This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/uQMl3f3AHawPNk1Cpo1O8iCuUwY.roa
File:                     uQMl3f3AHawPNk1Cpo1O8iCuUwY.roa (raw, json)
Hash identifier:          OcLABP/BFSyiPWQMcIiakdJBOLV9oWPe1LHJl+KZL/w=
Subject key identifier:   B9:03:25:DD:FD:C0:1D:AC:0F:36:4D:42:A6:8D:4E:F2:20:AE:53:06
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       05A4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uQMl3f3AHawPNk1Cpo1O8iCuUwY.roa
Signing time:             Mon 01 Dec 2025 01:28:49 +0000
ROA not before:           Mon 01 Dec 2025 01:28:49 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        124.208.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:28:49 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=B90325DDFDC01DAC0F364D42A68D4EF220AE5306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:73:53:9a:81:4b:83:51:5c:b0:d8:4d:11:
                    a7:90:ea:a6:34:7f:48:b3:92:48:52:b7:f2:12:00:
                    11:f5:36:b9:64:4c:ba:14:d9:1d:93:80:15:4c:7c:
                    1c:18:22:81:c1:44:4e:ff:b3:67:03:22:34:bb:9a:
                    0e:e5:ba:6c:65:a8:5a:70:ed:ea:5a:94:00:a2:ee:
                    53:12:5f:4c:d6:dd:ae:ec:8a:b4:f8:bd:af:6b:0a:
                    d4:6d:18:ad:e2:bd:c3:61:15:3f:9a:3b:5b:43:64:
                    6a:49:43:8e:7d:20:46:b3:0a:97:3a:b4:f6:cc:59:
                    c7:dd:44:8a:18:94:19:12:5f:03:11:7b:bc:a2:5d:
                    d2:92:57:9b:45:8a:3b:dc:21:d4:8d:de:36:84:c7:
                    0e:ec:3d:c9:af:49:37:6f:2c:26:46:56:00:d5:14:
                    5b:c1:73:06:d6:41:6e:eb:8d:85:4d:72:1a:36:bd:
                    f6:f7:bc:cf:b7:9d:56:ec:98:0d:0b:93:57:7b:1d:
                    b4:3e:a0:b7:7f:7c:e8:9e:15:9f:cd:1f:c5:ad:c1:
                    79:07:3e:c8:d1:e9:ae:a3:67:76:8f:c1:4b:84:31:
                    5f:c7:a7:42:be:af:73:0b:ea:77:27:c3:ad:15:9f:
                    c5:ed:86:5e:6f:88:2e:9a:a9:5b:8c:07:56:f7:bd:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:03:25:DD:FD:C0:1D:AC:0F:36:4D:42:A6:8D:4E:F2:20:AE:53:06
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uQMl3f3AHawPNk1Cpo1O8iCuUwY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:87:59:65:49:bc:43:f8:f1:40:34:89:27:01:00:3a:42:
         24:94:e5:7c:f5:40:2a:f6:80:dc:66:3c:ae:fb:ca:ad:e7:88:
         a9:28:a6:92:53:27:7e:f9:85:c0:b5:b8:1f:3d:2f:7e:47:b3:
         dc:d4:70:24:c5:44:60:5e:e2:61:13:5b:6a:f1:d5:21:57:1a:
         9b:a3:ca:8b:3b:36:55:28:cf:dc:74:90:1e:a2:41:e6:9b:bc:
         0c:90:a0:c9:61:f4:63:ed:15:f5:5e:81:8c:df:e1:f1:c1:ee:
         cf:bc:4b:0c:dd:50:57:18:f3:84:00:88:a5:02:1c:a9:8e:3e:
         3e:58:9d:af:14:ec:9e:3d:36:2a:ee:e1:b5:6e:1d:d9:9e:36:
         c8:b6:75:86:80:3c:10:48:bd:c5:73:0e:86:dd:bb:fe:d9:c3:
         36:a2:37:c5:8b:52:9e:61:5f:db:bb:cd:4d:1f:5b:92:26:16:
         a8:f0:24:91:49:5e:a5:17:88:e1:03:e5:91:18:69:db:13:d3:
         75:dc:cb:1d:c5:87:0b:91:a8:c5:2e:78:76:83:be:06:60:ff:
         6d:86:3c:a0:8d:f2:96:38:22:20:80:6b:54:71:16:77:15:6e:
         8c:75:b1:41:93:60:05:5e:05:03:61:ea:b8:32:84:37:ef:16:
         0c:78:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:59:44 2025 by rpki-client