This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/p5KCcOzim-v6XJjYlBjVIGZ3dE4.roa
File:                     p5KCcOzim-v6XJjYlBjVIGZ3dE4.roa (raw, json)
Hash identifier:          pgKjBAmHkzsan+KOifVtJepN0dwOV/WYQyfVNYEvrbo=
Subject key identifier:   A7:92:82:70:EC:E2:9B:EB:FA:5C:98:D8:94:18:D5:20:66:77:74:4E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05A6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p5KCcOzim-v6XJjYlBjVIGZ3dE4.roa
Signing time:             Mon 01 Dec 2025 01:28:50 +0000
ROA not before:           Mon 01 Dec 2025 01:28:50 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        61.204.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:28:50 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A7928270ECE29BEBFA5C98D89418D5206677744E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:8b:c6:4d:1e:55:06:0c:30:ef:76:3a:fc:
                    58:cf:6b:f0:80:4f:11:e4:29:30:e7:92:ae:87:72:
                    9e:b6:29:89:78:ac:ce:f0:42:b1:5a:a0:25:c0:ac:
                    7c:6d:9f:af:e8:a3:df:d0:c9:c6:3e:17:b9:3c:c0:
                    55:94:a4:ec:17:07:19:44:2c:2b:39:95:d5:1a:30:
                    db:06:72:c8:a8:0b:82:e6:32:4b:d0:20:7b:f7:df:
                    bd:fe:08:49:4d:f1:2c:84:66:aa:4d:a5:2d:fc:eb:
                    df:04:8e:eb:5a:b8:4e:bb:33:c5:45:af:15:93:33:
                    14:90:84:e3:ab:d7:dc:b1:cd:7d:b2:96:0b:8e:28:
                    de:16:3f:6c:a1:35:1a:d7:32:25:47:b1:f2:77:92:
                    15:5f:c9:1c:27:a2:7d:6f:f3:66:ef:f4:94:25:36:
                    f9:db:50:23:ba:45:a9:1f:e7:ea:d8:2f:dd:cf:73:
                    a5:c7:57:0c:70:28:98:8c:cb:ee:09:6e:55:8f:5d:
                    30:f8:9a:75:2d:60:10:3e:9b:54:87:7c:b1:ab:4d:
                    f9:fb:46:43:86:9c:e3:55:87:a2:5b:46:73:e7:8f:
                    81:46:a0:db:c6:b9:a3:27:9f:b2:0a:ce:6f:b6:10:
                    e9:32:36:28:45:a9:0e:4b:52:d6:d8:d8:f6:8c:fa:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:92:82:70:EC:E2:9B:EB:FA:5C:98:D8:94:18:D5:20:66:77:74:4E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p5KCcOzim-v6XJjYlBjVIGZ3dE4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.204.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:27:76:78:a2:49:55:fa:da:4e:e8:c8:b3:70:c0:15:ff:
         12:3e:15:aa:ac:57:d4:fb:cc:07:bb:74:4a:ca:10:d0:b9:66:
         4f:c7:da:39:56:cd:15:4c:2c:d2:17:03:54:8a:74:3c:97:1b:
         27:0f:da:4d:c8:85:4b:bc:67:ba:3e:37:24:8c:4f:ce:b8:e5:
         2a:48:0b:d7:1d:20:75:3d:1c:51:72:79:e1:90:14:4b:1c:8c:
         96:78:3c:27:20:50:d3:cc:10:5e:0c:9e:a1:e8:17:23:8d:b2:
         af:20:32:d2:b7:41:67:4e:63:b5:e1:f7:3b:e2:98:51:1d:8d:
         6f:c2:50:e5:03:4e:fe:c2:f8:80:01:be:e7:4b:fd:75:6c:3f:
         01:05:b1:19:35:7c:50:5b:ca:03:f5:46:b7:fe:2e:a1:10:29:
         e9:e0:f2:ee:01:e0:72:20:12:ce:a5:51:82:cb:f1:30:2e:0c:
         85:b1:52:71:49:4e:7e:3e:eb:e7:10:8c:12:69:dc:ef:09:6a:
         33:8c:12:06:98:ee:db:46:bf:7e:57:3c:77:7e:1e:0a:47:ed:
         52:03:d0:9b:5a:62:d2:cd:8e:ae:59:b7:c2:81:a7:78:32:64:
         98:34:ec:f0:28:bc:a9:36:25:60:91:59:78:0e:19:3f:25:ae:
         2d:4c:05:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:37 2025 by rpki-client