This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/RN2LRYqeelUW1fgLaHC0U1aCDcA.roa
File:                     RN2LRYqeelUW1fgLaHC0U1aCDcA.roa (raw, json)
Hash identifier:          k9Df0dwOds0O+/toFlZ5oZ7xVQt7MIsVbUxNMw8SXT0=
Subject key identifier:   44:DD:8B:45:8A:9E:7A:55:16:D5:F8:0B:68:70:B4:53:56:82:0D:C0
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       94
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RN2LRYqeelUW1fgLaHC0U1aCDcA.roa
Signing time:             Mon 01 Dec 2025 01:29:28 +0000
ROA not before:           Mon 01 Dec 2025 01:29:28 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        202.17.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  1 01:29:28 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=44DD8B458A9E7A5516D5F80B6870B45356820DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:9b:0b:a0:32:a9:d1:66:38:ff:77:aa:6b:
                    11:3d:2e:cd:4c:19:18:f9:0a:af:35:32:6f:5a:5e:
                    0b:34:3d:2a:18:67:51:ed:12:94:47:01:44:94:08:
                    ec:03:e3:ab:4d:a9:10:37:cb:96:ae:ae:c0:89:f9:
                    84:f8:f8:eb:f9:08:5a:13:37:e0:96:f8:32:4c:67:
                    05:4f:2a:dc:34:f7:35:da:f5:0e:cc:fa:d8:d3:c3:
                    d3:48:7d:1e:76:ce:52:7f:f1:34:43:54:2e:29:31:
                    1c:5c:77:78:18:dd:f3:0c:a1:d7:76:b9:ef:ff:b2:
                    c9:5b:d9:dc:bb:07:b6:7e:21:70:cf:f7:d0:89:9e:
                    f4:d3:21:70:0d:62:5d:4d:db:16:41:60:6f:f2:7b:
                    04:89:77:19:66:59:36:47:38:37:e2:b8:29:9b:ee:
                    43:05:ca:bb:7a:2b:d1:09:41:9b:c6:f0:17:7d:c2:
                    9b:57:f9:33:d3:e3:8a:9a:8f:e1:38:3f:64:a5:d6:
                    d3:01:b2:8e:40:05:ff:54:c6:4c:c7:2f:6f:1b:55:
                    51:98:68:ae:3d:bc:8e:8f:ec:2e:a1:59:2e:d0:88:
                    11:de:24:72:fe:7a:79:1b:88:4b:23:e5:2d:50:14:
                    5b:63:e9:4d:71:dd:d8:b6:c8:3b:da:8a:93:7e:ff:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DD:8B:45:8A:9E:7A:55:16:D5:F8:0B:68:70:B4:53:56:82:0D:C0
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RN2LRYqeelUW1fgLaHC0U1aCDcA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.17.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2f:e6:e4:c5:32:41:99:d1:f5:13:71:8d:99:b2:d8:49:81:81:
         7c:2a:d2:a3:81:b2:27:5f:c7:46:ac:42:a2:22:18:a0:ca:10:
         a1:d2:d5:ea:1b:14:e6:e9:fa:ed:3e:11:a0:c1:99:9e:75:f0:
         d0:fe:51:a5:35:16:e6:4d:f4:be:7b:5e:a1:a3:bc:a6:ad:3f:
         a3:bb:fb:1a:b0:6e:8a:b8:a7:53:0a:02:7b:77:8a:da:8e:f6:
         6e:b4:96:a1:37:d3:c7:c0:05:be:89:ac:e7:cc:15:cd:bc:a5:
         b0:03:6d:d6:b1:27:73:c2:16:ff:fe:36:8c:c3:92:03:71:89:
         3d:3f:64:04:4d:61:68:64:f5:f6:34:1f:3b:0e:7b:4b:b9:cb:
         3f:41:15:07:0a:c2:2f:53:9f:d4:9b:34:2b:35:bf:f6:24:f2:
         35:8a:bb:a4:df:fb:55:6c:8f:8b:28:bb:5e:c8:e8:bc:84:8f:
         17:7c:db:c3:cf:53:c0:55:88:10:c3:85:5c:95:4a:cc:67:6e:
         b3:56:10:cd:1d:ad:1d:3e:39:70:5f:88:9c:9e:61:07:2c:61:
         7d:bb:f2:aa:a2:d9:50:2c:52:ff:b0:0e:ae:2a:32:a0:71:a1:
         88:72:a3:82:0e:6d:7e:ff:f1:8c:d3:22:59:e0:66:82:54:43:
         df:58:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:18 2025 by rpki-client