This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/BgwoYnLzL4XwyiAgmrgBQuKJwqw.roa
File:                     BgwoYnLzL4XwyiAgmrgBQuKJwqw.roa (raw, json)
Hash identifier:          HjwpdOneXAUlh1xsMyN7ZVpvbQEMPAhzn1oM33VtzXM=
Subject key identifier:   06:0C:28:62:72:F3:2F:85:F0:CA:20:20:9A:B8:01:42:E2:89:C2:AC
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       D7
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BgwoYnLzL4XwyiAgmrgBQuKJwqw.roa
Signing time:             Mon 01 Dec 2025 01:29:19 +0000
ROA not before:           Mon 01 Dec 2025 01:29:19 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:19 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=060C286272F32F85F0CA20209AB80142E289C2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:32:1e:cb:f8:4f:c4:48:f7:39:3c:29:fc:da:
                    ee:f2:e0:f0:d0:09:d1:66:f5:f6:80:0b:f7:b2:80:
                    0e:3f:58:7a:87:55:e3:b8:37:b6:19:e4:c3:e8:90:
                    40:e4:e5:a3:cf:72:77:72:93:c8:9d:be:6d:8d:27:
                    41:91:78:27:ff:fe:ad:45:e2:a4:7c:c3:33:d0:76:
                    48:66:1f:c8:8f:7b:9f:50:54:a0:4c:47:ec:9f:58:
                    bd:61:10:21:27:39:ae:6a:32:de:d5:f4:76:85:fa:
                    84:ea:9c:59:74:7b:15:8a:d7:af:28:00:5e:7c:b2:
                    78:79:cf:3f:98:a0:01:06:19:2e:55:2b:fd:eb:66:
                    f0:d8:ea:8b:eb:82:76:6f:60:f1:66:7d:80:48:95:
                    7e:30:d4:1f:66:58:dd:27:a8:76:42:c0:7a:e2:80:
                    aa:61:2b:d7:8f:fa:c9:f0:55:22:67:6b:d3:18:96:
                    48:67:24:e9:5b:33:49:9d:07:44:39:7a:fb:50:3a:
                    b2:e0:66:4b:a5:7a:e2:7a:5a:e4:cc:4c:49:19:aa:
                    ed:49:24:47:ba:ef:16:7b:fa:2f:de:04:16:64:a4:
                    ac:fb:0d:a0:3f:70:7c:ea:1e:33:dc:d4:31:e5:cb:
                    82:c7:fb:a7:1d:1e:04:c0:33:b3:ab:63:c2:d9:c6:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0C:28:62:72:F3:2F:85:F0:CA:20:20:9A:B8:01:42:E2:89:C2:AC
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BgwoYnLzL4XwyiAgmrgBQuKJwqw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:84:7d:c3:0f:22:e1:e1:ee:12:84:b6:25:e8:fa:fb:e4:89:
         d5:71:14:be:2f:17:fc:b0:33:8d:9c:5e:a8:49:3d:b2:20:36:
         64:5d:02:91:6c:52:a0:68:ab:81:e8:ff:68:f8:36:d9:6f:6b:
         39:a3:20:ca:a5:5b:09:a6:70:cf:6e:63:25:e3:59:71:9d:13:
         6b:7d:59:b8:07:7d:27:d0:61:1e:15:9e:51:21:bb:b1:8b:50:
         4f:7f:f8:64:d1:2a:62:78:7d:3f:af:ab:21:30:08:67:f6:e2:
         43:f7:21:c8:11:0c:c6:0e:eb:f3:53:48:40:08:9b:02:99:c6:
         e6:7a:99:05:79:43:64:43:d1:7e:54:06:6c:77:2a:f4:e5:45:
         70:18:bf:e2:36:9f:b0:74:c8:e3:29:cc:8d:8c:30:28:97:c5:
         c0:bc:b2:9d:11:15:d0:c7:e7:1a:34:dc:31:cc:09:c2:19:55:
         02:d0:52:48:df:e4:97:b8:67:3e:df:40:db:88:cf:b4:7c:f1:
         a8:5d:56:4b:b3:22:9e:78:03:d1:22:45:ea:be:23:9a:bc:4b:
         d1:a9:c0:5c:49:ca:57:0b:4b:5e:9c:bc:52:a1:d4:25:99:de:
         90:36:4e:8b:5f:fe:d9:41:95:8e:2e:b8:1f:04:80:87:60:17:
         07:5c:31:cd
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICANcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTEyMDEw
MTI5MTlaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2MEMyODYyNzJGMzJG
ODVGMENBMjAyMDlBQjgwMTQyRTI4OUMyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyMh7L+E/ESPc5PCn82u7y4PDQCdFm9faAC/eygA4/WHqHVeO4
N7YZ5MPokEDk5aPPcndyk8idvm2NJ0GReCf//q1F4qR8wzPQdkhmH8iPe59QVKBM
R+yfWL1hECEnOa5qMt7V9HaF+oTqnFl0exWK168oAF58snh5zz+YoAEGGS5VK/3r
ZvDY6ovrgnZvYPFmfYBIlX4w1B9mWN0nqHZCwHrigKphK9eP+snwVSJna9MYlkhn
JOlbM0mdB0Q5evtQOrLgZkuleuJ6WuTMTEkZqu1JJEe67xZ7+i/eBBZkpKz7DaA/
cHzqHjPc1DHly4LH+6cdHgTAM7OrY8LZxkHbAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUBgwoYnLzL4XwyiAgmrgBQuKJwqwwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9CZ3dvWW5Mekw0WHd5aUFnbXJnQlF1S0p3cXcucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDoPjAMA0GCSqGSIb3DQEBCwUAA4IBAQCDhH3DDyLh4e4ShLYl6Pr75InVcRS+
Lxf8sDONnF6oST2yIDZkXQKRbFKgaKuB6P9o+DbZb2s5oyDKpVsJpnDPbmMl41lx
nRNrfVm4B30n0GEeFZ5RIbuxi1BPf/hk0SpieH0/r6shMAhn9uJD9yHIEQzGDuvz
U0hACJsCmcbmepkFeUNkQ9F+VAZsdyr05UVwGL/iNp+wdMjjKcyNjDAol8XAvLKd
ERXQx+caNNwxzAnCGVUC0FJI3+SXuGc+30DbiM+0fPGoXVZLsyKeeAPRIkXqviOa
vEvRqcBcScpXC0tenLxSodQlmd6QNk6LX/7ZQZWOLrgfBICHYBcHXDHN
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:18 2025 by rpki-client