This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/NuQaSErFO6oXrY40PD7wxkwjw_0.roa
File:                     NuQaSErFO6oXrY40PD7wxkwjw_0.roa (raw, json)
Hash identifier:          nWjRYhJygapKR4pmzjR28vLa9iMxcI5dr+yUslJQcJw=
Subject key identifier:   36:E4:1A:48:4A:C5:3B:AA:17:AD:8E:34:3C:3E:F0:C6:4C:23:C3:FD
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       DB
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/NuQaSErFO6oXrY40PD7wxkwjw_0.roa
Signing time:             Mon 01 Dec 2025 01:29:21 +0000
ROA not before:           Mon 01 Dec 2025 01:29:21 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:21 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=36E41A484AC53BAA17AD8E343C3EF0C64C23C3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:83:62:a1:c4:6a:a6:23:dd:bb:79:a3:8a:
                    a4:28:43:3d:3f:f2:45:3f:78:51:c5:cf:b0:2f:87:
                    73:a7:a5:4a:79:9a:38:fd:db:7e:d4:29:52:76:6d:
                    a7:f8:68:1e:f0:84:0b:d2:e0:98:15:f5:b0:16:f0:
                    fa:b6:7f:c1:0c:d1:9a:3e:d5:78:ce:53:6c:f5:7e:
                    b9:c9:5c:06:6e:2f:2f:01:68:a1:59:d8:ab:d6:e5:
                    b0:70:29:a3:0e:40:56:3f:15:43:6d:6e:b5:36:a3:
                    76:cd:b2:bc:0d:83:68:fc:c5:b2:a3:8e:53:14:ff:
                    52:c2:49:30:87:27:d3:f1:cc:1e:f4:11:07:96:d2:
                    41:b6:27:fd:06:65:50:f6:ba:f9:ac:64:f3:79:a8:
                    29:a5:5c:0f:48:33:b1:c6:e1:00:2f:03:c5:bf:3a:
                    ab:79:78:68:02:03:d1:92:67:d5:1e:a4:f1:50:ea:
                    74:1a:d2:4a:ca:ca:af:11:9c:01:44:0b:b1:1d:1a:
                    3b:92:86:84:ea:72:78:db:02:3e:b8:f0:5a:47:5b:
                    5e:43:64:47:ae:51:d1:dc:77:0d:ab:13:89:83:da:
                    b4:48:18:8b:41:6b:55:7a:0f:57:dc:10:c5:7b:56:
                    91:bc:a0:67:4d:eb:8d:0d:e4:bc:0c:a1:25:28:22:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E4:1A:48:4A:C5:3B:AA:17:AD:8E:34:3C:3E:F0:C6:4C:23:C3:FD
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/NuQaSErFO6oXrY40PD7wxkwjw_0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:6d:4f:b6:ab:7e:db:0a:97:43:ef:9a:ac:d6:ef:6d:80:
         d9:39:33:8f:0e:53:5d:4e:77:6a:ef:6e:9e:9f:a3:1a:21:09:
         58:4a:4a:90:59:e0:b7:33:75:ab:6e:9e:21:95:b2:80:b6:dd:
         2a:a9:11:83:c5:d1:28:e1:6e:3d:a7:a1:8a:c4:74:bc:85:f5:
         49:e3:57:a8:e4:85:a6:d5:d5:13:27:12:df:0d:c6:2b:44:56:
         f8:6c:8c:86:95:77:c3:e6:40:07:07:d5:b2:3d:38:08:4c:29:
         94:36:bd:08:7a:43:24:a5:8b:0e:f8:8b:b6:30:b5:d5:9b:46:
         7c:86:52:0c:0d:a3:e6:b6:14:8d:3f:d9:0e:aa:24:14:24:02:
         4b:ef:9d:26:1f:b8:f0:6e:6e:fb:f3:be:30:49:6b:2b:f3:37:
         da:db:76:33:8c:b7:01:7e:c7:01:cd:29:67:30:68:ee:eb:73:
         46:0b:32:79:29:c0:7b:d3:6c:0a:05:53:32:83:ce:7c:24:cf:
         92:91:95:99:49:db:b8:1d:0a:ae:fb:f3:d5:8e:b8:ac:aa:49:
         b3:fb:3f:18:b5:c0:f5:c5:83:a0:46:c0:d4:85:60:0d:fb:65:
         e1:12:e2:11:dd:e7:25:e5:0e:09:95:75:ed:02:c9:13:36:7e:
         ec:4d:06:e6
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTEyMDEw
MTI5MjFaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM2RTQxQTQ4NEFDNTNC
QUExN0FEOEUzNDNDM0VGMEM2NEMyM0MzRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKqINiocRqpiPdu3mjiqQoQz0/8kU/eFHFz7Avh3OnpUp5mjj9
237UKVJ2baf4aB7whAvS4JgV9bAW8Pq2f8EM0Zo+1XjOU2z1frnJXAZuLy8BaKFZ
2KvW5bBwKaMOQFY/FUNtbrU2o3bNsrwNg2j8xbKjjlMU/1LCSTCHJ9PxzB70EQeW
0kG2J/0GZVD2uvmsZPN5qCmlXA9IM7HG4QAvA8W/Oqt5eGgCA9GSZ9UepPFQ6nQa
0krKyq8RnAFEC7EdGjuShoTqcnjbAj648FpHW15DZEeuUdHcdw2rE4mD2rRIGItB
a1V6D1fcEMV7VpG8oGdN640N5LwMoSUoIs25AgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUNuQaSErFO6oXrY40PD7wxkwjw/0wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9OdVFhU0VyRk82b1hyWTQwUEQ3d3hrd2p3XzAucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAoPjPMA0GCSqGSIb3DQEBCwUAA4IBAQBaZ21Ptqt+2wqXQ++arNbvbYDZOTOP
DlNdTndq726en6MaIQlYSkqQWeC3M3Wrbp4hlbKAtt0qqRGDxdEo4W49p6GKxHS8
hfVJ41eo5IWm1dUTJxLfDcYrRFb4bIyGlXfD5kAHB9WyPTgITCmUNr0IekMkpYsO
+Iu2MLXVm0Z8hlIMDaPmthSNP9kOqiQUJAJL750mH7jwbm77874wSWsr8zfa23Yz
jLcBfscBzSlnMGju63NGCzJ5KcB702wKBVMyg858JM+SkZWZSdu4HQqu+/PVjris
qkmz+z8YtcD1xYOgRsDUhWAN+2XhEuIR3ecl5Q4JlXXtAskTNn7sTQbm
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:12 2025 by rpki-client