cc:39:6e:1a:93:11:08:ab:20:76:
                    f9:ed:23:51:54:cb:6f:5d:72:1c:6c:3b:38:d6:6e:
                    72:48:0c:12:fc:73:58:35:ef:58:50:ed:a6:37:0c:
                    8f:f8:47:0b:17:2e:7c:bf:37:31:e8:fa:c8:3a:bf:
                    40:4b:22:ef:90:c1:88:49:f7:8c:42:28:3d:42:ce:
                    32:e7:c4:8b:04:2f:7b:b9:b6:aa:a7:39:0e:aa:87:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A9:6A:AB:2C:68:CB:8B:71:F9:88:10:7D:0F:23:26:BF:BB:DF:CB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nKlqqyxoy4tx-YgQfQ8jJr-738s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:af:01:c1:db:be:1c:9c:75:1d:0d:33:91:15:00:5a:90:3f:
         5f:16:ba:fe:9d:3f:2d:84:49:80:93:e6:24:fe:91:ae:c3:c3:
         52:00:68:40:08:1d:93:b1:e6:33:78:5c:25:b7:d0:99:1a:fc:
         fd:50:08:40:ba:16:8c:44:7f:58:b1:22:7f:5c:01:dc:a3:c5:
         04:d9:62:9d:e8:9c:aa:db:b8:67:d2:1e:db:65:e1:e2:cd:a9:
         a4:cf:fb:67:6d:25:bd:b8:67:bc:e0:c8:83:2a:fb:7d:01:39:
         68:cb:8b:f2:f2:6f:52:fa:68:59:21:e7:04:fe:f0:ca:57:b1:
         fe:ed:9c:1d:b5:4a:40:75:29:12:fc:ab:ff:8d:0c:d0:74:75:
         8e:cf:f8:6b:1a:8c:fd:99:0d:1b:e5:c6:bc:aa:1e:70:cc:a7:
         af:12:66:ca:bd:c0:3f:7d:57:78:80:87:70:da:59:73:a9:07:
         c8:24:a6:73:d6:21:b9:14:d4:4d:8e:51:08:90:85:a2:3e:8b:
         91:f8:01:1b:bd:e5:1f:ef:3a:16:b9:b6:20:5e:ba:3f:fd:20:
         7b:87:c2:ae:84:38:01:f0:13:46:13:fe:08:e4:9b:ad:27:40:
         44:3b:c0:39:41:50:e5:3b:7d:d9:34:2f:a4:21:2b:cf:a9:55:
         8f:30:ad:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:58:00 2025 by rpki-client