This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/txyFH0Sw8lRM_ZcFGpZYFsn7qGo.roa
File:                     txyFH0Sw8lRM_ZcFGpZYFsn7qGo.roa (raw, json)
Hash identifier:          eTuvnL9BWe1bkfobgznXjInJuoilq5ry+GBXmHzPkE0=
Subject key identifier:   B7:1C:85:1F:44:B0:F2:54:4C:FD:97:05:1A:96:58:16:C9:FB:A8:6A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0717
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/txyFH0Sw8lRM_ZcFGpZYFsn7qGo.roa
Signing time:             Mon 01 Dec 2025 02:29:56 +0000
ROA not before:           Mon 01 Dec 2025 02:29:56 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        124.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:29:56 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=B71C851F44B0F2544CFD97051A965816C9FBA86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:0c:1d:12:23:26:e4:ca:87:34:64:b0:f8:
                    be:3e:ee:9b:f2:f8:38:37:35:28:b5:3a:71:d7:46:
                    28:df:36:52:4a:34:5d:c1:dd:f0:01:64:70:26:93:
                    60:26:70:8f:ee:33:27:86:55:e4:ab:de:93:26:b0:
                    6a:3d:51:d9:17:66:d2:71:30:e3:72:a4:ed:18:22:
                    8f:c2:3a:bd:9a:eb:88:ac:d0:d1:39:f2:f2:20:bf:
                    77:ae:63:9d:c5:11:20:ba:d8:6a:34:17:36:b8:39:
                    f7:39:db:03:ca:1f:07:a2:39:53:ff:a7:ac:b6:b5:
                    8d:31:05:7c:55:ba:6d:f7:dd:af:ec:6d:2d:d5:5b:
                    61:87:30:b7:8d:63:65:0b:6c:be:eb:98:54:5d:6e:
                    2e:6d:5b:52:fb:35:01:7c:59:49:af:f2:cd:a0:50:
                    fc:99:3d:0e:28:b9:d5:ff:bb:c4:08:4e:a6:eb:a7:
                    66:22:05:c4:0f:b3:8a:45:b0:36:f8:21:13:ab:4f:
                    60:16:dd:eb:88:78:99:9d:fb:34:f3:95:df:29:9c:
                    6d:18:85:e1:70:4b:ed:f2:92:24:a5:9d:61:72:c5:
                    a3:3c:9b:9a:19:2c:0d:01:2f:f7:8a:90:61:70:e2:
                    cb:ca:0f:40:c0:b3:60:b9:91:48:90:a1:19:a9:0f:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1C:85:1F:44:B0:F2:54:4C:FD:97:05:1A:96:58:16:C9:FB:A8:6A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/txyFH0Sw8lRM_ZcFGpZYFsn7qGo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:25:ec:b3:cd:75:53:a9:f8:c7:8d:88:7e:e4:7b:70:d8:71:
         b7:cf:6e:99:92:94:00:be:f7:e6:95:ff:dd:dd:74:28:a7:da:
         cd:99:5b:af:be:ae:bf:f1:ac:83:7f:15:05:55:a3:60:3c:8d:
         43:05:b5:d1:56:62:26:d7:89:93:b2:c0:20:4c:fe:19:23:7f:
         ab:ed:73:35:04:5a:85:6d:01:8e:9d:41:33:08:6e:27:f2:8e:
         2a:e8:0b:2b:b6:a0:3f:9e:10:76:ae:47:2b:ad:00:21:bb:66:
         ff:eb:cd:a7:3e:4f:0f:e6:f0:a0:40:d7:4e:b3:f8:7f:9f:3c:
         2c:77:48:cc:47:6d:56:e6:51:c5:ca:f6:3c:a3:8d:1e:31:d8:
         9b:d0:70:c0:77:41:09:0b:db:3b:a7:81:cf:ba:18:b9:9e:ce:
         79:82:f1:6c:08:82:91:6d:ca:2e:4c:4b:ce:f9:d2:dd:81:57:
         50:7f:df:ed:87:ec:9a:e0:f6:fb:7b:b8:94:86:d0:3b:ef:b9:
         37:06:7b:e3:79:82:4d:f5:c1:64:8c:8f:f8:a8:05:e5:85:4a:
         6e:d1:fb:20:3b:04:23:fa:5d:e6:f3:c4:9f:27:16:4b:d1:e8:
         df:c4:c0:05:e9:70:3b:82:c2:45:18:a2:85:b1:b1:14:e3:19:
         46:10:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:30 2025 by rpki-client