This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/udt_FTBQ1z42feX_3yAJ0m31Tcc.roa
File:                     udt_FTBQ1z42feX_3yAJ0m31Tcc.roa (raw, json)
Hash identifier:          pQisF46n83TOfmG4tS22lAk2mkRhrYEytVnmnnkXABU=
Subject key identifier:   B9:DB:7F:15:30:50:D7:3E:36:7D:E5:FF:DF:20:09:D2:6D:F5:4D:C7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0669
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/udt_FTBQ1z42feX_3yAJ0m31Tcc.roa
Signing time:             Mon 01 Dec 2025 02:01:51 +0000
ROA not before:           Mon 01 Dec 2025 02:01:51 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        113.147.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:01:51 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=B9DB7F153050D73E367DE5FFDF2009D26DF54DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:77:2c:86:96:f3:aa:8a:72:4e:e5:f3:56:66:
                    17:40:ad:d6:89:dd:c9:e6:b5:5c:a0:fa:81:da:ae:
                    44:ae:14:d3:d1:bc:44:a4:bd:93:f7:80:f4:e9:fb:
                    69:1b:fa:d3:12:4f:14:54:82:85:69:4b:1b:42:5a:
                    76:e9:5f:bf:b7:50:08:59:60:af:5c:53:7f:66:0d:
                    38:d9:07:ae:91:42:0f:23:7f:9c:8d:0a:ab:41:17:
                    d0:57:a5:75:30:f4:03:e2:9c:20:5a:33:e5:f4:12:
                    2b:2e:2e:52:aa:3a:80:66:b4:f0:e9:e9:2a:0a:53:
                    59:28:ef:38:42:63:e8:fa:6f:ff:86:01:48:b4:2c:
                    c8:de:aa:a6:40:ce:3c:77:a0:79:54:f3:0b:da:d7:
                    9d:f0:f3:10:3a:bf:69:ca:b7:d0:c4:8e:a3:85:83:
                    6e:64:04:e4:08:2c:7d:f5:3d:66:be:28:2a:60:7b:
                    b8:16:ff:87:67:ec:52:b0:60:af:7e:41:c1:85:15:
                    51:21:03:c0:12:32:48:10:c0:9a:69:f5:1d:54:ca:
                    13:4a:1a:76:04:9f:6a:2f:0d:eb:9d:7d:1e:33:6c:
                    dd:2f:b5:36:a3:07:bc:17:a2:ea:b4:1e:46:f2:bb:
                    67:10:7a:56:43:fd:84:3b:cf:aa:64:c1:86:d2:d9:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DB:7F:15:30:50:D7:3E:36:7D:E5:FF:DF:20:09:D2:6D:F5:4D:C7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/udt_FTBQ1z42feX_3yAJ0m31Tcc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:f4:20:f5:40:d4:20:25:8e:44:1b:c4:d4:77:bf:28:57:56:
         f1:28:44:83:5e:c1:f1:5a:b8:bf:55:1f:cf:8a:6d:50:da:21:
         40:67:f4:c0:4a:06:89:aa:d6:e0:c8:e7:72:3f:18:b0:c5:e4:
         3c:1e:6b:58:e5:9b:35:25:43:49:0f:08:54:22:7b:ad:37:33:
         cc:aa:ca:a5:d4:ed:27:3b:e2:ca:f4:59:45:c4:36:98:36:a2:
         46:3e:69:98:41:40:c7:f5:fc:1c:6b:0e:5e:d3:9e:dc:75:f4:
         a2:70:fd:1a:f8:1b:2e:c5:de:b0:61:bf:68:d9:0b:a4:8f:d2:
         f4:2a:db:6b:1b:fa:92:cf:6a:11:87:8d:b4:77:b2:2a:b1:2e:
         c4:cb:30:cc:ec:bd:ac:6b:1a:bd:42:2e:ee:49:a5:37:14:ae:
         03:57:45:9f:5e:5e:d4:ca:43:c0:4e:1b:2f:91:11:ed:ea:88:
         c5:35:96:69:80:3f:6a:e4:af:1a:c0:63:f2:c1:47:0f:b2:96:
         36:97:61:84:10:17:b7:4f:7e:c0:45:62:81:ab:2d:c7:86:32:
         37:32:99:64:84:39:6e:c1:09:3d:34:15:f9:12:09:90:74:1f:
         2d:b6:70:74:7e:63:07:12:66:d7:d2:cb:38:ec:7d:bc:30:da:
         00:4e:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:37 2025 by rpki-client