This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/NGDsn30x5yBNkHD3KZiziXvvv80.roa
File:                     NGDsn30x5yBNkHD3KZiziXvvv80.roa (raw, json)
Hash identifier:          +tpZSrf/JDdnHPsWyJlljUV87p6v9g4y92r1np4uHsI=
Subject key identifier:   34:60:EC:9F:7D:31:E7:20:4D:90:70:F7:29:98:B3:89:7B:EF:BF:CD
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       E4
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/NGDsn30x5yBNkHD3KZiziXvvv80.roa
Signing time:             Mon 01 Dec 2025 01:29:26 +0000
ROA not before:           Mon 01 Dec 2025 01:29:26 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        161.34.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:26 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=3460EC9F7D31E7204D9070F72998B3897BEFBFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:f3:e0:4f:26:f4:05:15:be:79:27:9f:91:
                    d3:c1:a8:77:2c:d9:52:22:59:59:4e:c9:d6:52:82:
                    60:d4:da:c9:18:50:de:19:4a:f8:70:0c:08:ed:36:
                    3e:46:35:a3:58:5b:25:11:13:d7:26:c1:9c:31:d2:
                    4e:1b:91:c0:49:14:57:2a:06:67:cc:cd:6c:30:f9:
                    e7:53:dd:64:9f:43:f1:da:00:17:08:43:dc:96:7c:
                    ae:69:96:b7:e7:46:f7:11:51:2a:fa:93:2d:22:53:
                    d9:b6:5f:3f:d5:20:e1:0a:55:23:b1:21:ba:36:eb:
                    d6:b8:aa:98:eb:1c:9b:68:bf:71:e8:67:0f:c2:20:
                    b2:27:58:6f:2c:05:37:ab:50:bd:b4:2d:0e:a3:63:
                    02:ef:db:1d:16:91:e4:f3:c2:40:a2:60:41:eb:14:
                    a4:5d:29:be:27:6f:e3:d2:7d:75:7d:28:cc:06:0f:
                    cb:ad:95:c7:a8:29:e1:b9:5e:a8:1c:ef:fe:0d:da:
                    8a:ed:a9:41:37:e8:80:66:9a:d7:c9:c0:d6:e7:e2:
                    b6:14:57:b8:a2:65:06:e7:85:f5:c0:b5:e8:88:01:
                    4e:44:82:25:30:5f:50:38:96:7b:14:36:6e:db:2d:
                    59:ec:76:60:c4:dd:95:8a:64:34:f8:94:f1:6a:e2:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:60:EC:9F:7D:31:E7:20:4D:90:70:F7:29:98:B3:89:7B:EF:BF:CD
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/NGDsn30x5yBNkHD3KZiziXvvv80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.34.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:2c:96:32:2f:92:f6:a2:c6:52:9b:11:9d:a1:69:e5:5d:2f:
         af:66:d6:16:b0:97:9e:82:08:8e:7f:bb:eb:c7:f6:b7:a4:d6:
         a3:eb:13:b8:f5:93:11:19:e0:13:38:24:a6:9f:d0:41:2a:bb:
         5a:91:4d:4f:61:cb:3a:a9:0f:8a:37:84:0f:db:83:c2:3c:37:
         4b:26:d1:36:97:83:ac:86:48:0f:bd:21:ed:0e:b2:9c:47:d7:
         77:51:a2:bc:34:a1:0e:a9:c4:6e:de:01:2f:76:a0:61:af:80:
         42:02:44:81:9e:90:d2:00:f1:2c:79:6b:7c:11:db:8a:f5:c5:
         91:3f:5c:7f:2d:f0:e8:5c:49:f8:68:28:b6:b5:0a:b5:83:77:
         c6:1d:6d:81:71:fc:f5:fb:40:ef:49:f9:80:56:c2:a1:7c:e8:
         26:cf:f8:ab:e1:19:d0:21:c7:94:46:df:f1:10:5f:59:53:90:
         09:60:25:88:bf:6d:d0:ff:84:5c:66:c0:11:0a:d2:91:d7:fa:
         3e:7a:66:90:48:f0:4e:65:16:7f:54:6e:ac:c1:fd:81:9e:0f:
         8e:ff:f2:c9:16:5d:c8:1d:2a:ff:cd:e9:ac:be:29:cd:14:41:
         d9:4b:43:71:f8:77:32:e2:86:df:29:9b:37:70:3a:ec:fd:a7:
         7c:0e:18:30
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTEyMDEw
MTI5MjZaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM0NjBFQzlGN0QzMUU3
MjA0RDkwNzBGNzI5OThCMzg5N0JFRkJGQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN9PPgTyb0BRW+eSefkdPBqHcs2VIiWVlOydZSgmDU2skYUN4Z
SvhwDAjtNj5GNaNYWyURE9cmwZwx0k4bkcBJFFcqBmfMzWww+edT3WSfQ/HaABcI
Q9yWfK5plrfnRvcRUSr6ky0iU9m2Xz/VIOEKVSOxIbo269a4qpjrHJtov3HoZw/C
ILInWG8sBTerUL20LQ6jYwLv2x0WkeTzwkCiYEHrFKRdKb4nb+PSfXV9KMwGD8ut
lceoKeG5Xqgc7/4N2ortqUE36IBmmtfJwNbn4rYUV7iiZQbnhfXAteiIAU5EgiUw
X1A4lnsUNm7bLVnsdmDE3ZWKZDT4lPFq4s8rAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUNGDsn30x5yBNkHD3KZiziXvvv80wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9OR0RzbjMweDV5Qk5rSEQzS1ppemlYdnZ2ODAucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAoSIwDQYJKoZIhvcNAQELBQADggEBAGAsljIvkvaixlKbEZ2haeVdL69m1haw
l56CCI5/u+vH9rek1qPrE7j1kxEZ4BM4JKaf0EEqu1qRTU9hyzqpD4o3hA/bg8I8
N0sm0TaXg6yGSA+9Ie0OspxH13dRorw0oQ6pxG7eAS92oGGvgEICRIGekNIA8Sx5
a3wR24r1xZE/XH8t8OhcSfhoKLa1CrWDd8YdbYFx/PX7QO9J+YBWwqF86CbP+Kvh
GdAhx5RG3/EQX1lTkAlgJYi/bdD/hFxmwBEK0pHX+j56ZpBI8E5lFn9UbqzB/YGe
D47/8skWXcgdKv/N6ay+Kc0UQdlLQ3H4dzLiht8pmzdwOuz9p3wOGDA=
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:17 2025 by rpki-client