This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/prfBI8vkU-wxsi2px9rbN1tNd4c.roa
File:                     prfBI8vkU-wxsi2px9rbN1tNd4c.roa (raw, json)
Hash identifier:          5eLk4aaukqo4PRGOVJlcaFN/g+DMBB0DL2L+UQv7myA=
Subject key identifier:   A6:B7:C1:23:CB:E4:53:EC:31:B2:2D:A9:C7:DA:DB:37:5B:4D:77:87
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05A9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/prfBI8vkU-wxsi2px9rbN1tNd4c.roa
Signing time:             Mon 01 Dec 2025 01:28:51 +0000
ROA not before:           Mon 01 Dec 2025 01:28:51 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.168.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:28:51 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A6B7C123CBE453EC31B22DA9C7DADB375B4D7787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:b6:d8:b1:a9:36:0c:b6:45:2e:38:d4:36:
                    d3:d3:5b:f6:91:e8:d9:de:9c:61:36:24:ac:00:35:
                    d2:96:3f:4e:18:63:48:f8:70:d8:1b:36:8a:fa:1f:
                    f1:f2:cd:97:9d:c1:fb:4f:11:6c:7f:b5:22:11:4f:
                    7d:ce:fa:2a:da:67:dd:b4:48:33:d0:a6:db:81:67:
                    6c:a6:0d:ee:75:62:7c:4b:a8:b3:c7:12:a9:e8:c6:
                    49:16:fd:f1:37:46:a4:4c:fb:0b:2f:45:07:d9:a0:
                    9b:45:79:7c:ac:52:10:7e:13:0f:7b:f8:67:7c:e4:
                    96:e4:ac:de:c3:e4:5a:0f:d9:18:a5:f2:61:c8:10:
                    48:23:bf:1d:a5:cc:2e:1e:a9:63:d6:84:69:af:f1:
                    da:c1:ec:75:94:f1:94:bb:ea:f8:0c:8b:19:96:50:
                    41:fd:6b:a8:6a:a8:cd:0f:6c:b0:ae:f8:70:df:68:
                    b0:69:0f:f6:59:ab:84:37:63:ae:87:3c:ba:3a:ce:
                    73:0f:19:cc:20:ea:8f:2e:b0:6d:07:69:14:5a:55:
                    aa:3e:54:d0:3f:cc:23:b0:7a:bd:9e:f6:7d:56:9c:
                    ac:60:93:99:48:e2:eb:57:f1:86:35:eb:cd:fa:01:
                    72:62:a4:85:0e:10:49:92:5f:73:f1:0b:42:99:55:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B7:C1:23:CB:E4:53:EC:31:B2:2D:A9:C7:DA:DB:37:5B:4D:77:87
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/prfBI8vkU-wxsi2px9rbN1tNd4c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:eb:d7:e1:d9:72:41:4d:2e:e4:19:8f:ec:11:8f:99:f4:
         18:c1:b0:d3:09:47:19:52:e9:89:27:cc:fe:98:03:00:36:7a:
         9d:08:7d:47:9b:b9:14:83:e1:17:1d:1b:c9:0d:49:73:4d:0a:
         f6:1f:cc:71:af:61:dc:d2:76:a5:30:43:84:2b:fe:62:ba:20:
         0e:5a:6f:7c:8c:91:b6:56:b1:27:95:f3:a0:70:9a:70:36:9c:
         6e:42:41:f0:5d:49:3c:be:56:55:59:46:2c:33:e8:b6:ac:98:
         45:8b:17:b6:86:d7:e3:38:b9:22:3b:c4:2f:96:0e:80:79:17:
         56:c3:d5:33:1f:48:8c:19:ac:26:ed:c0:2b:be:ae:c4:c3:0c:
         b8:06:79:72:1c:8d:61:c5:3e:66:b8:bf:af:09:92:be:36:f1:
         fd:05:b3:86:a4:eb:61:d6:14:28:08:8f:c2:61:d4:29:37:96:
         68:23:92:31:ab:d8:4d:96:d7:56:4b:bf:da:0b:38:d3:dc:ae:
         bb:19:91:c2:52:a5:43:9b:ce:71:73:7e:ee:bf:2d:41:7a:83:
         bb:f0:40:71:58:88:34:73:c4:90:4e:80:14:f2:09:68:49:df:
         54:c8:43:21:fc:43:26:20:99:e9:00:14:2b:e1:d5:42:b2:91:
         40:de:7b:ae
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTEyMDEw
MTI4NTFaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE2QjdDMTIzQ0JFNDUz
RUMzMUIyMkRBOUM3REFEQjM3NUI0RDc3ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSWLbYsak2DLZFLjjUNtPTW/aR6NnenGE2JKwANdKWP04YY0j4
cNgbNor6H/HyzZedwftPEWx/tSIRT33O+iraZ920SDPQptuBZ2ymDe51YnxLqLPH
EqnoxkkW/fE3RqRM+wsvRQfZoJtFeXysUhB+Ew97+Gd85JbkrN7D5FoP2Ril8mHI
EEgjvx2lzC4eqWPWhGmv8drB7HWU8ZS76vgMixmWUEH9a6hqqM0PbLCu+HDfaLBp
D/ZZq4Q3Y66HPLo6znMPGcwg6o8usG0HaRRaVao+VNA/zCOwer2e9n1WnKxgk5lI
4utX8YY16836AXJipIUOEEmSX3PxC0KZVfmjAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUprfBI8vkU+wxsi2px9rbN1tNd4cwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3ByZkJJOHZrVS13eHNpMnB4OXJiTjF0TmQ0Yy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBqqDANBgkqhkiG9w0BAQsFAAOCAQEAdYzr1+HZckFNLuQZj+wRj5n0GMGw
0wlHGVLpiSfM/pgDADZ6nQh9R5u5FIPhFx0byQ1Jc00K9h/Mca9h3NJ2pTBDhCv+
YrogDlpvfIyRtlaxJ5XzoHCacDacbkJB8F1JPL5WVVlGLDPotqyYRYsXtobX4zi5
IjvEL5YOgHkXVsPVMx9IjBmsJu3AK76uxMMMuAZ5chyNYcU+Zri/rwmSvjbx/QWz
hqTrYdYUKAiPwmHUKTeWaCOSMavYTZbXVku/2gs409yuuxmRwlKlQ5vOcXN+7r8t
QXqDu/BAcViINHPEkE6AFPIJaEnfVMhDIfxDJiCZ6QAUK+HVQrKRQN57rg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:48 2025 by rpki-client