This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/r2X899hwVstgzlmxQOiqN1geVGs.roa
File:                     r2X899hwVstgzlmxQOiqN1geVGs.roa (raw, json)
Hash identifier:          +gIusIN2tnc6zW40uvOO3KQGD2WWPrYaieJeHZk1Yg8=
Subject key identifier:   AF:65:FC:F7:D8:70:56:CB:60:CE:59:B1:40:E8:AA:37:58:1E:54:6B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06E3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/r2X899hwVstgzlmxQOiqN1geVGs.roa
Signing time:             Mon 01 Dec 2025 02:21:57 +0000
ROA not before:           Mon 01 Dec 2025 02:21:57 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.255.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:21:57 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=AF65FCF7D87056CB60CE59B140E8AA37581E546B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:e1:2e:fc:b7:86:36:d0:6d:e0:47:ab:fd:
                    b4:c3:a9:9d:96:91:98:82:32:a9:2d:dc:bb:d4:fd:
                    ff:90:28:61:e4:e4:c6:0e:17:66:81:18:3e:6a:99:
                    dc:53:70:c1:d5:d4:e6:aa:36:dc:d1:e6:fb:ee:04:
                    6a:f2:d4:bd:25:04:39:a9:b4:77:40:ca:a5:0e:fe:
                    c5:81:77:7c:c1:50:2b:18:a4:70:9f:7c:b2:45:8c:
                    82:cb:04:49:36:30:78:d8:0d:11:62:a3:c3:e4:1c:
                    bc:0e:cf:8f:0b:95:5d:c8:75:30:45:ec:85:66:c4:
                    f6:eb:24:dc:30:2e:bf:6b:d2:e0:4f:1b:c2:7f:5c:
                    15:de:ed:46:72:19:61:96:5f:48:5b:5a:92:5b:26:
                    f5:31:89:92:b3:a3:38:90:af:11:f2:1e:de:4e:6b:
                    70:c1:de:7f:bb:70:c4:00:21:0e:1d:01:fe:1d:3d:
                    ce:71:46:34:d7:87:9d:d0:26:00:05:89:95:04:0a:
                    83:3d:bf:7a:e6:51:8b:81:4f:b3:64:3f:6c:71:74:
                    8e:22:b3:e2:2c:9a:02:1d:b6:20:9d:7a:bf:ca:7c:
                    f5:3b:53:1b:62:8d:de:e9:23:f8:ff:19:08:3e:cc:
                    cb:9d:8d:8b:f5:b1:2f:ba:47:b2:b7:3a:b7:73:70:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:65:FC:F7:D8:70:56:CB:60:CE:59:B1:40:E8:AA:37:58:1E:54:6B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/r2X899hwVstgzlmxQOiqN1geVGs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:18:72:bf:24:f3:2a:05:d6:88:06:4c:bf:fd:eb:f8:8e:e3:
         91:e4:e3:45:f6:b2:a0:a8:9e:08:4a:2f:04:8d:b5:2f:4a:a7:
         f9:4b:bb:b3:40:06:f3:dc:18:d7:48:79:8d:fa:da:ae:f0:8f:
         32:f3:4e:79:72:00:bf:bf:f1:0c:c8:d3:6e:b8:9d:ed:84:9b:
         37:fe:ec:d2:64:ef:5c:2f:06:57:3d:2f:43:7e:7b:3f:ab:1b:
         8e:82:46:91:88:69:f3:0f:99:0d:fc:5b:c2:06:70:50:a2:d9:
         22:ca:33:07:f7:85:4a:93:57:ec:99:2f:31:3c:25:06:a2:c4:
         9c:79:eb:de:15:89:51:8d:14:f3:f7:a5:a5:19:9d:6e:f1:46:
         2b:fe:95:47:f7:17:9c:bb:52:76:d1:b0:e9:29:31:2e:68:1e:
         bc:71:7c:3c:db:09:27:f6:b9:ce:c3:0d:79:c1:6d:b7:fe:30:
         31:75:6c:1a:20:84:0e:c1:8f:31:76:b4:98:65:8c:19:9f:e1:
         f1:96:a0:2a:f0:5b:3b:16:0f:56:3a:fc:53:0f:05:e5:bb:e1:
         34:f4:5d:17:91:65:f8:f6:44:e5:03:13:b9:86:4e:3b:d0:3b:
         de:81:8c:f2:ba:44:4c:7d:a5:7a:c7:d4:10:41:ca:86:c1:5b:
         78:2c:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:03 2025 by rpki-client