This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/soVruBO9SiW_SsDyW20yzCC20YY.roa
File:                     soVruBO9SiW_SsDyW20yzCC20YY.roa (raw, json)
Hash identifier:          YrSNxKf5jTfH075/CUBkvsdmln2VsbwxBoBRowIUgxw=
Subject key identifier:   B2:85:6B:B8:13:BD:4A:25:BF:4A:C0:F2:5B:6D:32:CC:20:B6:D1:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0616
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/soVruBO9SiW_SsDyW20yzCC20YY.roa
Signing time:             Mon 01 Dec 2025 01:45:57 +0000
ROA not before:           Mon 01 Dec 2025 01:45:57 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        218.225.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:45:57 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=B2856BB813BD4A25BF4AC0F25B6D32CC20B6D186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:88:5d:7b:7d:34:08:b0:33:2b:3a:35:fe:
                    be:01:64:7b:2b:d6:c6:41:a6:cd:e2:8f:66:b9:a0:
                    1e:cf:d6:63:93:14:6c:1d:1f:bc:03:3b:c0:3c:d3:
                    3f:27:b8:0f:f2:2d:52:9a:d2:82:77:c4:cb:8d:50:
                    79:27:34:af:e0:c8:54:b3:a0:2c:68:90:b7:58:d6:
                    91:a6:64:04:e2:d1:1b:65:ea:d0:1c:18:8f:6c:d6:
                    62:d0:87:5c:3b:62:3f:2e:db:7c:61:ba:09:bb:4f:
                    29:21:55:d1:20:ea:05:26:af:13:03:1a:94:72:3f:
                    89:7d:b3:1f:00:c2:d0:ae:ad:da:75:45:1a:39:fb:
                    a4:84:74:c3:87:28:b3:61:63:a1:d6:72:b4:50:cb:
                    24:2d:2f:ed:24:75:be:8d:98:68:09:16:da:e0:04:
                    40:1c:d4:0e:7c:2b:7f:35:da:c3:69:fc:ef:bb:80:
                    f7:4c:94:05:7b:5c:29:31:71:7d:e4:43:c6:ab:68:
                    ad:3a:1b:1b:18:eb:bc:c9:ae:cb:ef:8c:6c:e2:da:
                    48:f2:28:66:15:1c:f9:c9:6d:55:8b:aa:ed:15:29:
                    7f:70:b5:ad:e9:06:a5:8a:a5:44:fd:cb:c0:b5:c2:
                    8f:f6:4b:4e:ef:c1:76:f6:a0:58:06:3c:49:bc:05:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:85:6B:B8:13:BD:4A:25:BF:4A:C0:F2:5B:6D:32:CC:20:B6:D1:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/soVruBO9SiW_SsDyW20yzCC20YY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:56:7b:cb:8f:9d:92:11:53:cb:ba:fe:21:f4:9c:fe:0c:
         86:e7:88:ba:b6:89:a3:48:12:57:bd:73:f3:b4:dc:20:e5:32:
         3a:98:7b:32:37:b4:5a:11:2f:ec:69:33:56:45:d4:33:71:db:
         df:4c:ee:d7:0d:90:3e:f0:69:e7:9c:9d:dc:47:a5:71:53:4c:
         b6:d4:00:69:5d:c3:6e:08:2b:80:7c:86:10:94:70:3c:a6:6a:
         2c:aa:ea:e6:90:51:dc:8a:29:d5:9f:7f:6f:4e:e5:fd:b8:ef:
         fd:e2:3c:57:1d:2a:29:02:9e:2a:50:7a:bf:ba:22:9d:eb:4c:
         6a:ee:ac:66:ba:7a:9c:6b:a8:58:b6:62:c2:8d:5d:43:02:2b:
         f0:23:e4:b1:f5:cb:51:62:a2:0a:a1:58:59:00:bd:ae:a5:7a:
         cb:3b:ea:03:33:ce:cc:a6:0a:fd:11:4c:a7:7d:e2:3e:f4:13:
         71:6b:d2:88:a7:e1:0d:4c:5f:5e:c4:e6:e1:0e:73:49:9c:60:
         f3:03:80:08:21:d6:07:74:77:d1:b2:70:e4:6e:81:74:dd:81:
         c6:29:bb:f0:1d:19:6d:2d:45:10:ae:d1:12:40:cc:2c:51:75:
         be:1e:0a:26:52:5e:8d:eb:62:c6:e0:d1:72:e7:87:a9:2a:39:
         7f:9a:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:55 2025 by rpki-client