This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/T8XQmktOptsd3XNiGK-sWFXIZP8.roa
File:                     T8XQmktOptsd3XNiGK-sWFXIZP8.roa (raw, json)
Hash identifier:          QyqdTpjmqA7kWTKnn0vvNZFbv2Vl40iis0txDvSj71w=
Subject key identifier:   4F:C5:D0:9A:4B:4E:A6:DB:1D:DD:73:62:18:AF:AC:58:55:C8:64:FF
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       9F
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/T8XQmktOptsd3XNiGK-sWFXIZP8.roa
Signing time:             Mon 01 Dec 2025 01:35:25 +0000
ROA not before:           Mon 01 Dec 2025 01:35:25 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        211.2.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 08:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  1 01:35:25 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=4FC5D09A4B4EA6DB1DDD736218AFAC5855C864FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:20:a7:75:be:3b:a8:42:19:d8:9d:f0:06:
                    8c:94:62:1a:57:cf:6e:4c:00:b5:a0:2b:9c:52:f5:
                    77:2c:f9:2d:73:fe:b4:44:a2:74:cc:3d:a5:5a:6c:
                    1c:ca:1d:15:70:f8:ab:72:75:10:38:3a:d1:76:a1:
                    87:e0:4c:27:3a:a9:da:90:df:1d:48:56:6c:2f:3a:
                    ab:31:45:c7:d3:35:dd:35:6f:03:55:06:b4:68:f5:
                    aa:9b:09:90:c6:81:35:58:3f:4f:77:1c:a9:71:55:
                    82:29:e1:2a:d7:6b:cc:6d:9e:18:9d:ac:55:ed:a8:
                    fc:6e:43:33:19:8e:2a:93:1c:c7:e7:e9:e6:d6:f6:
                    d5:bf:98:a3:07:6f:2d:7f:20:6d:f7:4b:7c:a9:82:
                    22:91:ac:fd:6c:20:76:39:0a:5d:b0:8c:51:06:53:
                    6a:62:20:65:f8:63:9a:8c:77:12:9d:3c:06:3d:83:
                    3c:28:c8:7c:82:4e:67:fa:f5:94:76:93:92:56:d7:
                    37:50:28:77:af:f2:e5:6b:fd:9f:3f:5d:91:95:40:
                    12:0b:97:2d:c8:db:ff:ee:89:b3:39:73:ee:53:cc:
                    24:36:11:e0:6c:c8:a3:e6:5a:de:b8:b6:3b:d0:6f:
                    4a:72:3e:a8:47:c2:78:5d:31:29:94:9e:70:cd:cb:
                    07:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C5:D0:9A:4B:4E:A6:DB:1D:DD:73:62:18:AF:AC:58:55:C8:64:FF
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/T8XQmktOptsd3XNiGK-sWFXIZP8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.2.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:2b:2b:ce:0e:50:df:34:27:7e:d4:e5:6a:2e:ae:7b:75:
         9a:7f:15:56:7a:04:d7:51:f8:48:f7:23:22:49:6c:f1:2d:a1:
         e0:0f:c5:78:64:46:e2:b6:88:fe:35:59:80:94:74:65:1e:77:
         a6:db:14:12:b0:e1:e3:16:0b:cd:a4:81:5d:ac:99:fa:c1:4c:
         53:7e:77:89:d5:63:63:00:01:2f:85:a1:6b:39:c9:e2:4e:19:
         81:8a:76:ea:75:50:a3:74:26:0a:8d:09:19:eb:ed:2a:66:db:
         de:53:c6:e4:3b:1b:bb:43:c0:81:37:e7:dd:2e:14:f4:af:3f:
         3a:90:5c:21:b7:c8:ac:2c:9a:50:1d:b9:bd:7a:dc:c7:a8:c0:
         2b:2e:42:81:51:36:c2:51:19:ba:22:88:b9:c8:33:78:2a:fb:
         54:13:72:f0:f7:d5:44:9f:e1:18:cf:82:2d:b4:47:ce:e6:5b:
         4e:85:c6:40:19:3a:2b:4b:51:97:19:16:5c:1b:7f:a3:07:22:
         db:7f:8e:5f:71:06:01:f6:39:c3:b8:e4:03:f0:10:69:27:09:
         28:f4:b1:bb:51:dd:9e:96:75:28:19:11:e6:4b:d4:6a:8c:a4:
         0d:80:c7:02:8c:5b:80:69:ad:cb:97:6c:fa:26:f5:2f:0b:88:
         d9:c5:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:17 2025 by rpki-client