This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ufq7Hw5rEcd-DwFy0kuPW6bFTdU.roa
File:                     ufq7Hw5rEcd-DwFy0kuPW6bFTdU.roa (raw, json)
Hash identifier:          c4rGYgRv0C3WZDcW7HHa9oIPIjQ5OHVSfk/HfHuUj/U=
Subject key identifier:   B9:FA:BB:1F:0E:6B:11:C7:7E:0F:01:72:D2:4B:8F:5B:A6:C5:4D:D5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       067C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ufq7Hw5rEcd-DwFy0kuPW6bFTdU.roa
Signing time:             Mon 01 Dec 2025 02:02:05 +0000
ROA not before:           Mon 01 Dec 2025 02:02:05 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        118.155.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:02:05 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=B9FABB1F0E6B11C77E0F0172D24B8F5BA6C54DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0b:53:c8:f5:48:5c:e4:30:ef:a7:f7:db:5e:
                    cd:a4:42:58:77:68:86:92:6d:a6:35:72:42:93:01:
                    17:bd:1d:9b:54:19:ec:1d:24:41:94:3b:c8:3f:5f:
                    f2:34:bc:22:f7:82:0a:b4:d4:8c:1d:39:bf:1d:08:
                    df:79:e7:1a:b4:c6:06:78:99:4e:01:6f:4a:53:e0:
                    46:f4:37:d6:6c:61:82:43:c5:36:9c:27:20:95:80:
                    85:07:98:71:2a:27:a0:75:65:90:69:f0:77:33:63:
                    14:10:76:e1:67:1a:4d:20:fb:f9:de:e2:2e:18:0b:
                    18:21:6a:5a:2c:93:4a:fb:ed:0e:eb:e9:16:1d:5e:
                    4e:40:fc:b6:9c:b5:af:ea:1a:3d:b3:a4:e9:62:0e:
                    04:58:24:16:30:66:c4:80:1a:1a:66:8b:9a:2b:c0:
                    8a:e1:4e:b4:d9:9e:e9:30:7e:2e:72:68:7f:01:02:
                    a8:de:bf:1e:07:7b:dd:fa:e7:27:3c:a7:a4:2b:0d:
                    76:3d:e0:26:65:b8:47:0b:7e:76:f8:f2:35:db:bb:
                    5b:e9:07:4e:0f:bd:ac:c3:97:21:9f:86:b3:21:c2:
                    f4:d7:50:a0:b7:11:f3:01:ee:dc:6a:77:04:b8:b9:
                    cd:49:5c:04:f3:05:0b:19:48:b1:7e:49:15:f3:51:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:BB:1F:0E:6B:11:C7:7E:0F:01:72:D2:4B:8F:5B:A6:C5:4D:D5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ufq7Hw5rEcd-DwFy0kuPW6bFTdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.155.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:f2:72:98:c9:a8:8b:c4:8e:77:66:f9:fd:05:ae:a8:a3:
         ab:6e:07:a4:ab:96:d5:ce:42:72:a7:49:6e:13:3c:5e:1e:f2:
         dd:16:60:c1:ac:25:7f:09:cf:96:25:e9:66:60:4a:0f:b5:e0:
         c4:36:b1:2b:c3:e5:94:db:74:c9:fa:3a:bd:bd:21:74:e2:e0:
         e3:95:63:87:92:3e:91:74:b4:26:4c:9f:f2:0b:1b:4a:c8:81:
         8d:58:29:23:c4:31:94:77:1f:1c:b5:fd:5a:9a:2d:02:e6:61:
         b9:83:09:9b:33:c1:97:5c:e3:78:d2:2a:63:7a:44:45:0e:a3:
         91:64:0e:0f:f9:eb:01:b5:07:35:4d:77:f4:9c:aa:83:94:9f:
         92:47:f9:1f:60:f2:07:13:ed:a4:02:66:85:0f:82:89:c8:af:
         d7:43:36:b8:f6:89:93:0a:10:f7:56:aa:b1:78:66:0b:d6:d4:
         f6:22:28:94:24:dc:dc:b3:96:7f:c9:04:2a:4d:b8:2b:1e:e7:
         d9:1e:0f:d0:8f:1b:ac:5a:c6:4e:ec:96:42:f3:5b:01:04:5f:
         65:37:fc:bc:37:da:f3:64:e5:e9:a3:90:a0:bc:b6:56:be:83:
         ce:c2:9a:0f:5f:c3:cb:77:d6:b7:53:0e:cd:70:38:18:92:a3:
         bb:3e:05:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:47:04 2025 by rpki-client