This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wLcNEevjNPiAXgaqAgBaK6ndyvM.roa
File:                     wLcNEevjNPiAXgaqAgBaK6ndyvM.roa (raw, json)
Hash identifier:          3XDfXv2YV+5XDjZo43yGjc5Pwk+FYMst7JIUaeNiiKQ=
Subject key identifier:   C0:B7:0D:11:EB:E3:34:F8:80:5E:06:AA:02:00:5A:2B:A9:DD:CA:F3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       059D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wLcNEevjNPiAXgaqAgBaK6ndyvM.roa
Signing time:             Mon 01 Dec 2025 01:28:45 +0000
ROA not before:           Mon 01 Dec 2025 01:28:45 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 01:28:45 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=C0B70D11EBE334F8805E06AA02005A2BA9DDCAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:7b:24:1c:a3:50:bc:07:c7:06:2e:46:57:
                    3e:2d:c2:7d:59:da:fd:5b:d9:d6:19:f0:e5:2c:f6:
                    49:e1:6f:2b:8c:b2:58:84:df:29:cd:34:ce:a7:f1:
                    99:94:bd:23:fe:31:e4:4b:91:3c:0a:3a:90:de:31:
                    55:9c:d2:87:27:57:e2:f7:f9:6a:84:ce:e5:92:14:
                    38:e2:06:35:ea:bc:df:12:14:ca:2e:ec:0b:04:a9:
                    d0:f0:6e:76:5f:11:5a:dc:d6:1c:e6:d1:4f:95:62:
                    dd:26:05:15:1d:8d:fe:d0:df:3d:d0:7e:d4:99:87:
                    ad:4d:ee:42:ac:7c:fa:98:fa:49:9f:9e:16:7a:8e:
                    d1:2c:da:cb:ff:60:ae:e9:98:98:28:86:5d:c8:7f:
                    1b:da:8c:7b:c9:a4:2f:0d:79:c2:c7:df:5c:76:38:
                    e8:0b:fb:69:53:92:92:3e:23:b6:bc:4b:40:89:4f:
                    04:ae:16:ee:8c:ae:10:1b:95:77:87:25:d7:79:da:
                    26:20:86:38:b4:86:9f:9b:6e:64:63:4c:a5:be:89:
                    be:07:63:ce:08:4e:80:70:1e:43:78:67:8b:fd:f8:
                    5d:6b:27:22:b7:86:3b:2b:5f:3a:b9:40:44:b2:9c:
                    34:bb:ee:1f:40:c7:4b:e1:13:80:52:c6:99:cf:70:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B7:0D:11:EB:E3:34:F8:80:5E:06:AA:02:00:5A:2B:A9:DD:CA:F3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wLcNEevjNPiAXgaqAgBaK6ndyvM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:f3:03:8b:d9:2f:a8:a1:09:48:e7:ea:32:fc:30:0e:6c:
         29:68:24:1b:12:11:5e:72:59:ae:6a:e7:ea:76:e1:e1:7f:80:
         c4:de:87:81:f7:56:d8:d4:6f:b3:b3:27:6f:18:6f:1d:ab:76:
         47:e5:9e:b6:26:99:ec:b6:16:f9:50:b4:76:ca:f2:ba:a7:b4:
         15:c3:a2:4b:32:e0:f1:5d:74:cf:bf:5f:ba:73:bc:6b:cc:5e:
         39:e4:3e:b7:7f:d8:88:b3:bc:d1:e8:3e:5c:46:42:e5:e7:a9:
         96:7b:e8:ab:1c:62:59:68:57:e1:58:23:dc:86:35:99:38:dd:
         2d:79:ed:de:69:7e:8a:d2:e8:0f:7e:0c:c6:f3:4c:b7:dd:44:
         35:36:34:f7:0b:da:bc:39:70:0b:82:ac:b2:e3:57:9c:96:81:
         68:35:7b:01:49:77:0e:a2:54:d4:c8:91:27:e5:41:e5:04:6e:
         2a:f3:13:fa:73:fd:14:15:fd:9f:3e:b4:65:0b:aa:8e:1a:45:
         c7:0c:1f:7e:70:5b:9f:c7:c9:18:1b:fb:9b:66:e6:54:04:ef:
         1f:47:b8:5a:de:ea:d8:96:4c:45:e5:ad:53:f0:c4:d4:9c:51:
         77:19:0e:40:cf:c1:29:70:7a:bc:0b:e6:8a:46:dc:8f:ac:0b:
         3e:2d:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:57 2025 by rpki-client