This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Mi62aI0QKfPkeRCUwosQjAHm3es.roa
File:                     Mi62aI0QKfPkeRCUwosQjAHm3es.roa (raw, json)
Hash identifier:          N0uLme5H42dV96XnmtEknNIs1R6j+Uvj+73MB10+5g8=
Subject key identifier:   32:2E:B6:68:8D:10:29:F3:E4:79:10:94:C2:8B:10:8C:01:E6:DD:EB
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       E5
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Mi62aI0QKfPkeRCUwosQjAHm3es.roa
Signing time:             Mon 01 Dec 2025 01:29:27 +0000
ROA not before:           Mon 01 Dec 2025 01:29:27 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        164.70.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:27 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=322EB6688D1029F3E4791094C28B108C01E6DDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:e5:90:19:11:85:c5:64:69:bc:cf:3a:1c:
                    c0:e4:30:c0:01:dc:b6:e3:b1:b7:0a:69:39:25:8e:
                    03:51:da:d8:71:8f:72:66:01:94:76:2a:80:16:62:
                    45:3e:29:5e:4a:ec:1a:1b:cb:4a:2d:7c:65:0d:7c:
                    89:4b:1b:d3:cb:97:05:42:06:e0:4d:0f:4a:ed:f2:
                    40:26:04:98:3b:d7:99:7f:18:2d:d6:52:0a:b7:8d:
                    0d:09:a1:ba:38:b3:27:c7:9c:d0:dc:e6:4b:79:2f:
                    4d:48:7d:c0:db:c7:26:d6:55:e9:27:5d:88:38:86:
                    9d:9c:71:ac:1e:ae:a6:2a:bb:a7:f3:fd:3c:4d:75:
                    b4:e5:28:f5:8c:b3:e5:40:96:e9:a5:55:c3:ed:cb:
                    f7:11:b2:7f:39:76:18:4f:56:14:66:24:8a:e2:72:
                    98:17:88:6c:b3:d2:f9:9b:dd:df:fb:04:b2:ba:6a:
                    ac:0b:90:c7:e0:40:b5:e2:80:f2:a7:de:f3:be:0d:
                    ab:d6:95:51:c3:cd:33:0f:94:1b:d3:0e:8d:32:22:
                    2f:ca:4d:e1:ed:e9:14:91:d5:95:58:f3:41:e3:39:
                    7c:ff:f7:90:d5:fa:8a:87:ef:91:06:38:4e:d4:08:
                    c3:98:38:08:f7:88:01:1c:70:0f:ed:4d:b6:33:17:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2E:B6:68:8D:10:29:F3:E4:79:10:94:C2:8B:10:8C:01:E6:DD:EB
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Mi62aI0QKfPkeRCUwosQjAHm3es.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.70.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:95:4f:9a:bc:a0:f3:5b:68:22:4e:4d:11:8a:98:4a:b8:8b:
         98:01:b7:cf:20:af:ad:35:86:2b:11:84:cf:02:c5:e7:a0:c5:
         73:f4:2a:3b:9e:7a:94:b6:07:5f:b5:8e:8b:c1:b0:07:a2:e6:
         27:5f:73:a2:e6:c9:26:1c:52:9d:45:83:84:b6:14:7d:3b:3e:
         16:8e:83:ab:d6:b0:f1:ae:8e:8a:8f:e9:18:d2:9d:03:0a:7c:
         43:3d:c3:1e:80:42:6b:76:c3:f1:88:c5:f5:ee:15:9d:1d:bd:
         82:88:9b:15:83:3e:6f:48:cd:8f:79:25:bb:e9:23:f4:96:d8:
         a5:e5:d5:1e:a3:27:14:a3:e2:d0:cd:40:fa:12:a8:4b:f6:77:
         bc:39:d1:32:38:6b:e0:18:6e:b1:93:f6:43:80:27:be:f9:0b:
         87:01:31:4a:28:5a:67:59:16:64:ae:de:9f:b2:44:ad:5b:f4:
         b4:ef:63:8f:1e:bf:42:1c:d3:68:d6:95:ca:cf:c5:11:4e:6c:
         56:ba:7e:c0:d5:79:31:23:84:22:cd:82:70:69:3f:df:eb:c1:
         d6:22:b1:f5:fa:e3:3e:0e:30:bb:ab:19:3d:31:fb:a7:a4:2e:
         0c:92:78:a7:f3:c2:6c:24:9e:05:b0:d8:8a:88:7c:bf:1d:d8:
         52:b4:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:21 2025 by rpki-client