This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/-p8eUY8heqKxls2DD3gRxUcWV_k.roa
File:                     -p8eUY8heqKxls2DD3gRxUcWV_k.roa (raw, json)
Hash identifier:          JIHC+ABvFZwGj2DLqZYKJQfmqNkjiodCzBMh4ui44nY=
Subject key identifier:   FA:9F:1E:51:8F:21:7A:A2:B1:96:CD:83:0F:78:11:C5:47:16:57:F9
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       9A
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/-p8eUY8heqKxls2DD3gRxUcWV_k.roa
Signing time:             Mon 01 Dec 2025 01:29:31 +0000
ROA not before:           Mon 01 Dec 2025 01:29:31 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        210.136.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  1 01:29:31 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=FA9F1E518F217AA2B196CD830F7811C5471657F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:70:13:84:75:a1:89:2a:22:a0:4b:39:ca:
                    99:5a:13:56:58:ef:58:a8:2c:11:ea:08:80:74:45:
                    e8:3b:52:1f:0b:8a:a9:41:e7:f3:cc:5d:c1:0c:45:
                    7e:dd:7e:ee:5d:16:ad:4c:6e:b1:c1:c3:d6:0f:4e:
                    7c:be:9e:64:2b:a7:c5:a4:48:5f:c3:f1:62:49:b6:
                    a2:28:ed:24:eb:ea:0c:43:5d:44:d6:1e:52:79:1e:
                    0a:d2:7d:f9:e4:4c:27:c6:6f:25:47:c0:60:17:45:
                    a0:2b:f8:bf:4f:7b:11:cc:45:d6:92:d5:71:3e:43:
                    71:fb:4d:b6:4e:eb:1e:4b:e2:0c:f2:9d:c1:9d:da:
                    60:04:d8:c8:4a:0d:0a:d8:a8:77:49:f9:57:de:1b:
                    47:5d:31:75:da:70:c7:51:8b:87:e5:b5:7a:81:b2:
                    43:24:d4:5e:d7:20:ed:23:2c:66:04:a5:e4:93:b7:
                    0d:cc:e0:29:8e:26:c5:74:7b:df:54:54:0b:79:60:
                    ae:c1:31:96:82:3a:9d:1f:73:90:d4:73:40:ca:52:
                    82:01:97:ee:3f:79:3b:91:a8:87:66:11:f4:3c:40:
                    11:cb:21:84:ad:eb:17:54:7e:dd:4f:44:c9:9e:0d:
                    b9:f7:c1:08:32:5a:9c:aa:60:a9:c0:f8:f0:83:fc:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9F:1E:51:8F:21:7A:A2:B1:96:CD:83:0F:78:11:C5:47:16:57:F9
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/-p8eUY8heqKxls2DD3gRxUcWV_k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:22:3b:5c:dd:29:26:55:66:a0:de:5e:28:26:23:98:f2:3d:
         7c:3a:c8:ad:77:12:ce:73:db:e3:31:95:61:ef:33:6d:b2:33:
         8f:24:fb:02:d9:dd:1e:81:2c:5d:43:f8:f4:50:4a:ea:f4:a4:
         67:19:be:63:d8:ea:60:e0:2f:32:2f:24:d0:a8:3d:ab:93:a9:
         23:74:56:1d:fc:cb:fe:98:66:a4:61:87:2f:16:d5:98:23:9f:
         de:b4:e4:a6:98:9f:3b:a8:06:96:3b:b6:a2:df:75:0b:db:40:
         1c:33:f6:3f:7a:80:7e:67:d3:70:ae:c5:1f:30:45:ae:ce:41:
         b4:76:fd:94:21:44:ad:05:27:84:28:6a:b6:e6:39:ba:97:0b:
         68:45:d6:b3:4e:e9:aa:95:e8:32:27:e9:0a:be:47:3e:63:25:
         6b:2b:da:76:69:ef:a4:c3:bd:e5:67:e8:81:cd:18:12:9a:0c:
         c3:f9:cc:5f:a2:aa:e4:1c:19:e8:9c:37:7c:cd:82:76:b7:47:
         2c:22:bc:ff:1a:11:f2:26:d1:3e:3f:3e:a8:eb:9a:8c:e1:06:
         3c:85:e2:2a:6b:fb:56:7d:ab:b1:4a:40:5a:8f:96:43:fa:08:
         3c:78:a9:fe:3c:f0:9a:ae:9a:77:af:d9:de:19:6d:8b:a4:c9:
         c5:8e:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:18 2025 by rpki-client