This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/QJrmSCvfzOf2Tr0zoaFoB3x4aM0.roa
File:                     QJrmSCvfzOf2Tr0zoaFoB3x4aM0.roa (raw, json)
Hash identifier:          X5V4202GlJapKXYZKTbbyv6NxeeVfOS7BnVlT72BKdU=
Subject key identifier:   40:9A:E6:48:2B:DF:CC:E7:F6:4E:BD:33:A1:A1:68:07:7C:78:68:CD
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       9C
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/QJrmSCvfzOf2Tr0zoaFoB3x4aM0.roa
Signing time:             Mon 01 Dec 2025 01:29:32 +0000
ROA not before:           Mon 01 Dec 2025 01:29:32 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        210.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  1 01:29:32 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=409AE6482BDFCCE7F64EBD33A1A168077C7868CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:36:c6:ea:9a:e7:c2:da:e1:64:7a:97:35:
                    01:31:23:23:c9:b0:d0:c5:8a:a2:dc:6c:0b:f5:2d:
                    53:97:aa:7c:e1:cd:22:15:68:b6:d3:38:62:eb:39:
                    7e:03:1a:15:d7:54:e0:e8:97:65:aa:23:94:de:9c:
                    b8:ac:80:0c:ed:5b:2e:dc:ad:a7:0e:0a:1a:62:95:
                    3e:4b:63:e6:aa:ba:74:77:e8:f4:94:b9:02:ff:c5:
                    84:28:2c:06:a1:0c:a0:6a:13:30:f9:b5:0e:31:a2:
                    47:f0:fa:28:0e:07:ac:1e:53:a1:5a:0f:a2:24:b2:
                    6d:96:1e:20:95:49:3c:a5:76:79:f6:30:84:63:1d:
                    e8:53:75:be:59:27:a1:dd:b7:3d:92:5e:43:43:dd:
                    99:41:7d:72:5c:ec:0a:1e:31:39:8b:03:59:6d:22:
                    6e:08:4e:a0:40:4d:d4:f5:24:ca:85:d8:41:86:41:
                    59:03:f2:a7:09:eb:67:bb:27:6a:b6:46:e6:3e:34:
                    58:2a:41:12:7c:1e:90:0f:5a:2b:67:8e:e0:fe:1b:
                    1a:da:4e:35:a4:7a:5c:ba:67:ce:09:f2:ca:de:b9:
                    55:23:d8:72:a7:e3:60:72:a4:a4:49:ca:ed:69:80:
                    6e:73:d2:bc:8a:3d:ca:35:d1:43:07:a7:c5:f2:41:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9A:E6:48:2B:DF:CC:E7:F6:4E:BD:33:A1:A1:68:07:7C:78:68:CD
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/QJrmSCvfzOf2Tr0zoaFoB3x4aM0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:32:4d:ee:37:64:c4:7c:0f:e3:64:15:b9:bc:99:d8:4c:
         84:a5:6a:c3:1d:6b:ff:0f:37:20:76:ca:df:46:58:a2:91:fa:
         82:22:a2:37:f3:e5:47:13:23:ab:4d:93:1d:25:51:59:16:98:
         0d:2b:3b:45:3b:fd:b4:7e:e0:79:de:76:e4:93:f7:5c:26:19:
         e3:5a:06:fb:0c:e8:5f:e7:9f:77:60:f3:de:e8:a3:31:6b:2f:
         2e:85:0a:87:a6:dd:c5:fb:36:c5:b5:65:8a:23:3c:38:de:3f:
         11:a3:27:b1:0a:ae:fc:a4:55:8a:81:12:e1:c6:2a:22:5b:32:
         ba:05:59:6d:fd:24:68:6c:6f:29:ff:6a:e2:40:7b:0e:50:40:
         ae:46:6e:59:b6:9e:2b:bc:71:8e:9a:e1:cb:1d:6b:0c:16:bd:
         15:3e:df:aa:20:57:f1:37:7a:24:c9:5f:d6:a8:59:8e:c1:f1:
         68:b5:df:e7:9f:56:9b:32:f1:0a:a1:fe:db:15:a7:a5:74:06:
         d1:d1:9d:2c:03:3d:c1:86:bc:20:65:47:35:cc:47:be:1d:63:
         0f:b9:80:2f:07:e4:cb:3b:84:44:d1:ad:5e:23:24:6a:b2:d5:
         e2:2a:be:a5:b0:52:ca:b3:5b:47:dc:85:d8:21:c1:a8:13:28:
         5e:f1:95:96
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG
QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNTEyMDEw
MTI5MzJaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwOUFFNjQ4MkJERkND
RTdGNjRFQkQzM0ExQTE2ODA3N0M3ODY4Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZ9jbG6prnwtrhZHqXNQExIyPJsNDFiqLcbAv1LVOXqnzhzSIV
aLbTOGLrOX4DGhXXVODol2WqI5TenLisgAztWy7cracOChpilT5LY+aqunR36PSU
uQL/xYQoLAahDKBqEzD5tQ4xokfw+igOB6weU6FaD6Iksm2WHiCVSTyldnn2MIRj
HehTdb5ZJ6Hdtz2SXkND3ZlBfXJc7AoeMTmLA1ltIm4ITqBATdT1JMqF2EGGQVkD
8qcJ62e7J2q2RuY+NFgqQRJ8HpAPWitnjuD+GxraTjWkely6Z84J8sreuVUj2HKn
42BypKRJyu1pgG5z0ryKPco10UMHp8XyQQm7AgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUQJrmSCvfzOf2Tr0zoaFoB3x4aM0wHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM
yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC
M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9RSnJtU0N2ZnpPZjJUcjB6b2FGb0IzeDRhTTAucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMA0pYwDQYJKoZIhvcNAQELBQADggEBAEHwMk3uN2TEfA/jZBW5vJnYTISlasMd
a/8PNyB2yt9GWKKR+oIiojfz5UcTI6tNkx0lUVkWmA0rO0U7/bR+4HneduST91wm
GeNaBvsM6F/nn3dg897oozFrLy6FCoem3cX7NsW1ZYojPDjePxGjJ7EKrvykVYqB
EuHGKiJbMroFWW39JGhsbyn/auJAew5QQK5Gblm2niu8cY6a4csdawwWvRU+36og
V/E3eiTJX9aoWY7B8Wi13+efVpsy8Qqh/tsVp6V0BtHRnSwDPcGGvCBlRzXMR74d
Yw+5gC8H5Ms7hETRrV4jJGqy1eIqvqWwUsqzW0fchdghwagTKF7xlZY=
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:21 2025 by rpki-client