This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/oQN24npkuv4YUVQfqTGu06Namz4.roa
File:                     oQN24npkuv4YUVQfqTGu06Namz4.roa (raw, json)
Hash identifier:          fxv8ZnjTbGGBsloh1lkXlQgs9FIDiGWrxDeIb1DhpSQ=
Subject key identifier:   A1:03:76:E2:7A:64:BA:FE:18:51:54:1F:A9:31:AE:D3:A3:5A:9B:3E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06D9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oQN24npkuv4YUVQfqTGu06Namz4.roa
Signing time:             Mon 01 Dec 2025 02:18:02 +0000
ROA not before:           Mon 01 Dec 2025 02:18:02 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:18:02 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A10376E27A64BAFE1851541FA931AED3A35A9B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:3f:e8:80:ae:28:21:67:ec:4a:6f:70:dd:
                    37:9d:ae:d6:97:3b:e1:d4:86:09:63:f9:d8:49:65:
                    38:12:1f:0e:e4:8d:bc:a6:68:41:aa:23:df:1d:bd:
                    2a:c2:da:42:56:8b:3f:cf:b8:c8:aa:ec:d3:85:21:
                    b1:9a:88:70:51:53:35:98:35:0e:3a:27:fc:25:e9:
                    05:d3:d8:02:60:b9:84:89:c1:99:98:f1:85:6a:36:
                    cd:4c:7f:8d:6f:0d:6f:99:53:1b:4c:be:d1:7a:07:
                    ac:c4:f7:d5:b9:08:7b:b2:65:f5:bc:e5:4d:26:9d:
                    07:21:47:8e:cc:f2:49:aa:e0:e1:b7:96:0b:f0:92:
                    2b:de:c1:1a:c1:1d:7f:f6:a2:74:ff:9c:31:92:fb:
                    d4:58:b2:18:21:75:8e:ea:43:40:9e:b9:f9:fe:0d:
                    27:f5:1e:18:23:5e:28:0f:59:48:7b:5b:f9:e9:e2:
                    bf:74:63:50:17:4c:db:c3:d7:a5:c9:68:c9:d5:be:
                    5d:f7:b7:93:1a:2c:98:fb:d6:f7:14:0d:84:fd:ff:
                    03:f4:2e:70:9d:d3:00:de:09:cd:72:6e:9e:40:37:
                    e0:2e:97:c0:df:69:d0:94:af:38:e3:33:01:43:22:
                    73:3d:8b:07:b0:da:e9:76:c9:44:29:04:e7:41:c2:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:03:76:E2:7A:64:BA:FE:18:51:54:1F:A9:31:AE:D3:A3:5A:9B:3E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oQN24npkuv4YUVQfqTGu06Namz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:5d:93:62:da:d6:0c:9b:04:97:6a:85:d8:f8:0d:07:1b:
         8b:ce:ae:0e:36:b8:6c:f5:8f:29:24:d1:15:18:92:3c:8e:69:
         dc:dc:d1:01:dd:7d:50:f2:39:53:7a:31:50:e8:61:89:45:fc:
         0c:3e:f8:16:89:62:da:a8:4d:f9:0c:1b:17:3d:d6:68:8b:8c:
         bc:31:5b:22:dc:14:82:a6:bf:8d:1f:91:a5:60:bd:f7:f6:19:
         06:64:33:6f:37:dd:d0:73:b9:be:54:74:ae:e7:d3:5f:db:89:
         b5:eb:83:b2:bb:60:d9:c6:7d:07:61:98:b7:cf:74:17:1d:cc:
         1f:6e:1a:0e:3c:ad:a5:db:2f:42:31:d3:14:09:3c:ba:1d:fd:
         2c:24:5c:67:31:97:59:7f:67:aa:62:9c:ec:2f:dc:fb:e0:f3:
         67:d1:c7:ed:31:72:95:10:7c:f2:26:3c:c6:7d:f3:30:2d:88:
         17:e7:50:22:af:0d:d5:2d:6c:7c:75:d3:a8:7c:4d:32:3c:c4:
         c7:c7:ef:eb:33:29:cb:b4:b9:62:0f:79:47:39:83:b2:cd:c7:
         cd:38:36:d4:7f:4c:78:53:ff:f7:2c:44:30:f2:6c:84:1c:f3:
         89:16:a8:4f:1f:9c:b2:e8:ed:57:88:11:8f:03:85:a6:0e:3f:
         de:9c:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:59:47 2025 by rpki-client