This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/J7tpAysj_0solk5AU_81Qlyns7g.roa
File:                     J7tpAysj_0solk5AU_81Qlyns7g.roa (raw, json)
Hash identifier:          OuUk68wpoEfqIZA45cofMXxhcdo6DvQYUDNdc6TEO6Q=
Subject key identifier:   27:BB:69:03:2B:23:FF:4B:28:96:4E:40:53:FF:35:42:5C:A7:B3:B8
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       D8
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/J7tpAysj_0solk5AU_81Qlyns7g.roa
Signing time:             Mon 01 Dec 2025 01:29:20 +0000
ROA not before:           Mon 01 Dec 2025 01:29:20 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:20 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=27BB69032B23FF4B28964E4053FF35425CA7B3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:4b:fe:c2:35:89:47:13:33:25:57:2d:f3:
                    1e:c2:bd:b8:cf:ee:b3:64:11:ce:14:c7:88:0f:fc:
                    93:22:d4:64:53:2e:d7:d6:02:1a:d5:e1:8a:44:c2:
                    4a:1d:6f:84:c0:88:9c:8d:b9:63:04:2f:81:84:4d:
                    09:18:13:4b:77:4c:92:1b:3c:b9:10:05:93:fd:73:
                    c6:4c:99:9d:c6:dc:e4:a4:d8:5b:02:8d:25:a4:51:
                    f7:7a:f7:90:e9:74:fb:9a:33:96:0e:b5:cc:a6:6a:
                    06:f3:f6:4e:31:2f:dd:53:ac:8c:04:4a:85:b0:e8:
                    5a:45:e2:12:11:49:ad:d9:a0:7c:6e:40:5c:2e:98:
                    4a:74:dc:96:87:b2:24:3b:60:f0:9b:e8:7c:0d:c6:
                    c5:15:d0:f7:a3:b6:54:d7:8d:fe:d3:0a:d9:54:aa:
                    98:4b:42:3a:96:b2:bc:dd:af:9e:05:46:e5:58:19:
                    1c:29:41:b0:8b:7c:9b:02:ca:ad:a2:21:2a:43:9e:
                    b5:05:1e:21:dd:7f:33:27:80:7c:12:f1:3d:8e:fb:
                    5a:9d:7c:46:e4:ac:bf:cd:19:3c:46:0f:6f:43:d4:
                    18:5c:5f:ff:25:9b:1a:58:16:a4:96:1d:13:16:c6:
                    b7:ea:44:5d:27:3f:ef:c0:98:73:80:3d:68:0a:6a:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BB:69:03:2B:23:FF:4B:28:96:4E:40:53:FF:35:42:5C:A7:B3:B8
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/J7tpAysj_0solk5AU_81Qlyns7g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:b7:41:df:5b:4d:c7:2f:cb:f9:15:d5:9d:4c:1a:d0:a5:3e:
         b5:e5:4c:ca:60:89:dd:9e:9b:3f:2c:43:e6:a4:54:33:e2:0f:
         af:3c:b6:46:01:38:9f:c0:b0:7c:fb:46:33:dc:71:35:13:15:
         68:c7:b5:b6:4a:b9:05:ce:32:c5:25:e1:23:57:fe:53:bf:cb:
         6d:55:15:a2:d5:b4:77:16:94:65:b2:3d:f0:bf:2e:04:da:87:
         6a:fb:88:1e:ef:80:5f:27:bd:24:c7:f2:04:14:1c:83:11:26:
         0e:4c:6a:67:6e:46:25:e1:78:bf:c9:24:d5:33:eb:23:68:c0:
         a0:6b:42:a2:da:e5:0e:fe:dd:d8:cc:b4:72:db:e0:b5:73:ee:
         55:d0:ca:60:d0:e7:81:5d:48:3d:84:41:44:c8:69:0c:5f:33:
         6d:7b:df:ff:6d:d9:7b:9b:75:de:28:5b:54:54:ea:e9:0b:00:
         57:d6:9d:64:3c:9d:d0:57:8d:18:ba:d9:0c:e4:87:45:c7:be:
         fb:98:1f:d5:da:19:f3:b3:be:bc:cf:c5:f6:30:fa:28:f0:bc:
         86:62:08:6b:c6:33:25:e9:0e:06:f9:a4:7e:3b:6e:19:d0:47:
         0e:5c:ec:8a:1b:e6:d3:a6:e0:71:2e:e3:58:b2:71:c7:2c:1b:
         d0:27:2c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:19 2025 by rpki-client