This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/5b8jpX2WZQuIVlodeas1p7o1L1s.roa
File:                     5b8jpX2WZQuIVlodeas1p7o1L1s.roa (raw, json)
Hash identifier:          bnoTiXoWPcFiIrfCX2XrKMk/thvPICOQUq6MCjCcqv4=
Subject key identifier:   E5:BF:23:A5:7D:96:65:0B:88:56:5A:1D:79:AB:35:A7:BA:35:2F:5B
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       9D
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5b8jpX2WZQuIVlodeas1p7o1L1s.roa
Signing time:             Mon 01 Dec 2025 01:29:33 +0000
ROA not before:           Mon 01 Dec 2025 01:29:33 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        210.153.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  1 01:29:33 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E5BF23A57D96650B88565A1D79AB35A7BA352F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f4:79:b7:6d:ee:bd:a1:e1:c8:31:00:3d:d8:
                    2b:33:b6:93:60:03:e9:e0:a7:bf:e6:75:9f:7c:8f:
                    b7:a5:e2:07:b4:ea:be:2b:eb:0b:6a:06:bd:ef:12:
                    50:b0:d1:ee:ca:4e:a0:d0:56:c7:77:82:4b:7f:bc:
                    7d:9b:c2:5c:a6:5f:17:d5:96:66:e1:72:72:02:2d:
                    60:a2:55:f0:f8:06:b2:29:2a:8f:38:1e:27:da:31:
                    d9:bd:60:50:b3:46:94:44:f8:d4:92:68:27:59:83:
                    3b:d2:25:da:d4:9c:9c:d3:19:27:cc:16:67:3e:fd:
                    df:40:b2:f0:3b:fd:20:f7:a2:e4:f3:11:ba:9d:98:
                    0c:be:7e:0a:27:74:1a:67:8a:51:2d:4d:36:cf:90:
                    9a:bb:3b:cb:6e:39:f8:ad:50:a8:84:48:31:05:68:
                    9b:bc:5b:9e:47:b5:6b:f2:7b:be:ca:c8:64:59:a9:
                    e3:84:f2:ab:63:94:00:cc:dc:4e:3e:ed:bd:50:67:
                    fa:21:bc:b1:18:2d:8d:c3:af:49:6e:19:a7:2d:c9:
                    90:84:b5:4e:23:11:a8:98:7f:d8:7f:52:ad:0b:3b:
                    95:19:62:21:e0:0c:c7:80:2c:4a:55:a7:4b:fc:15:
                    fc:a5:68:a7:19:ef:cb:9e:ef:81:06:8f:c0:c0:0a:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BF:23:A5:7D:96:65:0B:88:56:5A:1D:79:AB:35:A7:BA:35:2F:5B
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5b8jpX2WZQuIVlodeas1p7o1L1s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:4f:61:f2:b8:61:79:38:6b:02:ef:dd:b0:ff:2c:30:4b:dd:
         88:35:ac:43:6a:40:f8:7f:94:14:84:83:4a:df:ab:a1:a3:46:
         5e:9f:a2:08:f3:7c:3b:c4:2e:c2:aa:92:51:eb:d0:90:40:34:
         eb:5e:6e:aa:70:ef:8e:61:7c:fd:e0:c2:6d:82:72:f6:5c:cc:
         27:d2:87:a6:ac:e3:52:40:5f:09:b1:0c:eb:11:80:d2:d8:9f:
         b0:f1:97:4d:e7:7d:7e:c4:4d:50:d6:d7:45:eb:d2:d2:95:60:
         04:ae:b8:2a:99:4f:4f:b5:4a:99:50:42:3d:0d:5a:04:51:b5:
         e3:f0:42:c0:76:0b:3f:d1:ed:b3:13:42:d8:48:59:ec:52:0d:
         d6:9b:4c:18:c2:47:18:b5:6a:2d:b1:38:42:9c:3a:19:39:45:
         a3:d7:bd:d7:8b:66:f6:33:64:d0:3c:3a:57:03:0c:80:f4:a8:
         64:69:9b:c9:0e:0d:af:8a:0e:1b:14:94:81:d4:cf:c3:0d:f3:
         3d:ea:bf:e0:1a:2b:86:af:5a:e4:00:9b:e7:2e:ba:4d:d0:e3:
         06:51:4e:f7:86:c1:97:ca:58:4b:4a:58:39:f5:1d:1a:2c:0a:
         af:13:54:5a:80:df:a8:13:22:57:e0:d7:85:67:28:72:05:c7:
         9c:93:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:06 2025 by rpki-client