This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/2qLCEhLG5JZPuZYkPxCn1x1ngiY.roa
File:                     2qLCEhLG5JZPuZYkPxCn1x1ngiY.roa (raw, json)
Hash identifier:          36CQcxHL4mJacYt0xZruqj5umswbH14UqGzX3+40Jnw=
Subject key identifier:   DA:A2:C2:12:12:C6:E4:96:4F:B9:96:24:3F:10:A7:D7:1D:67:82:26
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       DE
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/2qLCEhLG5JZPuZYkPxCn1x1ngiY.roa
Signing time:             Mon 01 Dec 2025 01:29:23 +0000
ROA not before:           Mon 01 Dec 2025 01:29:23 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:23 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=DAA2C21212C6E4964FB996243F10A7D71D678226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:19:fc:b2:15:9c:3a:38:a6:dd:cb:46:d9:
                    08:28:7f:d0:9d:fb:38:f1:81:26:ec:09:a0:68:d8:
                    4f:a1:b8:84:4e:55:bf:b1:1b:87:31:e9:4d:21:23:
                    0e:8c:6c:11:61:8f:4c:dc:78:16:b1:44:ef:a3:f7:
                    87:3a:9f:23:1e:34:72:60:d5:ed:7d:8e:91:ce:04:
                    80:35:35:ca:33:06:6e:51:58:26:1a:4f:43:0d:2c:
                    39:b0:1e:be:76:5f:d7:ce:3e:64:2e:5d:bc:52:cf:
                    92:d5:82:65:db:79:03:74:4c:8b:38:da:00:b0:d4:
                    bc:3b:83:3b:b8:c9:11:e9:37:51:55:66:9f:ac:61:
                    0e:29:72:a1:a2:bf:05:b1:48:aa:67:39:3d:36:98:
                    4b:3a:34:5a:57:93:b6:0f:70:98:cb:8e:a9:43:ff:
                    27:cc:32:cc:bc:4c:89:f7:c4:4e:ae:d5:91:f8:82:
                    1e:91:eb:18:27:be:87:11:f8:33:11:8d:da:96:ae:
                    43:63:fc:a2:f3:74:ec:29:13:b1:26:e6:8b:fd:d2:
                    3e:e7:c1:bb:5d:aa:e6:20:0b:ad:0d:49:20:a2:3d:
                    6c:bd:02:03:57:a7:32:e3:47:13:6e:e9:a5:d3:d6:
                    24:53:be:ca:f5:ea:7b:d4:60:49:b0:aa:73:4c:8d:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A2:C2:12:12:C6:E4:96:4F:B9:96:24:3F:10:A7:D7:1D:67:82:26
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/2qLCEhLG5JZPuZYkPxCn1x1ngiY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:ff:7e:9e:ed:4d:bf:cb:2f:f6:41:3f:19:e5:d3:f2:b7:8e:
         8c:1d:e5:79:d0:d1:37:b1:98:69:85:f8:80:3e:f3:70:1d:10:
         1b:d5:35:d2:2b:95:40:71:33:43:5d:81:ae:0f:3d:d0:53:23:
         76:ea:1c:c4:c4:88:24:86:6f:20:ed:01:0d:28:03:e2:c2:25:
         3e:23:41:4e:31:0b:a8:6f:35:fc:84:f5:a5:c8:10:59:64:18:
         9d:eb:ed:1b:a7:05:e7:09:13:ad:60:46:4e:d3:c9:7d:a2:6d:
         2f:be:0a:d2:8d:b6:ad:ad:36:8f:5e:0e:a8:86:95:f7:b8:b4:
         fe:54:93:9e:98:47:18:11:fa:15:78:2a:fb:f2:8b:35:b6:9a:
         a7:5e:23:a2:cf:f8:87:48:2d:9d:71:ad:22:2b:b8:72:7d:14:
         57:a2:95:5a:3a:60:bb:35:51:ec:e3:42:05:32:bb:7f:89:3c:
         4a:84:48:12:85:e7:28:03:8a:37:5e:bf:c6:94:15:2f:a1:b8:
         86:96:e2:f3:1d:32:fe:f1:5f:58:60:07:26:55:97:d3:3b:13:
         44:3c:9b:37:9e:01:cf:b6:00:47:b3:2f:09:7e:1b:16:28:bc:
         8d:3b:52:70:2e:e0:f1:a6:8e:60:fc:9b:17:ef:d7:ee:ca:1f:
         8a:0a:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:22 2025 by rpki-client