This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/p76UM2TcBwukoUd_Mb3_GgJ_ja8.roa
File:                     p76UM2TcBwukoUd_Mb3_GgJ_ja8.roa (raw, json)
Hash identifier:          +55b8HioIy48rDdWPKRYytmIb4uXM9BgfT32smiZ9Rw=
Subject key identifier:   A7:BE:94:33:64:DC:07:0B:A4:A1:47:7F:31:BD:FF:1A:02:7F:8D:AF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06E7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p76UM2TcBwukoUd_Mb3_GgJ_ja8.roa
Signing time:             Mon 01 Dec 2025 02:22:00 +0000
ROA not before:           Mon 01 Dec 2025 02:22:00 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        175.128.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:22:00 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A7BE943364DC070BA4A1477F31BDFF1A027F8DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:72:2a:e8:a1:16:b1:95:01:a8:39:5d:0b:00:
                    51:d7:b7:db:24:db:5f:ce:cc:42:b1:09:da:1c:dc:
                    8b:a1:a4:86:3e:1e:c5:b1:a1:87:8b:7b:f6:dc:6e:
                    fd:8f:fe:ec:4b:ce:ee:31:b3:31:13:36:f0:ca:aa:
                    38:94:e1:ad:d2:a3:08:62:ba:29:85:ab:f0:b1:57:
                    86:f4:a6:47:88:67:95:ba:e1:0f:79:58:9a:60:8f:
                    8d:0e:a0:ba:0d:ab:66:4c:30:a2:3e:47:f2:26:cd:
                    d5:b6:73:01:b3:7d:d4:f4:1e:e6:b5:2c:ba:83:78:
                    22:95:05:70:29:d1:6f:c3:8f:f8:c2:68:6f:30:1a:
                    8b:12:af:9e:17:8a:0a:17:8b:c9:2f:cc:98:66:a4:
                    82:85:b4:8d:35:da:f7:d4:69:a0:9e:35:93:34:05:
                    88:54:21:47:56:c2:8b:27:9b:f0:10:11:7a:5b:73:
                    db:c0:34:1f:cd:21:b3:88:f3:f5:fa:2b:cf:93:e0:
                    bb:47:2c:04:e9:e0:aa:96:67:d0:35:d4:07:e5:91:
                    9f:2e:07:1b:40:85:c9:08:e3:65:7f:04:6d:1d:5b:
                    f6:45:22:e4:0a:be:90:d0:30:a2:38:50:3c:1b:74:
                    b8:40:4f:9e:e9:d3:74:e4:94:e5:3a:78:40:a1:78:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:94:33:64:DC:07:0B:A4:A1:47:7F:31:BD:FF:1A:02:7F:8D:AF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p76UM2TcBwukoUd_Mb3_GgJ_ja8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:67:d4:42:a4:07:b6:bd:18:55:83:ec:25:91:9d:46:18:
         ba:c3:21:00:1a:f9:8b:a0:1f:6d:91:a0:08:3e:20:ff:ae:17:
         83:ee:6a:2f:a0:90:7d:06:0d:82:86:02:f2:dd:d8:88:a8:29:
         e9:39:b3:87:fb:52:7b:c8:5d:0c:b1:0d:d7:56:6b:d0:c0:f3:
         80:ee:f0:0d:35:f5:10:b6:f4:36:ce:b2:1c:cb:87:4d:f5:3e:
         e4:44:ac:37:e0:89:32:1d:e9:67:2c:ba:a5:1f:ff:67:6b:7d:
         a7:72:8b:ca:02:71:0e:fd:81:80:6e:7e:77:35:4b:f0:d2:b8:
         d5:59:59:86:84:86:56:2f:b3:67:86:86:59:df:69:ed:c2:4d:
         13:85:1e:eb:c4:c5:61:20:76:98:95:8a:d4:45:d1:f9:08:da:
         4c:5d:69:48:b3:cb:86:1b:ed:56:ed:88:97:0b:63:8e:b3:e2:
         be:c3:db:b4:b3:3a:72:76:1c:d7:8b:4a:07:96:b1:5d:cd:f1:
         05:0a:7d:6f:7a:7b:cf:2a:46:5c:3e:ff:7b:b9:de:d5:d6:11:
         90:66:d2:71:6c:aa:58:b0:d2:64:ff:b2:ac:9e:47:1f:d6:70:
         84:15:a3:c5:ae:f9:98:47:e5:e3:e0:60:84:7c:6e:22:6f:58:
         ec:82:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:04 2025 by rpki-client