This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ACxRKkXmqJTjLkQXfAmWvRzEBHc.roa
File:                     ACxRKkXmqJTjLkQXfAmWvRzEBHc.roa (raw, json)
Hash identifier:          +ZN/xAtRLQyTocyogxLDU43tIDTSo1OIWKi9CTanB2k=
Subject key identifier:   00:2C:51:2A:45:E6:A8:94:E3:2E:44:17:7C:09:96:BD:1C:C4:04:77
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       E6
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ACxRKkXmqJTjLkQXfAmWvRzEBHc.roa
Signing time:             Mon 01 Dec 2025 01:29:28 +0000
ROA not before:           Mon 01 Dec 2025 01:29:28 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        192.244.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:28 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=002C512A45E6A894E32E44177C0996BD1CC40477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:60:2d:97:b9:4a:6c:e5:9a:84:12:11:c9:
                    f5:7c:81:f3:5b:cb:dc:eb:42:f4:1c:ba:2b:cd:91:
                    0e:b5:da:07:6a:50:7e:94:bb:54:05:f3:71:6d:94:
                    1a:e7:04:ac:83:58:32:d4:0b:3f:83:9d:f1:3c:f9:
                    eb:04:5d:ea:e5:77:6f:34:e3:7a:a1:58:66:94:47:
                    1c:7d:78:fe:d3:f9:18:29:e9:af:e2:ed:93:d2:0f:
                    22:49:1c:8c:1a:a2:e3:a4:ab:50:4e:58:95:22:39:
                    37:e9:e3:7c:85:e3:6c:de:d4:f4:a4:d6:87:85:ac:
                    06:29:17:6c:4c:ac:df:b7:b7:be:95:d5:06:27:ae:
                    51:1e:86:65:05:59:7a:cd:6c:e8:aa:34:ae:e0:ac:
                    5c:9b:23:f0:1d:6d:f8:bb:be:40:f9:eb:46:5c:5b:
                    fd:98:87:49:b2:a7:6c:63:ee:a0:d0:15:01:c2:3e:
                    fc:55:97:f9:15:44:85:5c:63:99:c8:9c:d5:5f:00:
                    91:d9:61:f0:ee:3b:0a:9e:87:ba:cf:b9:93:a4:4f:
                    c5:e1:2a:64:5d:78:96:59:48:d6:eb:d0:a6:0d:06:
                    2b:65:87:62:65:0d:c2:be:c3:22:8f:a2:73:20:3e:
                    a2:de:26:19:45:f0:48:41:c8:a3:ad:ba:97:5e:c4:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2C:51:2A:45:E6:A8:94:E3:2E:44:17:7C:09:96:BD:1C:C4:04:77
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ACxRKkXmqJTjLkQXfAmWvRzEBHc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.244.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:1a:c5:ae:87:50:df:a7:9b:8a:6e:e9:5d:e2:7e:27:72:1c:
         9d:65:be:3f:cc:a7:da:cd:3f:89:17:78:4d:08:70:d0:63:22:
         dc:b3:05:39:9d:de:84:fa:c8:26:47:45:d2:18:93:42:1a:8f:
         a7:f6:54:e1:57:f5:0b:92:6f:cc:0f:63:b1:fb:44:65:dd:a5:
         10:12:b8:9a:94:f5:fc:6f:61:e4:fc:f4:b0:26:ba:b7:3a:09:
         cc:f3:02:37:d6:31:be:11:a7:51:c0:e5:c6:9a:12:40:ec:b3:
         6c:2e:2d:9f:bd:35:d7:43:0c:61:cf:da:06:37:10:58:09:71:
         57:9a:ee:73:fb:d0:48:92:e8:52:93:b7:36:73:8e:17:b0:35:
         65:31:76:47:56:72:e9:0c:98:4c:f9:b5:c4:17:1a:80:de:ea:
         ea:6d:02:99:08:a7:a9:f4:f9:6d:bc:30:bc:bd:7e:e7:05:9d:
         09:21:04:53:03:94:1a:95:b9:b8:04:dc:f3:61:0c:82:9c:00:
         a4:5d:d7:85:1a:84:e7:0f:02:8b:bc:87:a7:db:b0:24:3c:d0:
         54:bc:93:1d:b4:58:11:76:53:8c:1c:b0:7e:ec:7a:9e:ae:36:
         15:66:88:cb:e4:3d:52:8e:67:01:e9:0a:6d:fd:64:f2:0c:f3:
         36:d9:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:24 2025 by rpki-client