This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/UnZdcAuO6skqEhRCSg3bpwG3nno.roa
File:                     UnZdcAuO6skqEhRCSg3bpwG3nno.roa (raw, json)
Hash identifier:          7kGeC9SH6GwLxoTEW+vqFf4StHSpvhu+t0EU7HrCFKc=
Subject key identifier:   52:76:5D:70:0B:8E:EA:C9:2A:12:14:42:4A:0D:DB:A7:01:B7:9E:7A
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       DA
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/UnZdcAuO6skqEhRCSg3bpwG3nno.roa
Signing time:             Mon 01 Dec 2025 01:29:21 +0000
ROA not before:           Mon 01 Dec 2025 01:29:21 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  1 01:29:21 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=52765D700B8EEAC92A1214424A0DDBA701B79E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:6c:cd:d4:55:1c:7c:25:e2:1d:22:67:5e:
                    e5:41:92:30:b5:45:cc:99:2e:8b:6d:86:18:c1:a3:
                    91:69:bf:32:28:92:dc:f8:d8:b1:3c:83:48:80:cd:
                    45:57:7d:66:cf:6c:08:98:20:37:47:2c:a4:de:36:
                    a7:c5:62:9f:78:ff:4f:fb:55:bb:aa:04:7c:f4:6c:
                    65:3f:f4:c9:cc:da:1e:5a:3a:e6:3c:0c:75:23:82:
                    66:2a:8e:c7:3d:14:5d:c1:32:a1:a4:ad:89:32:0e:
                    ee:dd:a2:c6:2c:74:6b:ee:01:6f:a9:d2:b6:06:de:
                    33:aa:f8:ed:72:5d:5c:b4:93:dc:52:7e:5c:65:d1:
                    a8:a9:35:e6:e7:6a:05:d4:41:85:07:a3:5b:90:ef:
                    3c:37:8e:ba:44:18:dc:50:8e:cf:31:48:b0:7d:c4:
                    b7:44:75:62:fa:a0:11:ad:9b:bb:10:f4:67:f8:e8:
                    89:02:c1:78:4a:f7:19:74:0c:7e:1c:f3:10:c9:e8:
                    60:54:5c:30:44:1a:97:0a:8b:3f:92:30:9e:ed:e8:
                    4c:b1:ad:69:fa:ed:5e:0e:74:b2:be:23:6f:fd:22:
                    85:b4:09:37:e6:e2:b1:d3:56:99:04:e9:39:68:b5:
                    a8:67:89:f2:b3:1f:18:93:d1:cd:2b:2e:a3:d7:d2:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:76:5D:70:0B:8E:EA:C9:2A:12:14:42:4A:0D:DB:A7:01:B7:9E:7A
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/UnZdcAuO6skqEhRCSg3bpwG3nno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:0a:f6:d3:4e:f4:65:f2:e1:9c:a8:9b:29:a7:57:db:90:
         50:43:d6:fc:25:c8:b1:e5:7a:b6:2a:29:10:75:58:ca:d9:4f:
         45:97:3a:eb:b0:8d:63:05:35:be:2a:ce:33:2b:3a:8e:10:05:
         f6:d0:0a:b9:20:87:ec:45:bc:9d:a1:4e:a8:3c:79:48:2e:b7:
         34:2c:44:34:b0:b4:d0:82:33:ac:74:96:7d:b1:73:81:64:7c:
         48:e8:f6:6d:e3:31:fe:c7:ee:bd:64:26:2c:b8:b8:2f:59:cd:
         2f:51:53:3e:82:ed:3d:bf:0b:79:66:14:8c:88:27:88:56:54:
         3e:74:96:bb:1d:b8:6f:54:0f:5b:66:1c:0e:e3:69:d8:d0:44:
         dc:d5:e7:43:75:af:22:ac:1c:44:ad:4a:2a:4e:e5:83:bd:92:
         df:03:24:af:40:61:01:5c:04:89:fe:e3:52:e8:4a:c1:bc:de:
         6a:bb:d8:71:4e:e9:8e:e4:c6:0b:93:61:82:1a:1d:2b:b5:72:
         47:49:a4:bc:9f:c8:91:57:1f:c1:85:01:34:37:56:0f:ab:c8:
         66:6b:01:99:e7:df:5b:00:9e:15:bb:d5:f3:f6:96:bb:f0:ec:
         a4:65:58:c6:ab:46:a4:87:ef:17:51:8d:1e:29:46:ec:5f:ce:
         85:9f:d3:22
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICANowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTEyMDEw
MTI5MjFaFw0yNjExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyNzY1RDcwMEI4RUVB
QzkyQTEyMTQ0MjRBMEREQkE3MDFCNzlFN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/NGzN1FUcfCXiHSJnXuVBkjC1RcyZLotthhjBo5FpvzIoktz4
2LE8g0iAzUVXfWbPbAiYIDdHLKTeNqfFYp94/0/7VbuqBHz0bGU/9MnM2h5aOuY8
DHUjgmYqjsc9FF3BMqGkrYkyDu7dosYsdGvuAW+p0rYG3jOq+O1yXVy0k9xSflxl
0aipNebnagXUQYUHo1uQ7zw3jrpEGNxQjs8xSLB9xLdEdWL6oBGtm7sQ9Gf46IkC
wXhK9xl0DH4c8xDJ6GBUXDBEGpcKiz+SMJ7t6EyxrWn67V4OdLK+I2/9IoW0CTfm
4rHTVpkE6TlotahnifKzHxiT0c0rLqPX0iaFAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUUnZdcAuO6skqEhRCSg3bpwG3nnowHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9VblpkY0F1TzZza3FFaFJDU2czYnB3RzNubm8ucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBoPjMMA0GCSqGSIb3DQEBCwUAA4IBAQBfGQr20070ZfLhnKibKadX25BQQ9b8
Jcix5Xq2KikQdVjK2U9FlzrrsI1jBTW+Ks4zKzqOEAX20Aq5IIfsRbydoU6oPHlI
Lrc0LEQ0sLTQgjOsdJZ9sXOBZHxI6PZt4zH+x+69ZCYsuLgvWc0vUVM+gu09vwt5
ZhSMiCeIVlQ+dJa7HbhvVA9bZhwO42nY0ETc1edDda8irBxErUoqTuWDvZLfAySv
QGEBXASJ/uNS6ErBvN5qu9hxTumO5MYLk2GCGh0rtXJHSaS8n8iRVx/BhQE0N1YP
q8hmawGZ599bAJ4Vu9Xz9pa78OykZVjGq0akh+8XUY0eKUbsX86Fn9Mi
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:19 2025 by rpki-client