This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ANOArFRzHKs4TQuGqe4MFiNhr2s.roa
File:                     ANOArFRzHKs4TQuGqe4MFiNhr2s.roa (raw, json)
Hash identifier:          Fk8eHcDgr9Vt/vgVsyz3C7Aq2CbF5lAQoj/UwZJ4+C4=
Subject key identifier:   00:D3:80:AC:54:73:1C:AB:38:4D:0B:86:A9:EE:0C:16:23:61:AF:6B
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       DF
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ANOArFRzHKs4TQuGqe4MFiNhr2s.roa
Signing time:             Mon 01 Dec 2025 01:29:23 +0000
ROA not before:           Mon 01 Dec 2025 01:29:23 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:23 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=00D380AC54731CAB384D0B86A9EE0C162361AF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:b2:19:9d:8c:a8:0f:65:f6:da:4a:86:9b:
                    a2:19:7a:85:4d:08:f1:3e:53:81:51:a9:11:63:4d:
                    23:74:21:43:ac:b3:45:db:1e:09:62:c0:9c:21:6f:
                    68:42:c1:91:3f:d2:36:09:79:eb:cc:4c:b4:03:09:
                    d6:25:89:51:77:e5:18:7f:3e:95:67:0d:cc:51:0c:
                    36:5a:cc:91:14:2b:6a:31:ba:0a:83:84:93:84:d9:
                    c6:44:dc:97:58:8b:58:23:ec:29:9e:cc:66:c3:d8:
                    e9:80:a3:16:5a:b1:73:60:e5:1d:ae:8d:5d:d7:99:
                    28:f7:1a:28:77:da:59:0e:db:50:88:40:19:68:10:
                    71:a2:06:08:b9:6a:68:17:e6:21:01:aa:b3:eb:6d:
                    ae:14:c3:fb:83:bb:9c:43:ad:55:47:10:09:f9:5b:
                    6e:ea:0d:9b:b0:70:ff:10:c6:47:6b:0e:05:ee:1c:
                    80:a7:88:f0:e7:d4:6c:00:b0:94:1f:90:92:39:c9:
                    75:a3:22:47:d5:26:ff:e5:a4:2f:c6:12:de:40:04:
                    7b:10:19:aa:29:8c:68:f5:94:9b:ae:27:a7:2c:7b:
                    c8:5d:34:35:d6:9f:b5:dd:6b:95:52:82:d1:1b:cc:
                    2b:da:e5:51:54:fa:92:ab:d9:29:31:20:00:dd:51:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D3:80:AC:54:73:1C:AB:38:4D:0B:86:A9:EE:0C:16:23:61:AF:6B
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ANOArFRzHKs4TQuGqe4MFiNhr2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:b2:7a:b0:0b:e3:af:f1:79:37:9b:3b:8c:28:c1:86:98:ad:
         39:89:38:5f:ed:1f:87:33:5f:d3:30:d5:9a:f1:d7:7a:f9:23:
         b4:7a:f4:f6:b7:72:47:4f:54:25:3b:c7:4c:53:b2:44:47:7f:
         89:e1:8c:cd:7b:66:b0:04:fe:42:3c:7c:41:e1:58:44:24:2c:
         d5:95:bb:f0:d1:ae:5b:2e:41:9d:06:c6:51:6f:b1:f9:ec:c1:
         33:d7:6c:fc:87:84:f4:ba:42:63:06:34:9d:93:39:fd:fd:bf:
         ea:53:a7:29:29:c4:71:d6:fa:3d:e1:55:86:b9:57:99:6f:29:
         f0:c5:ac:04:e4:29:81:bf:c8:f5:d3:35:b5:63:71:5a:79:3c:
         ec:1b:1d:73:36:ec:1c:80:f4:88:2c:b6:62:88:8a:e4:85:1e:
         f6:32:d5:c0:23:3e:d6:37:64:49:6d:e0:6f:6f:63:1a:97:6b:
         f8:06:17:b6:76:c2:6c:42:cd:83:9b:7c:63:18:50:5d:af:b1:
         40:90:8e:ff:ae:15:cd:cc:d6:a8:0e:4f:c4:7c:9d:8f:00:61:
         eb:35:c3:02:c9:55:b3:70:d2:ba:44:d7:20:f6:7b:4d:e4:b0:
         1d:bd:5f:0c:56:38:b9:92:b4:de:21:60:3e:fc:6b:a2:85:11:
         f8:4d:e9:cb
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTEyMDEw
MTI5MjNaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwRDM4MEFDNTQ3MzFD
QUIzODREMEI4NkE5RUUwQzE2MjM2MUFGNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdmLIZnYyoD2X22kqGm6IZeoVNCPE+U4FRqRFjTSN0IUOss0Xb
HgliwJwhb2hCwZE/0jYJeevMTLQDCdYliVF35Rh/PpVnDcxRDDZazJEUK2oxugqD
hJOE2cZE3JdYi1gj7CmezGbD2OmAoxZasXNg5R2ujV3XmSj3Gih32lkO21CIQBlo
EHGiBgi5amgX5iEBqrPrba4Uw/uDu5xDrVVHEAn5W27qDZuwcP8QxkdrDgXuHICn
iPDn1GwAsJQfkJI5yXWjIkfVJv/lpC/GEt5ABHsQGaopjGj1lJuuJ6cse8hdNDXW
n7Xda5VSgtEbzCva5VFU+pKr2SkxIADdUf+PAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUANOArFRzHKs4TQuGqe4MFiNhr2swHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9BTk9BckZSekhLczRUUXVHcWU0TUZpTmhyMnMucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBoPjyMA0GCSqGSIb3DQEBCwUAA4IBAQC1snqwC+Ov8Xk3mzuMKMGGmK05iThf
7R+HM1/TMNWa8dd6+SO0evT2t3JHT1QlO8dMU7JER3+J4YzNe2awBP5CPHxB4VhE
JCzVlbvw0a5bLkGdBsZRb7H57MEz12z8h4T0ukJjBjSdkzn9/b/qU6cpKcRx1vo9
4VWGuVeZbynwxawE5CmBv8j10zW1Y3FaeTzsGx1zNuwcgPSILLZiiIrkhR72MtXA
Iz7WN2RJbeBvb2Mal2v4Bhe2dsJsQs2Dm3xjGFBdr7FAkI7/rhXNzNaoDk/EfJ2P
AGHrNcMCyVWzcNK6RNcg9ntN5LAdvV8MVji5krTeIWA+/GuihRH4TenL
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:16 2025 by rpki-client