This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/p9n77S1nG3XvEgLNrXTAWlt2f4c.roa
File:                     p9n77S1nG3XvEgLNrXTAWlt2f4c.roa (raw, json)
Hash identifier:          3mMEvnC64JC1496qugVRCNnP0ySgeU7eGNSFqNik+dI=
Subject key identifier:   A7:D9:FB:ED:2D:67:1B:75:EF:12:02:CD:AD:74:C0:5A:5B:76:7F:87
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0621
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p9n77S1nG3XvEgLNrXTAWlt2f4c.roa
Signing time:             Mon 01 Dec 2025 01:49:55 +0000
ROA not before:           Mon 01 Dec 2025 01:49:55 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        61.202.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:49:55 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A7D9FBED2D671B75EF1202CDAD74C05A5B767F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:04:1c:cb:6d:d7:56:03:a3:47:28:8d:33:
                    c2:72:75:69:0b:e0:dc:e5:d0:01:42:a4:68:42:f4:
                    6d:83:1d:e4:92:2f:13:e7:18:f7:55:20:38:85:d2:
                    d1:09:65:62:3a:64:37:72:10:d4:9c:00:b1:7f:e0:
                    f4:2d:69:3f:98:ef:cc:10:79:5c:8c:16:ba:ab:6f:
                    b6:a6:06:f4:46:44:f4:93:48:a0:28:ff:a0:69:c5:
                    05:f1:11:45:e6:b5:1b:c3:1f:5b:34:5b:97:a9:da:
                    14:78:8c:28:d1:7c:d7:6c:b6:16:d6:ff:33:19:8f:
                    08:df:a5:80:d5:52:6d:89:10:a6:26:f0:c0:4d:48:
                    13:aa:2f:8a:69:69:1d:9c:8e:3f:f7:1b:2e:95:83:
                    d4:ab:a5:6e:cf:ef:f2:58:1e:b7:41:73:be:96:04:
                    89:7e:57:e2:aa:0d:6a:c2:c5:05:dd:a7:a2:ef:a0:
                    3b:b6:68:c9:59:a2:8a:78:63:55:ba:fd:3c:d4:37:
                    91:83:fc:e8:99:b5:53:1c:b5:c5:2d:9d:a5:2c:d6:
                    73:de:12:f4:7b:05:8f:db:0e:30:b6:85:a0:19:80:
                    56:14:3b:7b:60:96:34:82:ee:5a:4a:95:68:6a:7d:
                    55:53:89:7c:13:64:81:06:fe:b8:a7:81:27:76:a0:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D9:FB:ED:2D:67:1B:75:EF:12:02:CD:AD:74:C0:5A:5B:76:7F:87
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p9n77S1nG3XvEgLNrXTAWlt2f4c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.202.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:37:0c:4c:5f:b2:ce:cd:ee:1e:81:f8:3b:b2:5f:bc:fb:bd:
         a6:92:43:9d:95:e5:20:3b:27:0e:98:a1:32:e4:05:f4:0f:5b:
         ae:98:2f:de:cd:5a:69:46:4b:26:7e:60:3b:fd:e6:76:b0:62:
         8a:94:85:06:57:06:98:26:1b:9d:63:77:2f:84:21:81:20:c8:
         e7:17:3f:fa:6f:f4:e4:b9:1b:aa:bf:7c:2e:be:49:c5:9f:a4:
         31:38:c7:8a:c8:4a:c2:48:24:29:82:17:1d:12:83:b5:d9:cf:
         c4:6e:33:4a:6b:a5:c5:38:4a:00:71:ea:11:05:67:ae:67:12:
         a7:be:cb:be:f9:af:df:3c:d0:c5:a0:05:c6:94:b4:fe:43:00:
         92:2e:67:61:b6:03:fb:49:da:39:ea:4f:b2:fc:be:76:06:7c:
         f9:67:c9:55:cd:77:22:29:50:6d:19:fa:dd:47:f1:59:77:a7:
         ca:e6:a8:93:8d:d8:04:d6:c5:78:39:55:09:31:aa:7d:a4:61:
         ea:3f:62:32:7b:03:62:46:8d:b0:c8:e0:7e:c8:09:0f:c4:a7:
         c5:60:fa:e3:94:1d:c8:5a:03:e0:07:a3:d5:6b:7e:6e:14:c4:
         f3:35:e1:da:2b:ae:3a:39:a5:7e:f8:ab:79:f4:14:d3:77:a3:
         96:dd:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:36 2025 by rpki-client