This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/gOWCiBf71JIFMCWcOtL2x_uEXzQ.roa
File:                     gOWCiBf71JIFMCWcOtL2x_uEXzQ.roa (raw, json)
Hash identifier:          /6X/WIisVsd8y7VS4ICFq3FL8GO+COTPebdF8PE/wOU=
Subject key identifier:   80:E5:82:88:17:FB:D4:92:05:30:25:9C:3A:D2:F6:C7:FB:84:5F:34
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       9E
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gOWCiBf71JIFMCWcOtL2x_uEXzQ.roa
Signing time:             Mon 01 Dec 2025 01:29:33 +0000
ROA not before:           Mon 01 Dec 2025 01:29:33 +0000
ROA not after:            Sun 15 Nov 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        210.165.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  1 01:29:33 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=80E5828817FBD4920530259C3AD2F6C7FB845F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:20:c4:e4:16:2a:19:d9:29:ef:60:27:33:
                    89:c2:fc:f4:9e:eb:d0:b9:df:a1:78:c2:bd:d3:fe:
                    06:18:4d:60:21:f8:0d:76:85:d8:9f:8b:a0:56:95:
                    ab:ec:9a:75:9d:4d:29:0e:db:77:8b:27:87:8c:ca:
                    c5:d9:dc:44:1b:06:8d:8a:3e:c4:b4:37:f4:7b:1b:
                    2e:59:51:a4:65:78:54:e3:19:99:12:2b:36:ec:c7:
                    d0:ca:30:d1:bb:3f:86:e4:6b:84:70:92:01:a5:64:
                    a9:33:f4:6e:1a:25:23:36:c0:c9:67:e9:3c:09:42:
                    95:ed:4d:c0:f6:94:83:b2:d7:dc:90:8a:49:82:30:
                    17:0d:46:bc:4d:38:c1:ae:0c:a4:1a:ce:ab:2e:5d:
                    e1:51:3b:d8:c2:82:4f:8d:00:42:8f:19:02:4d:fb:
                    86:96:93:d7:ba:b7:8d:b4:6f:b5:a6:ec:a1:4e:df:
                    d0:30:0c:11:0c:d1:c5:df:51:a2:01:bc:68:c8:31:
                    ca:1c:2d:65:fb:a7:80:6d:59:87:07:b8:c8:89:5b:
                    04:93:95:06:8c:4b:a1:9d:16:7b:90:2e:25:b7:7b:
                    30:d0:c7:48:6e:fe:c3:c8:fa:1c:3f:05:64:ed:65:
                    f6:69:24:23:d4:d3:39:d3:b7:c0:1d:39:73:16:a8:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E5:82:88:17:FB:D4:92:05:30:25:9C:3A:D2:F6:C7:FB:84:5F:34
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gOWCiBf71JIFMCWcOtL2x_uEXzQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:92:a7:f8:6a:e4:89:2b:1c:1e:29:b7:57:13:67:bc:26:
         5c:c5:e8:61:c8:01:f8:01:77:84:87:47:c4:d7:2d:2b:05:94:
         17:c4:5e:84:d9:e1:ac:a2:c8:02:24:c6:10:a2:d9:12:81:8e:
         95:4a:61:c4:47:2f:f6:61:dc:e0:bb:66:47:12:e6:00:95:95:
         a5:70:e3:e0:79:ea:13:ab:c4:e3:54:e0:69:79:8a:65:44:59:
         28:63:b9:a7:30:86:de:c4:ba:b5:12:f9:cb:89:fd:05:50:7f:
         f0:c3:55:25:81:02:16:b5:b7:7c:6f:36:83:01:05:fc:d1:d3:
         8d:94:dc:eb:b1:c1:6a:b2:cb:08:e5:da:86:81:50:66:49:0f:
         40:af:a3:d3:6e:66:ee:77:31:9e:0b:66:19:78:1c:2f:36:77:
         91:07:ea:df:64:dd:a3:27:25:6a:a5:cb:1f:fc:8a:6f:3b:21:
         09:6e:ff:92:cf:8b:be:e8:49:57:6b:a7:a2:3a:4d:b9:cc:44:
         26:3e:fb:7d:98:9f:de:97:43:99:81:39:58:df:3f:42:fd:21:
         98:bc:94:2e:72:80:18:f1:67:8d:b6:bb:d7:da:d4:4c:25:3c:
         fc:2a:cc:92:73:0e:74:13:62:7f:e0:b2:3f:19:16:5c:6e:e1:
         45:33:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:07 2025 by rpki-client