This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/teLKvYxdghIyasETi_oiLQiODiU.roa
File:                     teLKvYxdghIyasETi_oiLQiODiU.roa (raw, json)
Hash identifier:          vwViEfBhCcxwwAIQOXN+DJHOzvY6AE73v6leBRbb2SM=
Subject key identifier:   B5:E2:CA:BD:8C:5D:82:12:32:6A:C1:13:8B:FA:22:2D:08:8E:0E:25
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       067D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/teLKvYxdghIyasETi_oiLQiODiU.roa
Signing time:             Mon 01 Dec 2025 02:06:03 +0000
ROA not before:           Mon 01 Dec 2025 02:06:03 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        121.108.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:06:03 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=B5E2CABD8C5D8212326AC1138BFA222D088E0E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:11:bd:5d:33:3a:63:f4:09:bb:1e:fe:94:
                    49:c8:a8:36:d7:b9:1a:dd:1e:be:ae:b2:3a:5e:13:
                    af:dc:6e:21:68:d2:9e:44:b0:7e:37:22:72:21:88:
                    dd:81:8d:83:66:88:a3:3c:20:7c:08:aa:b2:91:86:
                    a0:ec:cc:83:ba:e3:ad:9f:f8:5f:63:49:7a:b0:cf:
                    c2:5c:4a:25:61:f0:62:22:11:c0:a1:06:15:6a:5c:
                    e3:f3:dd:36:53:91:fc:cd:39:d2:27:2b:3a:0d:63:
                    cf:61:c1:0f:ed:34:d8:80:4b:1c:a5:6a:5e:c7:6e:
                    57:6d:f5:72:10:c0:42:e5:aa:94:d0:cc:50:86:4d:
                    70:3d:4f:86:14:46:4d:57:ab:d4:ea:ad:46:67:d4:
                    26:81:d7:d4:35:78:8a:8a:f2:32:6c:64:c1:a6:7b:
                    2a:42:d4:83:f6:cb:e4:eb:d4:53:04:e4:7f:bc:58:
                    6f:97:0c:d5:37:5d:1c:eb:e1:af:c8:4f:39:7d:b4:
                    2d:75:6c:56:92:68:2a:35:6c:30:f1:ce:79:cf:3f:
                    86:79:9f:0a:2c:50:f7:de:25:f1:0f:21:0f:6d:10:
                    d9:5c:c5:7b:8e:03:46:13:77:cf:c1:69:69:10:2c:
                    b3:7f:74:2b:44:fb:01:55:69:70:54:0f:c9:89:b9:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E2:CA:BD:8C:5D:82:12:32:6A:C1:13:8B:FA:22:2D:08:8E:0E:25
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/teLKvYxdghIyasETi_oiLQiODiU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:34:c9:ed:89:d9:0b:89:08:21:5d:b4:f4:80:72:fa:ef:1f:
         02:39:4c:26:26:1a:3d:70:6b:b0:06:d0:30:6d:95:7d:46:6d:
         7c:61:71:6b:55:52:1d:f2:7d:b5:b8:1f:0f:e2:3b:d0:be:78:
         48:45:21:76:7e:ab:f9:da:f7:a4:e8:15:05:97:c5:ff:5a:cb:
         ed:cd:c2:8a:47:77:3c:21:16:17:d1:9e:4d:84:39:10:60:4b:
         47:49:b1:3c:dc:78:9d:3e:78:60:f0:ed:d5:d8:c1:5f:90:d2:
         88:7a:1a:70:b8:bd:2f:ff:4a:c2:14:b8:07:0b:4f:ed:91:c2:
         0d:0f:df:9c:a7:10:9e:3f:84:f0:b2:b4:ae:38:67:ca:e1:77:
         00:2c:e8:f8:8c:74:17:78:03:ad:2d:d1:f0:15:17:3b:5f:7c:
         38:fd:47:3c:21:8a:30:17:6c:4d:d7:d6:84:20:91:8c:cc:00:
         12:99:43:07:c2:01:6c:fc:36:5e:4e:29:c9:2e:ec:2c:6f:b1:
         8c:6a:a8:ce:2f:90:3f:c2:62:d2:38:7c:76:f2:a9:bf:99:3c:
         78:ea:e6:33:4f:39:a1:9c:e7:1b:b9:25:60:77:7c:65:5e:7a:
         2a:a6:e6:f3:1f:4e:ee:a0:24:84:38:4f:7f:25:10:f7:71:1e:
         81:95:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:02 2025 by rpki-client