This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vvVCJvzetxWGlSCTqeSc1ZWOhlI.roa
File:                     vvVCJvzetxWGlSCTqeSc1ZWOhlI.roa (raw, json)
Hash identifier:          AogjgiN63RD4m3FpadoBwCYU8moBHMZmWXQTd8Gylks=
Subject key identifier:   BE:F5:42:26:FC:DE:B7:15:86:95:20:93:A9:E4:9C:D5:95:8E:86:52
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0704
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vvVCJvzetxWGlSCTqeSc1ZWOhlI.roa
Signing time:             Mon 01 Dec 2025 02:25:49 +0000
ROA not before:           Mon 01 Dec 2025 02:25:49 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        125.51.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:25:49 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=BEF54226FCDEB71586952093A9E49CD5958E8652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:b6:7a:3f:46:57:dc:d2:6b:89:b6:fc:69:
                    c9:ba:d5:1d:6f:79:19:d1:9c:0a:73:c8:ec:66:6e:
                    51:98:e3:c5:ca:69:e5:5e:3e:50:cb:4a:af:b5:33:
                    4d:49:28:91:af:f6:4d:71:c3:13:ac:94:f8:f7:d0:
                    fa:c3:26:58:4d:ae:08:2c:01:22:01:24:ef:82:d8:
                    af:4e:7f:1d:65:8d:38:7c:4a:b5:ae:31:61:eb:1d:
                    79:65:8d:7c:c1:91:66:91:c7:82:4a:56:2d:fe:eb:
                    5e:a5:73:04:04:d6:28:d7:55:09:6a:e5:54:ef:1b:
                    ec:f7:5a:1b:78:a4:3c:2e:54:86:55:2e:5b:98:28:
                    7c:df:99:20:f5:a2:8f:32:27:ee:25:09:8b:96:e7:
                    79:0d:57:82:8f:88:69:b2:83:35:a2:7e:b7:75:91:
                    f2:25:3a:bc:c3:70:cf:c5:c3:31:fe:d9:e2:28:e1:
                    e6:44:8f:82:7c:a3:e6:9e:17:59:db:44:63:12:5f:
                    74:ec:d0:78:ca:19:0e:8e:25:7a:cc:7f:e8:da:7e:
                    72:f0:75:5f:48:72:e5:2e:13:62:00:83:b3:0e:a8:
                    8c:b3:24:10:cc:44:1f:05:ae:a4:b3:8b:7d:97:f3:
                    f4:d4:97:02:09:b1:79:d7:63:4f:0b:03:15:2b:5c:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F5:42:26:FC:DE:B7:15:86:95:20:93:A9:E4:9C:D5:95:8E:86:52
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vvVCJvzetxWGlSCTqeSc1ZWOhlI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:06:04:9c:3e:8e:a2:94:c2:27:31:25:bf:e2:f1:04:c1:64:
         62:59:b8:43:b1:96:23:0e:1d:2f:eb:88:ff:e2:a7:91:b7:63:
         65:82:65:ff:ef:a5:a9:a0:32:3f:b6:08:79:d5:5d:d9:c6:0c:
         aa:5b:05:09:6f:fe:1c:2f:b6:28:98:c1:7a:3c:4a:62:cc:c9:
         ea:ca:2f:be:1d:c3:8d:35:6d:62:56:bf:c6:0c:0d:4f:dc:47:
         ab:0f:18:07:0b:64:23:15:45:4a:cc:26:1f:54:f1:19:9e:4d:
         55:02:28:92:5e:2c:5f:95:ac:bd:dc:6c:6d:a4:31:e8:88:b9:
         b0:e9:ed:10:10:84:eb:02:5e:59:af:fe:b9:e8:f0:2c:36:0b:
         ca:18:20:8d:a3:bf:82:20:fd:33:64:7d:af:45:4f:e3:56:6d:
         47:b8:70:c9:6d:4f:00:a6:0d:6a:c5:fc:43:7c:07:7d:c2:70:
         87:7c:b5:41:de:af:ca:9f:ef:00:a7:c7:d7:b6:5e:cd:8f:ee:
         5d:59:fe:c3:60:63:df:cb:f3:1f:ac:76:ec:f3:6c:e5:9e:06:
         92:26:e6:e5:d1:99:ef:db:ee:87:cd:0f:8c:af:9b:61:34:59:
         fa:82:11:50:a3:fd:ad:16:5c:10:e0:1a:54:4a:8a:16:a1:b7:
         25:e8:40:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:33 2025 by rpki-client