This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xXA1yHG-OGp4qabMFluvIaQ-0tc.roa
File:                     xXA1yHG-OGp4qabMFluvIaQ-0tc.roa (raw, json)
Hash identifier:          NBK8BMYjGnKdixIiSW2RMzXg0ue5bJvEH2qcSd1VIUI=
Subject key identifier:   C5:70:35:C8:71:BE:38:6A:78:A9:A6:CC:16:5B:AF:21:A4:3E:D2:D7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       06E0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xXA1yHG-OGp4qabMFluvIaQ-0tc.roa
Signing time:             Mon 01 Dec 2025 02:21:56 +0000
ROA not before:           Mon 01 Dec 2025 02:21:56 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec  1 02:21:56 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=C57035C871BE386A78A9A6CC165BAF21A43ED2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:d6:9c:31:59:6d:e3:b0:4d:c8:96:40:40:
                    39:31:36:cb:4e:44:25:04:f6:e1:0c:43:60:a3:1c:
                    92:55:0d:24:04:26:ba:0a:d1:19:84:c5:66:9c:56:
                    b9:85:d5:59:19:38:8e:c2:db:ad:f7:7a:05:5e:c5:
                    47:e1:c2:c2:1d:a5:a7:3c:37:ed:50:f1:74:0d:7f:
                    53:8a:5c:ee:14:96:06:58:a5:af:d6:5a:fa:cf:21:
                    b3:4c:d1:d8:1d:8a:8c:9c:0a:ee:76:39:ea:24:db:
                    da:a7:62:97:41:07:2d:7c:a7:bd:d6:65:85:bd:9f:
                    80:7d:bb:57:e7:e1:d0:f9:f1:18:24:5c:69:40:78:
                    68:2a:07:76:96:47:27:01:ca:7e:90:6a:7f:4c:ea:
                    b2:40:dc:2e:a6:e1:4e:64:08:21:8c:14:9b:27:05:
                    5d:c4:97:45:41:f4:8d:74:77:b3:44:01:e1:19:ca:
                    d2:87:00:42:b3:60:39:dd:ae:81:5f:8a:b7:0b:73:
                    ff:a9:39:f8:52:6e:60:4f:26:f6:14:46:31:4f:16:
                    e0:c3:c9:18:51:96:30:10:be:65:3a:03:24:76:6e:
                    17:20:62:37:b8:b8:a8:69:ec:d6:07:6b:44:01:64:
                    bd:bc:e4:1b:1e:06:ad:44:5f:c1:d9:c1:b3:4c:49:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:70:35:C8:71:BE:38:6A:78:A9:A6:CC:16:5B:AF:21:A4:3E:D2:D7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xXA1yHG-OGp4qabMFluvIaQ-0tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:ef:4b:bc:ea:4b:c4:7b:44:71:b9:9c:50:bc:55:ab:09:
         31:97:79:3b:3b:b4:10:29:71:9d:64:a4:94:2b:4a:7a:11:7e:
         49:b7:c4:df:0e:c2:8e:fc:99:bb:17:cf:a4:dc:3a:49:24:0d:
         70:76:d4:bf:51:49:a0:d1:f9:90:b3:73:d0:5e:8e:90:84:4c:
         5e:9b:fb:f2:8c:f6:13:7c:fb:3f:ee:3e:50:bf:7c:f4:1f:7f:
         a7:fe:2c:a3:31:41:34:b4:b1:c8:df:32:cc:57:a3:a5:d3:9c:
         e2:87:ba:b2:17:55:5b:f8:64:a1:f2:e8:0e:9c:7d:e8:58:a0:
         26:4a:1c:81:ec:cf:86:4b:d9:16:a4:c6:59:65:90:28:88:77:
         7f:47:1a:42:33:7d:5c:de:35:49:af:95:82:b5:de:b7:2c:35:
         3a:0a:93:e9:71:c1:4b:e3:9c:90:f1:11:74:38:11:47:49:d6:
         8c:bf:3d:89:be:19:82:c1:7f:ef:00:c8:ae:6d:6c:96:f3:88:
         f7:a3:ba:6a:f8:ec:26:5f:e9:f6:1b:bf:48:fc:16:e3:59:94:
         2e:44:91:bf:92:83:13:89:43:39:f9:11:5a:a7:d8:5d:81:59:
         e3:49:80:84:1d:39:07:47:ec:c3:25:39:8b:c0:3b:5d:05:7d:
         23:06:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:57:52 2025 by rpki-client